NHGRI logo

Genome Statute and Legislation Database

The Genome Statute and Legislation Database is comprised of state statutes and bills introduced during the 2002-2024 U.S. state legislative sessions.

Overview

The Genome Statute and Legislation Database is reviewed and updated monthly. Searchable topics in the database include employment and insurance discrimination, health insurance coverage, privacy, research, the use of residual newborn screening specimens and other topics of interest.

Definitions of terms such as "bill", "statute", and "regulation" are available through the Glossary of Statutory, Legislative, and Regulatory Terms.

For other helpful links and legislative databases, please see Additional Resources.

Search

State Primary Link Topic(s) Bill Status Sort descending Summary
South Carolina Privacy Pending

Enacts the South Carolina Biometric Data privacy Act. Provides certain requirements for a business that collets a consumer's biometric information. Allows consumers to: (1) request the deletion of collected biometric information; and (2) prohibit the sale of biometric information. Prohibits a business from discriminating against a consumer who opts out of the the sale of biometric information. Biometric information includes DNA. Carries over to 2022.

New York Other Topics Pending

Establishes a genetics advisory council. Requires a preliminary report to the governor and legislature before March 1, 2023 and a final report by December 1, 2023 on issues relating to genetic counseling, genetic testing and public education. Carries over to 2022.

Massachusetts Privacy Pending

Establishes requirements for specified persons, partnerships or corporations that maintain high-risk information systems. A high-risk information system involves the personal information of a significant numbers of consumers regarding various characteristics, including genetic data. Carries over to 2022.

Washington Privacy Pending

Prohibits a data controller from processing sensitive data concerning a consumer without obtaining the consumer's consent or, in the case of the processing of sensitive data of a known child, without obtaining consent from the child's parent or lawful guardian, in accordance with the children's online privacy protection act requirements. Data controllers must conduct and document a data protection assessment of processing activities involving personal data, including sensitive data such as genetic data. Carries over to 2022.

California Privacy, Research Pending

Abolishes the Office of Health Information Integrity and the Office of Patient Advocate. Establishes the Center for Data Insights and Innovation within the California Health and Human Services Agency, and transfer the duties of the Office of Health Information Integrity and the Office of Patient Advocate to the center. Requires the center to: (1) assume responsibility for administering the State Committee for the Protection of Human Subjects; (2) keep all personal information obtained by the center confidential, as specified; and (3) meet various requirements with regard to the disclosure of information, including the development of a comprehensive program regarding the disclosure of information to qualified researchers according to specified data use agreements. Carries over to 2022.

North Carolina Employment Nondiscrimination, Health Insurance Nondiscrimination, Other Topics, Other Lines of Insurance Nondiscrimination Pending

Prohibits discrimination based on various characteristics such as genetic information in the following areas: housing; employment; lending; education; public accommodation; insurance; and jury service. Carries over to 2022.

Minnesota Privacy Pending

Provides various rights to consumers regarding personal data. Requires certain businesses to conduct and document a data protection assessment of processing activities involving personal data, including sensitive data. Requires data controllers to obtain consent from consumers before processing sensitive data. Sensitive data is defined to include the processing of genetic or biometric data for the purpose of uniquely identifying a natural person. Carries over to 2022 session.

South Carolina Privacy Pending

Enacts the Parental Bill of Rights. Establishes certain rights of parents, including the right to consent in writing before any record of a child's blood or deoxyribonucleic acid (DNA) is created, stored, or shared, except as required by general law or authorized pursuant to a court order. Carries over to 2022.

New York Other Topics, Privacy Pending

Prohibits businesses from processing personal information for the purpose of advertising, marketing, soliciting, offering, selling, leasing, licensing, renting, or otherwise commercially contracting for employment, finance, health care, credit, insurance, housing, or education opportunities, in a manner that discriminates against or otherwise makes the opportunity unavailable on the basis of an individual's or class of individuals' actual or perceived predisposing genetic characteristics. Requires businesses to obtain freely given, specific, informed, and unambiguous opt-in consent from an individual to: (a) Process such individual's personal information; and (b) Make any changes in the processing of such individual's information that necessitate a change to the entity's required short-form privacy notice. Carries over to 2022.

