PA HB1530

Direct-to-consumer genetic testing companies must obtain express consent from Pennsylvania residents before collecting, using, or disclosing genetic data, with separate consent required for third-party transfers, sample retention after testing, research purposes, and marketing

Companies must provide clear privacy policies, implement comprehensive security programs, and give consumers the ability to access their genetic data, delete their accounts, and request destruction of biological samples

Disclosure of genetic data to health insurers, life insurers, long-term care insurers, or employers is prohibited without the consumer's written consent

Law enforcement access to genetic data requires valid legal process unless the consumer provides express written consent; exemptions exist for crime scene evidence and identifying deceased individuals

The Attorney General may bring civil actions with penalties of $2,500 per violation plus actual damages and attorney fees; the act takes effect 60 days after enactment