Genome Statute and Legislation Database

Establishes a framework for controlling and processing personal data in the Commonwealth. Applies to all persons that conduct business in the Commonwealth and either (i) control or process personal data of at least 100,000 consumers or (ii) derive over 50 percent of gross revenue from the sale of personal data and control or process personal data of at least 25,000 consumers. Outlines responsibilities and privacy protection standards for data controllers and processors. Grants consumer rights to access, correct, delete, obtain a copy of personal data, and to opt out of the processing of personal data for the purposes of targeted advertising. Sensitive data, a form of personal data, is defined to include the processing of genetic or biometric data. The bill has a delayed effective date of January 1, 2023. Carried over to 2021 Special Session 1. Governor approved 3/2/21.

Prohibits a sponsor of a registered apprenticeship program from discriminating against an apprentice or applicant for apprenticeship on the basis of various factors, including genetic information.

Establishes requirements for direct-to-consumer genetic testing companies, including requirements related to information to be provided
to consumers, consent requirements, requirements related to sec...

Establishes requirements for direct-to-consumer genetic testing companies, defined in the bill, including requirements related to information to be provided to consumers, express consent requirements...

An employer may not request, require, solicit or administer a genetic test as a condition of employment or refuse to hire, fail to promote, discharge or otherwise adversely affect any terms or conditions of employment of any employee or prospective employee solely on the basis of a genetic characteristic or the results of a genetic test, regardless of how the employer obtained such information or results. An employee may bring an action in a court of competent jurisdiction over an employer who took adverse action against the employee.

Provides that
any person who knowingly gives any false information or makes any
false statements for the purpose of determining paternity is guilty
of a Class 6 felony. The bill further requires an a...

Establishes a framework for controlling and processing personal data in the Commonwealth. Applies to all persons that conduct business in the Commonwealth and either (i) control or process personal data of at least 100,000 consumers or (ii) derive over 50 percent of gross revenue from the sale of personal data and control or process personal data of at least 25,000 consumers. Outlines responsibilities and privacy protection standards for data controllers and processors. Grants consumer rights to access, correct, delete, obtain a copy of personal data, and to opt out of the processing of personal data for the purposes of targeted advertising. Sensitive data, a form of personal data, is defined to include the processing of genetic or biometric data. The bill has a delayed effective date of January 1, 2023. Carried over to 2021 Special Session 1. Governor approved 3/2/21.

A person proposing to issue, re-issue, or renew accident and sickness insurance, excluding disability income insurance, issued by any insurer providing hospital, medical and surgical or major medical coverage on an expense incurred basis, a corporation providing a health services plan, or an HMO providing a health care plan may not on the basis of any genetic information or a request for genetic services (1) terminate, restrict, limit, or otherwise apply conditions to coverage of an individual or restrict the sale to an individual, (2) cancel or refuse to renew the coverage of an individual, (3) exclude an individual from coverage, (4) impose a waiting period, (5) require inclusion of a rider that excludes coverage for certain benefits and services, (6) establish differentials in premium rates for coverage, or (7) disclose any genetic information about an individual or his/her family member collected or received in connection with any insurance transaction unless the disclosure is made with the written authorization of the individual.

This bill regulates the collection and maintenance of personally identifiable information, including DNA, by education agencies. Died.

Establishes policies to prevent workplace harassment in the legislative branch. Workplace harassment is defined as unwelcome verbal, written, or physical conduct that either denigrates or shows hostility or aversion toward a person on the basis of certain characteristics, including genetics, that (i) has the purpose or effect of creating an environment that a reasonable person would consider intimidating, hostile, or abusive; (ii) has the purpose or effect of unreasonably interfering with an employee's work performance; or (iii) affects an employee's employment opportunities or compensation. Died.

Requires each legislative branch agency to adopt and implement the Commonwealth Workplace Harassment Policy established by the Department of Human Resource Management. Workplace harassment is defined to include harassment based on genetic information. Died.

This bill prohibits the treatment of genetic information as a preexisting condition in the Small Employer Health Insurance Exchange in the absence of a diagnosis of the condition related to such information. Measure failed.

Prohibits discrimination in apprenticeships based on various factors, including genetic information. Died.

This bill prohibits the treatment of genetic information as a preexisting condition in the Small Employer Health Insurance Exchange in the absence of a diagnosis of the condition related to such information. Measure failed.

Gives consumers the right to access their data and determine if it has been sold to a data broker. Requires a controller, defined in the bill as a person that, alone or jointly with others, determines the purposes and means of the processing of personal data, to facilitate requests to exercise consumer rights regarding access, correction, deletion, restriction of processing, data portability, objection, and profiling. The measure also (i) requires transparent processing of personal data through a privacy notice, (ii) requires controllers to disclose if they process personal data for direct marketing or sell it to data brokers, and (iii) requires controllers to conduct a risk assessment of each of their processing activities involving personal data and an additional risk assessment any time there is a change in processing that materially increases the risk to consumers. The measure applies to any legal entity that conducts business in the Commonwealth or produces products or services that are intentionally targeted to residents of the Commonwealth and that (a) controls or processes personal data of not fewer than 100,000 consumers or (b) derives over 50 percent of gross revenue from the sale of personal data and processes or controls personal data of not fewer than 25,000 customers. Sensitive data includes genetic or biometric data. Died.

This bill prohibits the establishment of rules for eligibility or continued eligibility based on a health status-related factor, including genetic information, in Virginia share health insurance policies. This bill also prohibits pre-existing condition exclusions in these policies based on genetic information in the absence of a diagnosis of a condition related to such information. Measure failed.

Requires the legislative branch of the Commonwealth to develop a policy on workplace harassment. Workplace harassment is defined as any unwelcome verbal, written, or physical conduct that either denigrates or shows hostility or aversion toward a person on the basis of various factors, including genetics. Died.

This bill prohibits the establishment of rules for eligibility or continued eligibility based on a health status-related factor, including genetic information, in Virginia share health insurance policies. This bill also prohibits pre-existing condition exclusions in these policies based on genetic information in the absence of a diagnosis of a condition related to such information. Measure failed.

Enacts measures to safeguard the privacy, confidentiality, security, and integrity of a consumer's genetic data resulting from direct-to-consumer genetic testing. Died.

Establishes protections for student biometric information, including a DNA sequence. Died.

Requires controller who determines the purposes and means of the processing of personal data to obtain consent prior to processing sensitive data, including genetic data. Controllers must conduct an assessment of activities pertaining to the processing of sensitive data. Died.

Substitute bill version: Requires the drug utilization review board to consider the safety, efficacy, and cost-effectiveness of drugs and gene therapies in its recommendations to the director of the authority regarding coverage for medical assistance programs. Died.

Establishes the parent's bill of rights. Requirements set forth in the bill include parental written consent before any record of a minor child's blood or DNA is made, shared or stored unless required by law or court order. Died.

Establishes the Healthy Washington program to provide comprehensive universal single-payer health care coverage for all residents of the state. The board of Healthy Washington must create requirements and standards for the program and for health care organizations, care coordinators, and health care providers pertaining to nondiscrimination with respect to members and health care providers on the basis of genetic information. Died.

Requires controller who determines the purposes and means of the processing of personal data to obtain consent prior to processing sensitive data, including genetic data. Controllers must conduct an assessment of activities pertaining to the processing of sensitive data. Died.