Bill > S0767

This bill establishes the Genetic Information Privacy Act, which creates comprehensive privacy protections for consumers' genetic data obtained through direct-to-consumer genetic testing services. The legislation requires genetic testing companies to provide clear, prominent privacy notices explaining their data collection, use, and sharing practices, and to obtain express consent from consumers for each specific use of their genetic data, including storage of biological samples, marketing purposes, and third-party data transfers. The bill defines genetic data broadly, covering DNA, RNA, chromosomes, and derived information, and mandates that companies implement robust security procedures to protect this sensitive information. Companies must also allow consumers to easily access, delete, or destroy their genetic data and biological samples, and prohibits discrimination against consumers who exercise these rights. The act includes significant legal protections, with potential civil penalties ranging from $1,000 to $10,000 for violations, and ensures that the law provides the greatest possible privacy protections. Notably, the bill contains specific exclusions for medical research, healthcare providers, and certain workplace health and safety contexts, reflecting a nuanced approach to genetic data privacy that balances consumer protection with legitimate scientific and medical needs.

Business and Industry, Justice

https://status.rilegislature.gov/