{"id":17239,"date":"2023-12-19T17:09:01","date_gmt":"2023-12-19T17:09:01","guid":{"rendered":"https:\/\/nicholsbrar.com\/?p=17239"},"modified":"2024-01-10T18:07:23","modified_gmt":"2024-01-10T18:07:23","slug":"consumer-privacy-protections-texas-enacts-genetic-privacy-statute-that-strengths-privacy-and-security-data-protections","status":"publish","type":"post","link":"https:\/\/nicholsbrar.com\/consumer-privacy-protections-texas-enacts-genetic-privacy-statute-that-strengths-privacy-and-security-data-protections\/","title":{"rendered":"Consumer Privacy Protections: Texas Enacts Genetic Privacy Statute that Strengths Privacy and Security Data Protections"},"content":{"rendered":"\t\t
Direct-to-consumer genetic companies (\u201cCompany\u201d) have largely remained outside the scope of state and federal laws that safeguard an individual\u2019s genetic data. On June 17, 2023, Texas enacted a new law that obligates direct-to-consumer genetic companies to strengthen their privacy and security practices and give an individual exclusive control of their genetic data and biological samples (e.g., saliva).<\/p>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 House Bill 2545 (H.B. 2545), which became effective on September 1, 2023, is applicable to commercial genetic testing companies that offer genetic testing products or services directly to consumers. The applicability of the statute extends to a Company that stores, uses, and analyzes genetic data derived from a consumer\u2019s biological samples. To provide the broadest protections, the new law contemplates two different types of data: genetic data and deidentified (genetic) data. Deidentified data means any data that is not reasonably linked to and that cannot reasonably be used to identify or infer information about a particular individual. H.B. 2545 defines \u201cgenetic data\u201d as any data related to an individual\u2019s genetic characteristics. Genetic data also includes raw sequence data, genotypic or phenotypic information, and heath information pertaining to an individual\u2019s health conditions that a Company uses and analyzes for research or product development. A brief summary of the protections for each type of data follows.<\/p>
Deidentified Data<\/p>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 The new law strikes a balance between supporting ongoing research efforts with deidentified data and protecting an individual consumer\u2019s privacy. H.B. 2545 stops short of prohibiting the storage, use, and sharing of deidentified data for research purposes. A Company that is in possession of an individual\u2019s deidentified data must implement technical and administrative measures (e.g., encryption) to prevent the deidentified data from being linked to a particular individual. These measures would evidence a newly required public commitment to maintain and use the deidentified data in its deidentified form. If a Company shares the deidentified data with a third party, then the company must contractually prohibit the third party from attempting to reidentify an individual using the deidentified data.<\/p>
Genetic Data<\/p>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Under H.B. 2545, an individual has a property right in genetic data, the results of genetic testing and analysis, and the biological samples that an individual provides to- and is used by the Company. An individual, therefore, retains exclusive control over the same. \u00a0The individual\u2019s property right anchors the legislation\u2019s restrictions on a Company\u2019s ability to use, analyze, store, and share the individual\u2019s genetic data with third parties.<\/p>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0A Company subject to the requirements of H.B. 2545 must fulfill certain requirements that prevents the unauthorized access, use and disclosure of an individual\u2019s genetic data:<\/p>
Most notably, a Company is prohibited from disclosing an individual\u2019s genetic data to law enforcement agencies or governmental bodies unless the individual has consented to the disclosure, or the Company\u2019s disclosure is pursuant to a warrant. An individual must also provide express consent for the Company\u2019s disclosure of the individual\u2019s genetic data to an employer or a commercial entity that offers health insurance, long-term care insurance, or life insurance.<\/p>
\u00a0<\/p>
Penalties<\/p>
\u00a0<\/p>
A Company that is noncompliant with the requirements of H.B. 2545 risk liability for a civil penalty up to $2,5000 per violation. The Attorney General has the authority to bring an action to recover civil penalties and enjoin Company any practices that are noncompliant the new law\u2019s requirements.<\/p>
We are available to consult with you about your bringing your existing company into compliance with H.B. 2545 or ensuring that the development of a new direct-to-consumer genetic testing company meets the law\u2019s requirements.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"
Direct-to-consumer genetic companies (\u201cCompany\u201d) have largely remained outside the scope of state and federal laws that safeguard an individual\u2019s genetic data. On June 17, 2023, Texas enacted a new law…<\/p>\n","protected":false},"author":10,"featured_media":17247,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"yoast_head":"\n