Existing law, the Genetic Information Privacy Act, requires a direct-to-consumer genetic testing company, as defined, to provide a consumer with certain information regarding the company’s policies and procedures for the collection, use, maintenance, and disclosure, as applicable, of genetic data, and to obtain a consumer’s express consent for collection, use, or disclosure of the consumer’s genetic data, as specified.

This bill would make a person guilty of unlawful use of DNA in the first degree, a felony, if they intentionally and without express consent sell or otherwise transfer another individual’s DNA sample or genetic data to a third party, as specified.

The bill would make a person guilty of unlawful use of DNA in the second degree, a felony, if they intentionally and without express consent submit another individual’s DNA for genetic testing, conduct or procure the conducting of genetic testing of another individual’s DNA, or disclose another individual’s genetic data to a third party, except as specified.

The bill would make a person guilty of unlawful use of DNA in the third degree, a misdemeanor, if they collect or retain another individual’s DNA sample with the intent to perform a DNA analysis or if they collect or retain another individual’s DNA sample or genetic information by accessing a computer system either without authorization or by exceeding their authorized access to the computer system.