State StatuteCalifornia: Cal. Civil Code 56.18 et seq.

NHGRI summary

Creates the Genetic Information privacy Act. Requires a direct-to-consumer genetic testing company to do the following: (1) provide clear and complete information regarding the company�s policies and procedures for the collection, use, maintenance, and disclosure of genetic data; and (2) obtain a consumer�s express consent for collection, use, and disclosure of the consumer�s genetic data including, at a minimum, separate and express consent for each circumstance specified. Genetic data is defined as any data, regardless of its format, that results from the analysis of a biological sample from a consumer, or from another element enabling equivalent information to be obtained, and concerns genetic material. Genetic material includes, but is not limited to, deoxyribonucleic acids (DNA), ribonucleic acids (RNA), genes, chromosomes, alleles, genomes, alterations or modifications to DNA or RNA, single nucleotide polymorphisms (SNPs), uninterpreted data that results from the analysis of the biological sample, and any information extrapolated, derived, or inferred therefrom. Genetic data does not include deidentified data or data or a biological sample that is collected, used, maintained, and disclosed exclusively for scientific research conducted by an investigator with an institution that holds an assurance with the United States Department of Health and Human Services pursuant to Part 46 (commencing with Section 46.101) of Title 45 of the Code of Federal Regulations, in compliance with all applicable federal and state laws and regulations for the protection of human subjects in research.