The Genomic Data Protection Act would establish consumer privacy rights for people who use direct-to-consumer genetic testing services like ancestry kits and health screening tests. The bill requires these companies to provide consumers with easy ways to access their genetic data, delete their accounts, and request destruction of their biological samples (such as saliva or blood), with companies required to fulfill deletion requests within 30 days. Companies must clearly notify consumers about their rights and inform them if the company is being purchased by another entity, giving consumers 30 days to decide whether to delete their data under the new owner. The Federal Trade Commission would enforce the law and could impose penalties for violations, treating noncompliance as an unfair or deceptive business practice. The law includes exceptions allowing companies to retain data if required by court order or legal regulation, and permits the use of properly de-identified genetic data for medical research purposes.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.