                                 CODE OF VIRGINIA

INFORMATION TO BE MADE AVAILABLE TO CONSUMERS (§ 59.1-595)

A. Every direct-to-consumer genetic testing company shall provide to consumers:

   1. A summary of the company&#8217;s (i) policies and procedures related to the
   collection, use, maintenance, retention, disclosure, transfer, deletion, and
   security of and access to genetic data and (ii) privacy practices;

   2. Information regarding the requirement for express consent for the
   collection, use, and disclosure of genetic data and the process for revoking
   express consent pursuant to &#xA7; 59.1-596;

   3. Notice that a consumer&#8217;s deidentified genetic or phenotypic data may
   be shared with or disclosed to third parties for research purposes in
   accordance with 45 C.F.R. Part 46; and

   4. Information about the process by which a consumer may file a complaint
   alleging a violation of this chapter.

B. Information required to be made available pursuant to subsection A shall be
written in plain language and shall be provided to consumers together with any
genetic testing product provided to consumers. Such information shall also be
included on any website maintained by the direct-to-consumer genetic testing
company in a manner that is easily accessible by the public.

HISTORY: 2023, c. 526.