The Genomic Data Protection Act would give consumers the right to access, delete, and control their genetic information held by direct-to-consumer genomic testing companies. Companies offering DNA testing services would be required to provide clear, easy-to-use mechanisms for consumers to delete their accounts, destroy biological samples, and receive notification of these deletions within 30 days. The bill also mandates that companies notify customers at least 30 days before being purchased or acquired by another entity and must clearly disclose that deidentified genetic data may be used for medical or scientific research. The Federal Trade Commission would enforce these protections and must issue implementing regulations within one year of the law's enactment, treating violations as unfair or deceptive business practices. The law includes exceptions allowing companies to retain data if required by court order, warrant, subpoena, or other legal requirements.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.