Genetic Information Privacy Act

GIPA
active

Regulates direct-to-consumer genetic testing companies. It requires plain-language privacy notices, separate express consent for each use, storage, transfer, and marketing use of genetic data or samples, reasonable security, and ways for consumers to access and delete data and have samples destroyed. It also bars sharing genetic data with health, life, disability, or long-term care insurers or employers.

Jurisdiction

California

Jurisdiction Type

state

Country

United States

Effective Date

1/1/2022

Enforcing Authority

California Attorney General, district attorneys, and specified city attorneys; also on complaint of a person who suffered injury and lost money or property

Fines Under This Regulation

0

Total Fine Amount (USD)

--