Alabama Genetic Data Privacy Act

Regulates direct-to-consumer genetic testing companies. They must post plain-language privacy notices and get express consent for initial collection and use, for each transfer to third parties, for secondary uses, and for genetic-data-based marketing, plus informed consent for research. Consumers can access their data, delete their accounts, and have samples destroyed.