S.F. No. 4182 - Genetic Information Privacy Act

• Creates the Genetic Information Privacy Act requiring direct-to-consumer genetic testing companies to provide clear privacy policies and obtain express consent before collecting, using, or disclosing genetic data from Minnesota residents.

• Mandates separate express consent for transferring genetic data to third parties, retaining biological samples, using data beyond the primary testing purpose, conducting research, and marketing based on genetic information.

• Requires companies to develop comprehensive security programs to protect genetic data and provide consumers processes to access, delete their accounts, and request destruction of biological samples.

• Prohibits disclosure of genetic data to health insurance, life insurance, long-term care insurance entities, or employers without written consumer consent, and requires valid legal process for law enforcement disclosures.

• Exempts protected health information under HIPAA, public and private institutions of higher education, and entities owned or operated by such institutions; enforced by the Minnesota commissioner of commerce.