{"formats":[{"name":"JSON","format":"json","url":"\/downloads\/2025\/code-json\/59.1-593.json"},{"name":"Plain Text","format":"text","url":"\/downloads\/2025\/code-text\/59.1-593.txt"},{"name":"XML","format":"xml","url":"\/downloads\/2025\/code-xml\/59.1-593.xml"},{"name":"HTML","format":"html","url":"\/downloads\/2025\/code-html\/59.1-593.html"}],"law_id":63239,"edition_id":1,"section_id":63239,"structure_id":14495,"section_number":"59.1-593","catch_line":"Definitions","history":"2023, c. 526.","full_text":"As used in this chapter, unless the context requires a different meaning:\n\t\t“Affirmative authorization” means an action that demonstrates an intentional decision by a consumer.\n\t\t“Biological sample” means any material part of the human, discharge therefrom, or derivative thereof, such as tissue, blood, urine, or saliva, known to contain deoxyribonucleic acid (DNA).\n\t\t“Consumer” means a natural person who is a resident of the Commonwealth.\n\t\t“Deidentified data” means data that cannot be used to infer information about, or otherwise be linked to, a particular individual, provided that the direct-to-consumer genetic testing company (i) takes reasonable measures to ensure that such information cannot be associated with a consumer or household; (ii) publicly commits to maintain and use such information only in deidentified form and not to attempt to reidentify the information, except that the direct-to-consumer genetic testing company may attempt to reidentify the information solely for the purpose of determining whether its deidentification processes satisfy the requirements of this clause, provided that the direct-to-consumer genetic testing company does not use or disclose any information reidentified in this process and destroys the reidentified information upon completion of that assessment; and (iii) contractually obligates any recipients of the information to take reasonable measures to ensure that the information cannot be associated with a consumer or household and to commit to maintaining and using the information only in deidentified form and not to reidentify the information.\n\t\t“Direct-to-consumer genetic testing company” means an entity that (i) offers consumer-initiated genetic testing products or services directly to a consumer or (ii) collects, uses, or analyzes genetic data that is collected or derived from a direct-to-consumer genetic testing product or service and is directly provided by a consumer. “Direct-to-consumer genetic testing company” does not include an entity when such entity is only engaged in collecting, using, or analyzing genetic data or biological samples in the context of research conducted in accordance with the (a) federal Common Rule, 45 C.F.R. Part 46; (b) International Conference on Harmonization Good Clinical Practice Guideline; or (c) U.S. Food and Drug Administration Policy for the Protection of Human Subjects, 21 C.F.R. Parts 50 and 56.\n\t\t“Express consent” means a consumer’s affirmative authorization to grant permission in response to a clear, meaningful, and prominent notice regarding the collection, use, maintenance, or disclosure of genetic data for a specific purpose.\n\t\t“Genetic data” means any data, regardless of its format, that results from the analysis of a biological sample from a consumer, or from another element enabling equivalent information to be obtained, and concerns genetic material. Genetic material includes deoxyribonucleic acids (DNA), ribonucleic acids (RNA), genes, chromosomes, alleles, genomes, alterations, or modifications to DNA or RNA, and single nucleotide polymorphisms (SNPs). “Genetic data” includes uninterpreted data that results from the analysis of the biological sample and any information extrapolated, derived, or inferred therefrom. “Genetic data” does not include (i) deidentified data or (ii) data or a biological sample to the extent that data or a biological sample is collected, used, maintained, and disclosed exclusively for scientific research conducted by an investigator with an institution that holds an assurance with the U.S. Department of Health and Human Services pursuant to 45 C.F.R. Part 46, in compliance with all applicable federal and state laws and regulations for the protection of human subjects in research, including the Common Rule pursuant to 45 C.F.R. Part 46, U.S. Food and Drug Administration regulations pursuant to 21 C.F.R. Parts 50 and 56, and the federal Family Educational Rights and Privacy Act, 20 U.S.C. \u00a7 1232g.\n\t\t“Genetic testing” means any laboratory test of a biological sample from a consumer for the purpose of determining information concerning genetic material contained within the biological sample, or any information extrapolated, derived, or inferred therefrom.