Genetic Testing Companies, requiring consent to release customers' genetic data

This bill, known as the Alabama Genetic Data Privacy Act, requires genetic testing companies to get explicit permission from customers before using, keeping, or sharing their genetic information. Under the new rules, companies must clearly explain their data policies and obtain separate consent for each specific action, such as sharing data for research or marketing additional services. The legislation also gives consumers the right to access their data, delete their accounts, and request the destruction of their samples and genetic records within a set timeframe. To enforce these protections, the bill establishes civil penalties for companies that violate the consent requirements and assigns enforcement duties to the state Attorney General.