Genomic Data Protection Act

S 863, the Genomic Data Protection Act, gives consumers greater control over their genetic information collected by direct-to-consumer genetic testing companies (like 23andMe or AncestryDNA). It requires these companies to provide simple tools for consumers to access their genomic data, delete their accounts (including associated data), and request destruction of biological samples (such as saliva swabs). Companies must also clearly disclose how deidentified data may be used for research and notify consumers 30 days before a company acquisition, detailing how consumer rights will be honored under new ownership. The Federal Trade Commission will enforce these requirements as unfair or deceptive practices under existing law, with companies required to fulfill deletion requests within 30 days. This bill directly affects consumers who use genetic testing services and the companies that collect their genomic data, excluding healthcare providers using genetic data for medical diagnosis.