\n\t\t“Service provider” means a sole proprietorship, partnership, limited liability company, corporation, association, or other legal entity that is organized or operated for the profit or financial benefit of its shareholders or other owners that is involved in (i) the collection, transportation, and analysis of the consumer’s biological sample or extracted genetic material (a) on behalf of the direct-to-consumer genetic testing company or (b) on behalf of any other company that collects, uses, maintains, or discloses genetic data collected or derived from a direct-to-consumer genetic testing product or service or directly provided by a consumer or (ii) the delivery of the results of the analysis of the biological sample or genetic material.","order_by":null,"text":{"0":{"id":230533,"text":"As used in this chapter, unless the context requires a different meaning:\n\t\t“Affirmative authorization” means an action that demonstrates an intentional decision by a consumer.\n\t\t“Biological sample” means any material part of the human, discharge therefrom, or derivative thereof, such as tissue, blood, urine, or saliva, known to contain deoxyribonucleic acid (DNA).\n\t\t“Consumer” means a natural person who is a resident of the Commonwealth.\n\t\t“Deidentified data” means data that cannot be used to infer information about, or otherwise be linked to, a particular individual, provided that the direct-to-consumer genetic testing company (i) takes reasonable measures to ensure that such information cannot be associated with a consumer or household; (ii) publicly commits to maintain and use such information only in deidentified form and not to attempt to reidentify the information, except that the direct-to-consumer genetic testing company may attempt to reidentify the information solely for the purpose of determining whether its deidentification processes satisfy the requirements of this clause, provided that the direct-to-consumer genetic testing company does not use or disclose any information reidentified in this process and destroys the reidentified information upon completion of that assessment; and (iii) contractually obligates any recipients of the information to take reasonable measures to ensure that the information cannot be associated with a consumer or household and to commit to maintaining and using the information only in deidentified form and not to reidentify the information.\n\t\t“Direct-to-consumer genetic testing company” means an entity that (i) offers consumer-initiated genetic testing products or services directly to a consumer or (ii) collects, uses, or analyzes genetic data that is collected or derived from a direct-to-consumer genetic testing product or service and is directly provided by a consumer. “Direct-to-consumer genetic testing company” does not include an entity when such entity is only engaged in collecting, using, or analyzing genetic data or biological samples in the context of research conducted in accordance with the (a) federal Common Rule, 45 C.F.R. Part 46; (b) International Conference on Harmonization Good Clinical Practice Guideline; or (c) U.S. Food and Drug Administration Policy for the Protection of Human Subjects, 21 C.F.R. Parts 50 and 56.\n\t\t“Express consent” means a consumer’s affirmative authorization to grant permission in response to a clear, meaningful, and prominent notice regarding the collection, use, maintenance, or disclosure of genetic data for a specific purpose.\n\t\t“Genetic data” means any data, regardless of its format, that results from the analysis of a biological sample from a consumer, or from another element enabling equivalent information to be obtained, and concerns genetic material. Genetic material includes deoxyribonucleic acids (DNA), ribonucleic acids (RNA), genes, chromosomes, alleles, genomes, alterations, or modifications to DNA or RNA, and single nucleotide polymorphisms (SNPs). “Genetic data” includes uninterpreted data that results from the analysis of the biological sample and any information extrapolated, derived, or inferred therefrom. “Genetic data” does not include (i) deidentified data or (ii) data or a biological sample to the extent that data or a biological sample is collected, used, maintained, and disclosed exclusively for scientific research conducted by an investigator with an institution that holds an assurance with the U.S. Department of Health and Human Services pursuant to 45 C.F.R. Part 46, in compliance with all applicable federal and state laws and regulations for the protection of human subjects in research, including the Common Rule pursuant to 45 C.F.R. Part 46, U.S. Food and Drug Administration regulations pursuant to 21 C.F.R. Parts 50 and 56, and the federal Family Educational Rights and Privacy Act, 20 U.S.C. \u00a7 1232g.\n\t\t“Genetic testing” means any laboratory test of a biological sample from a consumer for the purpose of determining information concerning genetic material contained within the biological sample, or any information extrapolated, derived, or inferred therefrom.