Massachusetts Employment Nondiscrimination Pending

Requires the commission on workplace harassment and sexual assault in the legislature to research and develop model workplace harassment policies for consideration and use by the Senate and House of Representatives. The model policies must address identity-based harassment, including harassment based on genetic information. Carries over to 2022.

Delaware Privacy Pending

Seeks to provide consumers with critical information about how their personal information is being used by data brokers. Data brokers must register with the Consumer Protection Unit of the Department of Justice and answer questions regarding their use of personal information that would be published online to inform consumers. Data brokers are required annually to complete an electronic form designated by the Director of Consumer Protection. Data brokers must report on the form the types of consumer data, including genetic data, collected directly from consumers and from consumers� devices. Carries over to 2022.

North Carolina Other Topics Pending

Establishes certain rights of perinatal care patients, including the right to receive care and treatment free from discrimination based on characteristics such as genetic information. Carries over to 2022.

Minnesota Health Insurance Coverage Pending

Requires every policy, plan, certificate, or contract referred to in subdivision that provides coverage to a Minnesota resident to provide coverage for all diagnostic and preventive screenings and tests related to breast cancer, including but not limited to genetic testing, breast examination, mammography, magnetic resonance imaging, digital breast tomosynthesis, ultrasound, thermography, biopsy, and other breast cancer screening tests currently being evaluated by the federal Food and Drug Breast Cancer research Foundation. Carries over to 2022 session.

South Carolina Privacy Pending

Enacts the Parental Bill of Rights. Establishes certain rights of parents, including the right to consent in writing before any record of a child's blood or deoxyribonucleic acid (DNA) is created, stored, or shared, except as required by general law or authorized pursuant to a court order. Carries over to 2022.

New York Privacy Pending

Enacts the NY privacy act to require companies to disclose their methods of de-identifying personal information such as biometric information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared. Biometric information is defined to include DNA. Carries over to 2022.

Massachusetts Privacy Pending

Establishes privacy protections for the collection, use, retention and disclosure of biometric information by businesses in the state of Massachusetts. Biometric information is defined to include. Carries over to 2022.

Minnesota Other Topics, Privacy Statute

Medical data collected, stored, used, or disseminated by or filed with the commissioner in connection with a claim for workers' compensation benefits does not constitute genetic information for the purposes of �13.386 of the statutes pertaining to genetic privacy.

Oklahoma Health Insurance Nondiscrimination Statute

Group accident and sickness policies may not treat genetic information as a pre-existing condition or base eligibility or continued eligibility of any individual on health-status-related factors, including genetic information.

California Use of Residual Newborn Screening Specimens Statute

All testing results and personal information from hereditary disorders programs obtained from any individual, or from specimens from any individual, is confidential and is considered a confidential medical record except for information that the individual, parent, or guardian consents to be released, provided after being fully informed of the scope of the information requested to be released, of all of the risks, benefits, and purposes for the release, and of the identity of those to whom the information will be released or made available, except for data compiled without reference to the identity of any individual, and except for research purposes, provided that pursuant to the Common Rule The research must first be reviewed and approved by an IRB. The health department, any entities approved by the department, and researchers must maintain the confidentiality of patient information and blood samples in the same manner as other medical record information with patient identification and may use it only for approved research to (1) identify risk factors for children's and women's diseases;(2) research to develop and evaluate screening tests;(3) research to develop and evaluate prevention strategies; and (4) research to develop and evaluate treatments. The State Committee for the Protection of Human Subjects (CPHS) must determine if all of the if specified criteria are met for purposes of ensuring the security of a donor's personal information, before any blood samples are released pursuant for research purposes.

Maine Employment Nondiscrimination Statute

Conforms the Maine Apprenticeship Program to the Federal Equal Employment Opportunity Act of 1972. Requires a posting of statement that the apprentice will be accorded equal opportunity in all phases of apprenticeship employment and training, without discrimination because of various factors, including genetic information.

New Hampshire Health Insurance Nondiscrimination Statute

Health carriers may not establish rules of eligibility or continued eligibility for health coverage based on health status related factors of any employee or dependent, including genetic information, or impose a pre-existing condition exclusion based on genetic information in the absence of a diagnosis.

