Genetic Data California

California Genetic Information Privacy Act (GIPA)

Summary

Regulates direct-to-consumer genetic testing companies like 23andMe, requiring clear consent and security measures.

Rights & Rules

01.
Right to separate consent for data storage and sharing
02.
Right to have genetic samples destroyed
03.
Right to clear information about data destruction policies

Penalties

01.
Civil penalty of $1,000 for negligent violations
02.
Civil penalty of $10,000 for willful violations
03.
Enforced by the Attorney General and District Attorneys

Verified Citations

California Civil Code § 1798.99.8

"A direct-to-consumer genetic testing company shall provide a consumer with clear and conspicuous information regarding the company's policies and procedures for the collection, use, maintenance, and disclosure of genetic data."