\n\t\t“Service provider” means a sole proprietorship, partnership, limited liability company, corporation, association, or other legal entity that is organized or operated for the profit or financial benefit of its shareholders or other owners that is involved in (i) the collection, transportation, and analysis of the consumer’s biological sample or extracted genetic material (a) on behalf of the direct-to-consumer genetic testing company or (b) on behalf of any other company that collects, uses, maintains, or discloses genetic data collected or derived from a direct-to-consumer genetic testing product or service or directly provided by a consumer or (ii) the delivery of the results of the analysis of the biological sample or genetic material.","type":"section","prefixes":[""],"prefix":"","entire_prefix":"","prefix_anchor":"","level":1}},"ancestry":[{"id":14495,"edition_id":1,"name":"Genetic Data Privacy","identifier":"56","label":"chapter","depth":2,"order_by":1,"parent_id":12809,"metadata":{},"date_created":"2026-06-26 03:48:21","date_modified":"2026-06-26 03:48:21","permalink":{"id":262825,"object_type":"structure","relational_id":14495,"identifier":"56","token":"59.1\/56","url":"\/59.1\/56\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12809,"edition_id":1,"name":"Trade and Commerce","identifier":"59.1","label":"title","depth":1,"order_by":1,"parent_id":null,"metadata":{},"date_created":"2026-06-26 03:43:54","date_modified":"2026-06-26 03:43:54","permalink":{"id":259521,"object_type":"structure","relational_id":12809,"identifier":"59.1","token":"59.1","url":"\/59.1\/","edition_id":1,"permalink":0,"preferred":1}}],"structure_contents":[{"id":63239,"structure_id":14495,"section_number":"59.1-593","catch_line":"Definitions","url":"\/59.1-593\/","token":"59.1\/56\/59.1-593","metadata":false},{"id":58499,"structure_id":14495,"section_number":"59.1-594","catch_line":"Exclusions","url":"\/59.1-594\/","token":"59.1\/56\/59.1-594","metadata":false},{"id":79801,"structure_id":14495,"section_number":"59.1-595","catch_line":"Information to be made available to consumers","url":"\/59.1-595\/","token":"59.1\/56\/59.1-595","metadata":false},{"id":71838,"structure_id":14495,"section_number":"59.1-596","catch_line":"Express consent required; revocation of express consent","url":"\/59.1-596\/","token":"59.1\/56\/59.1-596","metadata":false},{"id":56619,"structure_id":14495,"section_number":"59.1-597","catch_line":"Other requirements applicable to direct-to-consumer genetic testing companies","url":"\/59.1-597\/","token":"59.1\/56\/59.1-597","metadata":false},{"id":78669,"structure_id":14495,"section_number":"59.1-598","catch_line":"Contracts with service providers","url":"\/59.1-598\/","token":"59.1\/56\/59.1-598","metadata":false},{"id":56035,"structure_id":14495,"section_number":"59.1-599","catch_line":"Certain disclosures of genetic data prohibited","url":"\/59.1-599\/","token":"59.1\/56\/59.1-599","metadata":false},{"id":55900,"structure_id":14495,"section_number":"59.1-600","catch_line":"Discrimination prohibited","url":"\/59.1-600\/","token":"59.1\/56\/59.1-600","metadata":false},{"id":61312,"structure_id":14495,"section_number":"59.1-601","catch_line":"Enforcement; civil penalty","url":"\/59.1-601\/","token":"59.1\/56\/59.1-601","metadata":false},{"id":68507,"structure_id":14495,"section_number":"59.1-602","catch_line":"Limitations","url":"\/59.1-602\/","token":"59.1\/56\/59.1-602","metadata":false}],"next_section":{"id":58499,"structure_id":14495,"section_number":"59.1-594","catch_line":"Exclusions","url":"\/59.1-594\/","token":"59.1\/56\/59.1-594","metadata":false},"metadata":false,"official_url":"https:\/\/law.lis.virginia.gov\/vacode\/59.1-593\/","history_text":"

This law was first created in 2023. The record of its establishment is cataloged in chapter 526<\/a> of that year\u2019s edition of \u201cActs of Assembly,\u201d the annual state publication listing all changes made to the Code of Virginia in that year.<\/p>","references":false,"refers_to":false,"permalink":{"id":262827,"object_type":"law","relational_id":63239,"identifier":"59.1-593","token":"59.1\/56\/59.1-593","url":"\/59.1-593\/","edition_id":1,"permalink":0,"preferred":1},"url":"\/59.1-593\/","token":"59.1\/56\/59.1-593","dublin_core":{"Title":"Definitions","Type":"Text","Format":"text\/html","Identifier":"\u00a7 59.1-593","Relation":"Code of Virginia"},"html":"\n\t\t\t\t\t\t

As used in this chapter, unless the context requires a different meaning:\n\t\t“Affirmative authorization<\/span>” means an action that demonstrates an intentional decision by a consumer<\/span>.\n\t\t“Biological sample<\/span>” means any material<\/span> part of the human, discharge therefrom, or derivative thereof, such as tissue, blood, urine, or saliva, known to contain deoxyribonucleic acid (DNA).\n\t\t“Consumer<\/span>” means a natural person who is a resident of the Commonwealth.