Virginia Research Statute

Requires informed consent to conduct human research. Requires institutions or agencies conducting or proposing to conduct or authorize human research to establish a human research review committee.

Florida Health Insurance Nondiscrimination Statute

An insurer that offers a group health insurance policy may not establish rules for eligibility or continued eligibility based on certain health status-related factors, including genetic information or use genetic information in the absence of a diagnosis as the basis for a pre-existing condition exclusion.

Arizona Health Insurance Nondiscrimination Statute

A health care services organization may not cancel an enrollee's evidence of coverage issued on a group basis because of criteria specified in the statutes, including such health status-related factors. Genetic information is a health status-related factor.

Idaho Health Insurance Nondiscrimination Statute

General managed care plans and health benefit plans covering large and small employers may not treat genetic information in the absence of a diagnosis as a pre-existing condition.

Montana Health Insurance Nondiscrimination, Research Statute

An insurer, health service corporation, health maintenance organization, fraternal benefit society, or other issuer of an individual or group policy or certificate of insurance may not discriminate based on a persons genetic traits. These entities also may not underwrite or condition coverage on a requirement or agreement to take a genetic test or on genetic information of an individual or his or her family member, and they may not seek genetic information for a purpose that is unrelated to assessing or managing ones health, inappropriate in an asymptomatic individual, or unrelated to research in which a subject is not personally identifiable. These entities may not require an individual to obtain a genetic test also with some exceptions. The law does not apply to life, disability income or long-term care insurance.

South Dakota Employment Nondiscrimination Statute

An employer may not to seek to obtain, obtain, or use genetic information of a current or prospective employee discriminate or restrict any right or benefit otherwise due or available to an employee or a prospective employee. A few exceptions are provided such as if the employer uses the test results for the limited purpose of taking disciplinary action against the employee based only on alleged misconduct. Any employee or prospective employee claiming to be aggrieved by an unlawful employment practice may bring a civil suit.

Colorado Health Insurance Coverage Statute

The law requires breast cancer screening with mammography annually for persons with a predisposition to breast cancer.

Maryland Health Insurance Nondiscrimination, Privacy, Research Statute

An insurer, nonprofit health service plan, or health maintenance organization, which does not include life insurance policies, annuity contracts, long-term care insurance policies, or disability insurance policies, may not (1) use a genetic test, the results of a genetic test, genetic information, or a request for genetic services to affect a health insurance policy or contract, (2) request or require a genetic test, the results of a genetic test, or genetic information for certain purposes, or (3) release identifiable genetic information or the results of a genetic test except for internal business and to a participating health care provider without prior written authorization. Disclosure of identifiable genetic information to an employee or authorized health care provider may only be for the purpose of providing medical care to patients or conducting research approved by an institutional review board established in accordance with federal law. The insurance commissioner has the authority to issue orders where a violation is found.

New York Employment Nondiscrimination Statute

Unless it can be clearly shown that a person's unique genetic disorder, defined to include the sickle cell trait, carriers of Tay-Sachs, and carriers of Cooleys anemia only, would prevent a person from performing the particular job, no person who is otherwise qualified may be denied equal opportunities to obtain or maintain employment or to advance in position in his job solely because a person has a unique genetic disorder.

Wisconsin Employment Nondiscrimination Statute

An employer, labor organization or employment or licensing agency may not (1) solicit, require or administer a genetic test to any person as a condition of employment, labor organization membership or licensure or affect the terms, conditions or privileges of employment, labor organization membership or licensure; (2) terminate the employment, labor organization membership or licensure of any person who obtains a genetic test; or (3) require or administer a genetic test without the prior written and informed consent of the employee, labor organization member or licensee, or of the prospective employee, labor organization member or licensee, who is the subject of the test. No person may disclose to an employer, labor organization, employment agency or licensing agency that an employee, labor organization member or licensee, or a prospective employee, labor organization member or licensee, has taken a genetic test, and no person may disclose the results of such a test to an employer, labor organization, employment agency or licensing agency without the prior written and informed consent of the subject of the test.

North Dakota Use of Residual Newborn Screening Specimens Statute

A person that conducts research on blood spots, other specimens, or registry data maintained by the health department must follow IRB processes for human subjects research, including obtaining parent or guardian authorization.

