{"formats":[{"name":"JSON","format":"json","url":"\/downloads\/2025\/code-json\/59.1-597.json"},{"name":"Plain Text","format":"text","url":"\/downloads\/2025\/code-text\/59.1-597.txt"},{"name":"XML","format":"xml","url":"\/downloads\/2025\/code-xml\/59.1-597.xml"},{"name":"HTML","format":"html","url":"\/downloads\/2025\/code-html\/59.1-597.html"}],"law_id":56619,"edition_id":1,"section_id":56619,"structure_id":14495,"section_number":"59.1-597","catch_line":"Other requirements applicable to direct-to-consumer genetic testing companies","history":"2023, c. 526.","full_text":"Every direct-to-consumer genetic testing company shall:\n\n1\n\nImplement and maintain reasonable security procedures and practices to protect a consumer’s genetic data against unauthorized access, destruction, use, modification, or disclosure; and2\n\nDevelop procedures and practices to allow a consumer to easily (i) access the consumer’s genetic data; (ii) delete the consumer’s genetic data, except any data required by state or federal law to be retained by the direct-to-consumer genetic testing company and any account the consumer may have created with the direct-to-consumer genetic testing company; and (iii) revoke express consent to storage of the consumer’s biological sample and request destruction of such biological sample.","order_by":null,"text":{"0":{"id":207192,"text":"Every direct-to-consumer genetic testing company shall:","type":"section","prefixes":[""],"prefix":"","entire_prefix":"","prefix_anchor":"","level":1,"next_prefix":"1"},"1":{"id":207193,"text":"Implement and maintain reasonable security procedures and practices to protect a consumer’s genetic data against unauthorized access, destruction, use, modification, or disclosure; and","type":"section","prefixes":["1"],"prefix":"1","entire_prefix":"1","prefix_anchor":"1","level":1,"prior_prefix":"","next_prefix":"2"},"2":{"id":207194,"text":"Develop procedures and practices to allow a consumer to easily (i) access the consumer’s genetic data; (ii) delete the consumer’s genetic data, except any data required by state or federal law to be retained by the direct-to-consumer genetic testing company and any account the consumer may have created with the direct-to-consumer genetic testing company; and (iii) revoke express consent to storage of the consumer’s biological sample and request destruction of such biological sample.","type":"section","prefixes":["2"],"prefix":"2","entire_prefix":"2","prefix_anchor":"2","level":1,"prior_prefix":"1"}},"ancestry":[{"id":14495,"edition_id":1,"name":"Genetic Data Privacy","identifier":"56","label":"chapter","depth":2,"order_by":1,"parent_id":12809,"metadata":{},"date_created":"2026-06-26 03:48:21","date_modified":"2026-06-26 03:48:21","permalink":{"id":262825,"object_type":"structure","relational_id":14495,"identifier":"56","token":"59.1\/56","url":"\/59.1\/56\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12809,"edition_id":1,"name":"Trade and Commerce","identifier":"59.1","label":"title","depth":1,"order_by":1,"parent_id":null,"metadata":{},"date_created":"2026-06-26 03:43:54","date_modified":"2026-06-26 03:43:54","permalink":{"id":259521,"object_type":"structure","relational_id":12809,"identifier":"59.1","token":"59.1","url":"\/59.1\/","edition_id":1,"permalink":0,"preferred":1}}],"structure_contents":[{"id":63239,"structure_id":14495,"section_number":"59.1-593","catch_line":"Definitions","url":"\/59.1-593\/","token":"59.1\/56\/59.1-593","metadata":false},{"id":58499,"structure_id":14495,"section_number":"59.1-594","catch_line":"Exclusions","url":"\/59.1-594\/","token":"59.1\/56\/59.1-594","metadata":false},{"id":79801,"structure_id":14495,"section_number":"59.1-595","catch_line":"Information to be made available to consumers","url":"\/59.1-595\/","token":"59.1\/56\/59.1-595","metadata":false},{"id":71838,"structure_id":14495,"section_number":"59.1-596","catch_line":"Express consent required; revocation of express consent","url":"\/59.1-596\/","token":"59.1\/56\/59.1-596","metadata":false},{"id":56619,"structure_id":14495,"section_number":"59.1-597","catch_line":"Other requirements applicable to direct-to-consumer genetic testing