An Act providing for duties of direct-to-consumer genetic testing companies and for prohibition on disclosure of genetic data of consumers; and imposing civil penalties.

HB 1530, the Genetic Information Privacy Act, requires direct-to-consumer genetic testing companies operating in Pennsylvania to protect residents' genetic data. Companies must obtain clear, separate consent for data collection, use, sharing, and retention; implement security measures; and provide consumers with access to or deletion of their data. The bill specifically prohibits sharing genetic data with insurers, employers, or third parties without explicit written consent. Violations could result in $2,500 civil penalties per incident, enforced by the Attorney General’s office. The law applies to Pennsylvania residents and covers genetic data like DNA test results, but excludes research data collected under federal health privacy rules.