Arkansas Health Insurance Nondiscrimination Statute

Preexisting condition exclusions may not be based on genetic information in the absence of a diagnosis. Insurers issuing group health plans may not establish rules for eligibility or continued eligibility based on a health status-related factor, including genetic information.

Louisiana Health Insurance Coverage Statute

Requires health plans to cover the cost of the genetic testing of the BRCA1 and BRCA2 genes to detect an increased risk for breast and ovarian cancer when recommended by a healthcare provider in accordance with the United States Preventive Services Task Force recommendations.

Nevada Employment Nondiscrimination Statute

genetic_discrimination with regard to apprenticeship agreements is prohibited. Requires the Office of Workforce Innovation to suspend for one year the right of any employer, association of employers or organization of employees acting as agent for an employer to participate in a program under the provisions of apprenticeship program after notice and hearing, finds that the employer, association or organization has discriminated against an individual based on genetic information.

Utah Privacy Statute

Enacts the Genetic Information privacy Act. Requires a direct-to-consumer genetic testing company to:
(1) provide a consumer clear information regarding the company's collection, use, and disclosure of genetic data;
(2) provide a consumer a publicly available privacy notice; (3) obtain a consumer's consent for certain collection, use, or disclosure of the consumer's genetic data; (4) protect a consumer's genetic data; (5) allow a consumer to access and delete the consumer's genetic data; and (6) upon request, destroy a consumer's biological sample. Prohibits a direct-to-consumer genetic testing company from disclosing a consumer's genetic data to certain persons.

Delaware Privacy, Research Statute

Informed consent is required to obtain or retain genetic information about an individual. Exemptions include anonymous research where the identity of the subject will not be released. A sample from which genetic information has been obtained must be promptly destroyed with certain exceptions, including retention for anonymous research. An individual may inspect, request correction of and obtain genetic information from the records of that individual. The law sets forth civil penalties for violations.

Massachusetts Other Lines of Insurance Nondiscrimination, Privacy, Research Statute

Genetic information contained in reports or records held by hospitals, laboratories, physicians, insurance institutions and others named in the statute may not be divulged without informed written consent with some exceptions, which include in connection with life, disability, and long term care insurance, as allowable, or as confidential research information for use in epidemiological or clinical research conducted for the purpose of generating scientific knowledge about genes or learning about the genetic basis of disease or for developing pharmaceutical and other treatments of disease. Additional provisions concerning the performance of genetic tests apply to laboratories and other facilities. Organizations conducting pharmoco-economic studies in systematic research to determine the cost benefits of specific treatment for genetic based disease are exempt from the need to re-obtain informed consent. A person whose rights have been violated may bring a civil action.

Minnesota Employment Nondiscrimination Statute

Employers or employment agencies may not administer a genetic test or request, require, or collect protected genetic information as a condition of employment or affect the terms or conditions of employment or terminate the employment of any person based on protected genetic information. A person may not provide or interpret genetic information on a current or prospective employee for an employer or employment agency. An aggrieved person may bring a civil action.

Rhode Island Health Insurance Coverage Statute

Every individual or group hospital or medical insurance policy or individual or group hospital or medical services plan contract delivered, issued for delivery, or renewed in this state shall pay for two (2) screening mammograms per year when recommended by a physician for women who have been treated for breast cancer within the last five (5) years or are at high risk of developing breast cancer due to genetic predisposition (BRCA gene mutation or multiple first degree relatives) or high risk lesion on prior biopsy (lobular carcinoma in situ) or atypical ductal hyperplasia.

California Research Statute

Provides for the protection of human subjects participating in medical experiments. Enacts the Experimental Subject's Bill of Rights, which details informed consent requirements.

Maine Employment Nondiscrimination Statute

An employer may not fail or refuse to hire, discharge or otherwise discriminate against an employee or applicant for employment because of the individual's refusal to submit to a genetic test or refusal to provide the results of a genetic test, or based on the receipt of a genetic test or genetic counseling, except when based on a bona fide occupational qualification. The Maine Human Rights Commission has authority to enforce this provision.