companies","url":"\/59.1-597\/","token":"59.1\/56\/59.1-597","metadata":false},{"id":78669,"structure_id":14495,"section_number":"59.1-598","catch_line":"Contracts with service providers","url":"\/59.1-598\/","token":"59.1\/56\/59.1-598","metadata":false},{"id":56035,"structure_id":14495,"section_number":"59.1-599","catch_line":"Certain disclosures of genetic data prohibited","url":"\/59.1-599\/","token":"59.1\/56\/59.1-599","metadata":false},{"id":55900,"structure_id":14495,"section_number":"59.1-600","catch_line":"Discrimination prohibited","url":"\/59.1-600\/","token":"59.1\/56\/59.1-600","metadata":false},{"id":61312,"structure_id":14495,"section_number":"59.1-601","catch_line":"Enforcement; civil penalty","url":"\/59.1-601\/","token":"59.1\/56\/59.1-601","metadata":false},{"id":68507,"structure_id":14495,"section_number":"59.1-602","catch_line":"Limitations","url":"\/59.1-602\/","token":"59.1\/56\/59.1-602","metadata":false}],"previous_section":{"id":71838,"structure_id":14495,"section_number":"59.1-596","catch_line":"Express consent required; revocation of express consent","url":"\/59.1-596\/","token":"59.1\/56\/59.1-596","metadata":false},"next_section":{"id":78669,"structure_id":14495,"section_number":"59.1-598","catch_line":"Contracts with service providers","url":"\/59.1-598\/","token":"59.1\/56\/59.1-598","metadata":false},"metadata":false,"official_url":"https:\/\/law.lis.virginia.gov\/vacode\/59.1-597\/","history_text":"

This law was first created in 2023. The record of its establishment is cataloged in chapter 526<\/a> of that year\u2019s edition of \u201cActs of Assembly,\u201d the annual state publication listing all changes made to the Code of Virginia in that year.<\/p>","references":false,"refers_to":false,"permalink":{"id":262843,"object_type":"law","relational_id":56619,"identifier":"59.1-597","token":"59.1\/56\/59.1-597","url":"\/59.1-597\/","edition_id":1,"permalink":0,"preferred":1},"url":"\/59.1-597\/","token":"59.1\/56\/59.1-597","dublin_core":{"Title":"Other requirements applicable to direct-to-consumer genetic testing companies","Type":"Text","Format":"text\/html","Identifier":"\u00a7 59.1-597","Relation":"Code of Virginia"},"html":"\n\t\t\t\t\t\t

Every direct-to-consumer<\/span> genetic testing company<\/span> shall:<\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> Implement and maintain reasonable security procedures and practices to protect a consumer<\/span>’s genetic data<\/span> against unauthorized access, destruction, use, modification, or disclosure; and <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> Develop procedures and practices to allow a consumer<\/span> to easily (i) access the consumer<\/span>’s genetic data<\/span>; (ii) delete the consumer<\/span>’s genetic data<\/span>, except any data required by state or federal law<\/span> to be retained by the direct-to-consumer<\/span> genetic testing company<\/span> and any account the consumer<\/span> may have created with the direct-to-consumer<\/span> genetic testing company<\/span>; and (iii) revoke express consent<\/span> to storage of the consumer<\/span>’s biological sample<\/span> and request destruction of such biological sample<\/span>. <\/i><\/a><\/p><\/section>","plain_text":" CODE OF VIRGINIA\n\nOTHER REQUIREMENTS APPLICABLE TO DIRECT-TO-CONSUMER GENETIC TESTING COMPANIES\n(\u00a7 59.1-597)\n\nEvery direct-to-consumer genetic testing company shall:\n\n1. Implement and maintain reasonable security procedures and practices to\nprotect a consumer’s genetic data against unauthorized access,\ndestruction, use, modification, or disclosure; and\n\n2. Develop procedures and practices to allow a consumer to easily (i) access the\nconsumer’s genetic data; (ii) delete the consumer’s genetic data,\nexcept any data required by state or federal law to be retained by the\ndirect-to-consumer genetic testing company and any account the consumer may have\ncreated with the direct-to-consumer genetic testing company; and (iii) revoke\nexpress consent to storage of the consumer’s biological sample and request\ndestruction of such biological sample.\n\nHISTORY: 2023, c. 526.","edition":{"id":1,"name":"2025","slug":"2025","date_created":"2026-06-21 22:39:22","date_modified":"2026-06-21 22:39:22","current":1,"order_by":1,"last_import":null}}