California · legislation
SB 41 (2021)
Genetic Information Privacy Act
EnactedTopics: Genetic privacy · Direct-to-consumer genetic testing · Consent · Data deletion · Sample destruction
Summary
California SB 41 established requirements for covered direct-to-consumer genetic testing companies, including privacy notices, express consent for specified uses and disclosures, security practices, access and deletion procedures, and biological-sample destruction following consent revocation.
What the law or policy does
The act requires covered companies to publish specified notices, obtain separate express consent for listed uses and disclosures, provide access and deletion mechanisms, maintain reasonable security practices, and honor qualifying consent revocations.
What this means
Covered companies must explain their genetic-data practices and obtain specific consent for several uses. Consumers can revoke consent and request account or data deletion and sample destruction, subject to the law's scope and exceptions.
Primary sources
- SB 41 bill text, chaptered version. California Legislative Information. Accessed August 31, 2026.
Record details
Record history
- December 7, 2020: Bill introduced. Source: California Legislative Information.
- October 6, 2021: Approved by the Governor and chaptered. Source: California Legislative Information.
- August 31, 2026: Record created from the chaptered bill text. Source: Project review.
Technical metadata
Record ID: ca-sb-41-2021
Topics: genetic-privacy, direct-to-consumer-testing, consent, data-deletion, sample-destruction
Canonical source file: data/states/california/ca-sb-41-2021.yaml
Cite this record
Who Owns Your DNA? SB 41 (2021): Genetic Information Privacy Act. U.S. Genetics & Genomics Law and Policy Tracker. Record version 1.0. Accessed [date].