New Jersey Health Insurance Nondiscrimination, Other Lines of Insurance Nondiscrimination Statute

No person may discriminate against an individual based on genetic information or the refusal of a genetic test with respect to hospital confinement or other supplemental limited benefit insurance. No person may make or permit any unfair discrimination against an individual in the application of the results of a genetic test or genetic information with respect to life insurance, including credit life insurance, an annuity, disability income insurance contract or credit accident insurance coverage, and, if results of a genetic test as permitted by these entities, the insurer must notify the individual who is the subject of the test that it is required and obtain the individual's prior written informed consent. The insurance commissioner has the authority to enforce these provisions.

Virginia Health Insurance Nondiscrimination Statute

In the statutes pertaining to group health plans, health status-related factors are defined to include genetic information, and pre-existing condition exclusion may not be based on genetic information in the absence of a diagnosis.

Florida Health Insurance Nondiscrimination Statute

Health care service programs may not treat genetic information as a preexisting condition in the absence of a diagnosis. A health maintenance organization that offers group health_insurance_coverage may not establish rules for eligibility or continued eligibility of an individual to enroll under the terms of the contract based on certain health status-related factors, including genetic information.

Arizona Health Insurance Nondiscrimination Statute

Genetic information is a health status-related factor that may not be used as the basis for denial of coverage or as the basis for a pre-existing condition exclusion in the absence of a diagnosis in the individual health insurance market.

Illinois Health Insurance Coverage Statute

Individual and group health insurers, health maintenance organizations and the Illinois Department of Healthcare and Family Services (for eligible individuals) must provide coverage for a mammogram and a screening MRI at the age and intervals considered medically necessary by the woman's health care provider for women under 40 years of age and having a family history of breast cancer, prior personal history of breast cancer, positive genetic testing, or other risk factors. Coverage for a comprehensive ultrasound screening of an entire breast or breasts also is required if a mammogram demonstrates heterogeneous or dense breast tissue based on the Breast Imaging Reporting and Data System established by the American College of Radiology or if the woman is at increased risk for breast cancer due to family history or prior personal history of breast cancer, positive genetic testing, or other indications as determined by a woman's health care provider.

Iowa Employment Nondiscrimination Statute

An employer, employment agency, labor organization, licensing agency, or its employees, agents, or members may not solicit, require or administer a genetic test as a condition of employment, application, membership or licensure or affect the terms, conditions, or privileges of employment, application, membership, or licensure, of a person who obtains a genetic test. A person may not sell or interpret genetic tests for the above entities except with informed written consent for the purpose of workers compensation or biomonitoring of workplace toxins. Agreements between parties regarding pay or benefit for taking a genetic test are prohibited. The law may be enforced through civil action.

Montana Health Insurance Nondiscrimination Statute

A group health plan or a health insurance issuer offering group health_insurance_coverage may not impose a pre-existing condition exclusion based on genetic information. A group health plan or a health insurance issuer offering group health_insurance_coverage may not establish rules for eligibility or continued eligibility of any individual to enroll under the terms of the group health plan based on health status-related factors, including genetic information.

Tennessee Privacy Statute

Schools must obtain written informed consent from a parent, legal guardian, or student, if the student is 18 years of age or older, before the collection of individual student biometric data, including DNA. The law also establishes additional protections for personally identifiable information, which includes biometric data, maintained by schools.

Displaying 901 - 950 of 1160

Additional Resources

Cornell Legal Information Institute
This website allows users to search for Federal and state laws and regulations. NHGRI’s Genome Statute and Legislation Database does not include regulations.

LawSeqSM Database
Developed at the University of Minnesota and Vanderbilt University Medical Center, this database allows users to search federal and state statutes, regulations, and reported judicial decisions. The database allows searches by jurisdiction (federal, state, and individuals states), source type, topic, and open text. This resource was developed by a project funded by NHGRI and the National Cancer Institute (NCI) on “LawSeqSM: Building a Sound Legal Foundation for Translating Genomics into Clinical Application” (grant #: R01HG008605; Susan M. Wolf,. Ellen Wright Clayton, and Frances Lawrenz, principal investigators). The team keeps this database up to date.

National Society of Genetic Counselors
To find information about state genetic counselor licensing laws, visit the National Society of Genetic Counselors’ website. NHGRI’s Genome Statute and Legislation Database does not include state laws related to genetic counseling. 

Last updated: February 8, 2024