Genetic Information Privacy Act (direct-to-consumer genetic testing)

Enacted in June 2026 and effective on passage, this law regulates consumer genetic testing companies such as ancestry and health DNA services. They must publish plain-language privacy information, get separate express consent for each use, storage, transfer and genetic-based marketing, let consumers access and delete data and destroy samples, secure genetic data, and not share it with insurers or employers.