Genome Statute and Legislation Database

Allows the recipient of an organ transplant and referral hospital to examine all genetic records of the donor or prospective donor unless prohibited by any other law. Died.

Prohibits a direct-to-consumer genetic testing business entity from sharing personally identifiable genetic test data or other personally identifiable information about a consumer with a third party without the express written consent of the consumer or a subpoena or court order. Died.

Establishes the parent's bill of rights. Requirements set forth in the bill include parental written consent before any record of a minor child's blood or DNA is made, shared or stored unless required by law or court order. Died.

Removes provisions regulating an employer's and a health insurer's use of personal genetic information. Died.

Requires government agencies to provide an annual report to the state auditor detailing the collection, use, and disclosure of personally identifying information, including DNA. Died.

Requires health insurance and Medicaid coverage for chromosomal microarray analysis. Died.

Prohibits the state sale of personally identifiable information, including genetic information. Died.

Prohibits discrimination based on an individual�s genetic information in relation to employment, labor relations, insurance coverage, and the provision of social and medical services. In some areas such as employment and insurance existing genetic nondiscrimination law are amended. Died.

Prohibits a sponsor of a registered apprenticeship program from discriminating against an apprentice or applicant for apprenticeship on the basis of various factors, including genetic information. 4/22/20 House: Enacted, Chapter 1228. Effective 7/1/20.

Gives consumers the right to access their data and determine if it has been sold to a data broker. Requires a controller, defined in the bill as a person that, alone or jointly with others, determines the purposes and means of the processing of personal data, to facilitate requests to exercise consumer rights regarding access, correction, deletion, restriction of processing, data portability, objection, and profiling. The measure also (i) requires transparent processing of personal data through a privacy notice, (ii) requires controllers to disclose if they process personal data for direct marketing or sell it to data brokers, and (iii) requires controllers to conduct a risk assessment of each of their processing activities involving personal data and an additional risk assessment any time there is a change in processing that materially increases the risk to consumers. The measure applies to any legal entity that conducts business in the Commonwealth or produces products or services that are intentionally targeted to residents of the Commonwealth and that (a) controls or processes personal data of not fewer than 100,000 consumers or (b) derives over 50 percent of gross revenue from the sale of personal data and processes or controls personal data of not fewer than 25,000 customers. Sensitive data includes genetic or biometric data. Died.

Requires the legislative branch of the Commonwealth to develop a policy on workplace harassment. Workplace harassment is defined as any unwelcome verbal, written, or physical conduct that either denigrates or shows hostility or aversion toward a person on the basis of various factors, including genetics. Died.

Creates a study committee on human genome editing. Died.

Enacts measures to safeguard the privacy, confidentiality, security, and integrity of a consumer's genetic data resulting from direct-to-consumer genetic testing. Died.

Requires controller who determines the purposes and means of the processing of personal data to obtain consent prior to processing sensitive data, including genetic data. Controllers must conduct an assessment of activities pertaining to the processing of sensitive data. Died.

Establishes the parent's bill of rights. Requirements set forth in the bill include parental written consent before any record of a minor child's blood or DNA is made, shared or stored unless required by law or court order. Died.

Requires controller who determines the purposes and means of the processing of personal data to obtain consent prior to processing sensitive data, including genetic data. Controllers must conduct an assessment of activities pertaining to the processing of sensitive data. Died.

Establishes the parent's bill of rights. Requirements set forth in the bill include parental written consent before any record of a minor child's blood or DNA is made, shared or stored unless required by law or court order. Died.

Requires insurance coverage of a comprehensive ultrasound screening of breast if a woman is believed to be at increased risk of cancer based on several factors, including positive genetic testing. Died.

Requires controllers of consumers' personal data to provide a consumer with copies of the consumer's personal data processed by the controller. Personal data includes genetic information. 4/1/2020 Failed to pass pursuant to Senate Joint Resolution 1.

Sets forth requirements regarding the deletion of consumer personal data, including genetic data, by controllers. 4/1/2020 Failed to pass pursuant to Senate Joint Resolution 1.

Establishes requirements on controllers that process consumers' personal data, including genetic data. 4/1/2020 Failed to pass pursuant to Senate Joint Resolution 1.

Establishes requirements for businesses related to personal information such as biometric information collected about consumers. Biometric information is defined to include DNA. 4/1/2020 Failed to pass pursuant to Senate Joint Resolution 1.

Establishes a grant program within the health department to award grants to persons, organizations, and entities to fund research studies on the evidence needed to: (1) support payer reimbursement and funding of pharmacogenomics (PGx) testing; (2) determine and validate new PGx variants in diverse populations such as Native Americans and Somali groups; (3) determine ethical, legal, and social implications of PGx; (4) determine the technical aspects needed to protect data and privacy as it relates to PGx; and (5) determine the education needed for successful PGx implementation. Carries over to 2022 session.
.

Creates the Alabama Consumer privacy Act. Allows a consumer to request that a business: (1) disclose personal information that it collects; (2) delete certain personal information; (3) disclose the sale of certain personal information to third parties; and (4) allow a consumer to opt out of the sale of personal information. Prohibits a business from retaliating against a consumer for making a request for disclosure or for opting out and from selling the personal information of a consumer under 18 years of age. Personal information is defined to include biometric information such as DNA. Died.

Establishes the Consumer Data privacy Act. Requires businesses to notify consumers before the collection of personal information. Consumers may opt out of the sale of personal information. Businesses must maintain privacy policies available online describing consumer's privacy rights such as the designated methods in which the consumer can request access or deletion of personal information. Biometric information, including deoxyribonucleic acid, is considered personal information. Carries over to 2022 session.