NJ S4826

Requires direct-to-consumer genetic testing companies (such as 23andMe, Ancestry.com, MyHeritage) to comply with HIPAA and all applicable state laws regarding storage and sale of protected health information

Prohibits biotechnology companies from selling, sharing, or disseminating consumer health information or genetic data to any other entity, whether individually identifiable or aggregated de-identified data

Mandates that biotechnology companies destroy all consumer health data upon merger, acquisition, or bankruptcy, with at least 60 days notice to consumers before destruction

Requires companies to provide consumers the option to download or retrieve their data before destruction in merger, acquisition, or bankruptcy situations

Allows companies in mergers or acquisitions to request continued use of consumer data through a form that discloses any changes in data usage and offers consumers the option to have their information destroyed instead