\n\t\t“Deidentified data<\/span>” means data that cannot be used to infer information about, or otherwise be linked to, a particular individual, provided that the direct-to-consumer<\/span> genetic testing company<\/span> (i) takes reasonable measures to ensure that such information cannot be associated with a consumer<\/span> or household; (ii) publicly commits to maintain and use such information only in deidentified form and not to attempt to reidentify the information, except that the direct-to-consumer<\/span> genetic testing company<\/span> may attempt to reidentify the information solely for the purpose of determining whether its deidentification processes satisfy the requirements of this clause, provided that the direct-to-consumer<\/span> genetic testing company<\/span> does not use or disclose any information reidentified in this process and destroys the reidentified information upon completion of that assessment; and (iii) contractually obligates any recipients of the information to take reasonable measures to ensure that the information cannot be associated with a consumer<\/span> or household and to commit to maintaining and using the information only in deidentified form and not to reidentify the information.\n\t\t“Direct-to-consumer<\/span> genetic testing company<\/span>” means an entity that (i) offers consumer<\/span>-initiated genetic testing products or services directly to a consumer<\/span> or (ii) collects, uses, or analyzes genetic data<\/span> that is collected or derived from a direct-to-consumer<\/span> genetic testing product or service and is directly provided by a consumer<\/span>. “Direct-to-consumer<\/span> genetic testing company<\/span>” does not include an entity when such entity is only engaged in collecting, using, or analyzing genetic data<\/span> or biological samples<\/span> in the context of research conducted in accordance with the (a) federal Common Rule, 45 C.F.R. Part 46; (b) International Conference on Harmonization Good Clinical Practice Guideline; or (c) U.S. Food and Drug Administration Policy for the Protection of Human Subjects, 21 C.F.R. Parts 50 and 56.\n\t\t“Express consent<\/span>” means a consumer<\/span>’s affirmative authorization<\/span> to grant permission in response to a clear, meaningful, and prominent notice regarding the collection, use, maintenance, or disclosure of genetic data<\/span> for a specific purpose.\n\t\t“Genetic data<\/span>” means any data, regardless of its format, that results from the analysis of a biological sample<\/span> from a consumer<\/span>, or from another element enabling equivalent information to be obtained, and concerns genetic material<\/span>. Genetic material<\/span> includes deoxyribonucleic acids (DNA), ribonucleic acids (RNA), genes, chromosomes, alleles, genomes, alterations, or modifications to DNA or RNA, and single nucleotide polymorphisms (SNPs). “Genetic data<\/span>” includes uninterpreted data that results from the analysis of the biological sample<\/span> and any information extrapolated, derived, or inferred therefrom. “Genetic data<\/span>” does not include (i) deidentified data<\/span> or (ii) data or a biological sample<\/span> to the extent that data or a biological sample<\/span> is collected, used, maintained, and disclosed exclusively for scientific research conducted by an investigator with an institution that holds an assurance with the U.S. Department of Health and Human Services pursuant to 45 C.F.R. Part 46, in compliance with all applicable federal and state laws<\/span> and regulations for the protection of human subjects in research, including the Common Rule pursuant to 45 C.F.R. Part 46, U.S. Food and Drug Administration regulations pursuant to 21 C.F.R. Parts 50 and 56, and the federal Family Educational Rights and Privacy Act, 20 U.S.C. \u00a7 1232g.\n\t\t“Genetic testing” means any laboratory test of a biological sample<\/span> from a consumer<\/span> for the purpose of determining information concerning genetic material<\/span> contained within the biological sample<\/span>, or any information extrapolated, derived, or inferred therefrom.\n\t\t“Service provider<\/span>” means a sole proprietorship, partnership, limited liability company, corporation, association, or other legal entity that is organized or operated for the profit or financial benefit of its shareholders or other owners that is involved in (i) the collection, transportation, and analysis of the consumer<\/span>’s biological sample<\/span> or extracted genetic material<\/span> (a) on behalf of the direct-to-consumer<\/span> genetic testing company<\/span> or (b) on behalf of any other company that collects, uses, maintains, or discloses genetic data<\/span> collected or derived from a direct-to-consumer<\/span> genetic testing product or service or directly provided by a consumer<\/span> or (ii) the delivery of the results of the analysis of the biological sample<\/span> or genetic material<\/span>.<\/p><\/section>","plain_text":" CODE OF VIRGINIA\n\nDEFINITIONS (\u00a7 59.1-593)\n\nAs used in this chapter, unless the context requires a different meaning:\n\t\t“Affirmative authorization” means an action that demonstrates an\nintentional decision by a consumer.