Genetic Information Privacy Act

Regulates direct-to-consumer genetic testing companies. They must give clear notice of their genetic data practices, get express consent to collect and use genetic data, get separate consent for third-party transfers, secondary uses, sample retention, and genetic-data-based marketing, and let consumers access and delete their data and have samples destroyed. Disclosure to insurers or employers needs written consent, and law enforcement access requires valid legal process.