\n\t\t“Biological sample” means any material part of the human,\ndischarge therefrom, or derivative thereof, such as tissue, blood, urine, or\nsaliva, known to contain deoxyribonucleic acid (DNA).\n\t\t“Consumer” means a natural person who is a resident of the\nCommonwealth.\n\t\t“Deidentified data” means data that cannot be used to infer\ninformation about, or otherwise be linked to, a particular individual, provided\nthat the direct-to-consumer genetic testing company (i) takes reasonable\nmeasures to ensure that such information cannot be associated with a consumer or\nhousehold; (ii) publicly commits to maintain and use such information only in\ndeidentified form and not to attempt to reidentify the information, except that\nthe direct-to-consumer genetic testing company may attempt to reidentify the\ninformation solely for the purpose of determining whether its deidentification\nprocesses satisfy the requirements of this clause, provided that the\ndirect-to-consumer genetic testing company does not use or disclose any\ninformation reidentified in this process and destroys the reidentified\ninformation upon completion of that assessment; and (iii) contractually\nobligates any recipients of the information to take reasonable measures to\nensure that the information cannot be associated with a consumer or household\nand to commit to maintaining and using the information only in deidentified form\nand not to reidentify the information.\n\t\t“Direct-to-consumer genetic testing company” means an entity that\n(i) offers consumer-initiated genetic testing products or services directly to a\nconsumer or (ii) collects, uses, or analyzes genetic data that is collected or\nderived from a direct-to-consumer genetic testing product or service and is\ndirectly provided by a consumer. “Direct-to-consumer genetic testing\ncompany” does not include an entity when such entity is only engaged in\ncollecting, using, or analyzing genetic data or biological samples in the\ncontext of research conducted in accordance with the (a) federal Common Rule, 45\nC.F.R. Part 46; (b) International Conference on Harmonization Good Clinical\nPractice Guideline; or (c) U.S. Food and Drug Administration Policy for the\nProtection of Human Subjects, 21 C.F.R. Parts 50 and 56.\n\t\t“Express consent” means a consumer’s affirmative\nauthorization to grant permission in response to a clear, meaningful, and\nprominent notice regarding the collection, use, maintenance, or disclosure of\ngenetic data for a specific purpose.\n\t\t“Genetic data” means any data, regardless of its format, that\nresults from the analysis of a biological sample from a consumer, or from\nanother element enabling equivalent information to be obtained, and concerns\ngenetic material. Genetic material includes deoxyribonucleic acids (DNA),\nribonucleic acids (RNA), genes, chromosomes, alleles, genomes, alterations, or\nmodifications to DNA or RNA, and single nucleotide polymorphisms (SNPs).\n“Genetic data” includes uninterpreted data that results from the\nanalysis of the biological sample and any information extrapolated, derived, or\ninferred therefrom. “Genetic data” does not include (i) deidentified\ndata or (ii) data or a biological sample to the extent that data or a biological\nsample is collected, used, maintained, and disclosed exclusively for scientific\nresearch conducted by an investigator with an institution that holds an\nassurance with the U.S. Department of Health and Human Services pursuant to 45\nC.F.R. Part 46, in compliance with all applicable federal and state laws and\nregulations for the protection of human subjects in research, including the\nCommon Rule pursuant to 45 C.F.R. Part 46, U.S. Food and Drug Administration\nregulations pursuant to 21 C.F.R. Parts 50 and 56, and the federal Family\nEducational Rights and Privacy Act, 20 U.S.C. \u00a7 1232g.\n\t\t“Genetic testing” means any laboratory test of a biological sample\nfrom a consumer for the purpose of determining information concerning genetic\nmaterial contained within the biological sample, or any information\nextrapolated, derived, or inferred therefrom.\n\t\t“Service provider” means a sole proprietorship, partnership,\nlimited liability company, corporation, association, or other legal entity that\nis organized or operated for the profit or financial benefit of its shareholders\nor other owners that is involved in (i) the collection, transportation, and\nanalysis of the consumer’s biological sample or extracted genetic material\n(a) on behalf of the direct-to-consumer genetic testing company or (b) on behalf\nof any other company that collects, uses, maintains, or discloses genetic data\ncollected or derived from a direct-to-consumer genetic testing product or\nservice or directly provided by a consumer or (ii) the delivery of the results\nof the analysis of the biological sample or genetic material.\n\nHISTORY: 2023, c. 526.","edition":{"id":1,"name":"2025","slug":"2025","date_created":"2026-06-21 22:39:22","date_modified":"2026-06-21 22:39:22","current":1,"order_by":1,"last_import":null}}