<?xml version='1.0' encoding='utf-8'?>
<section article="gcl" article_name="Commercial Law" number="14-4401" title_number="14" title_name="Miscellaneous Consumer Protection Provisions" subtitle_number="44" subtitle_name="Genetic Information Privacy Act">
  <level label="a">
    <text>In this subtitle the following words have the meanings indicated.</text>
  </level>
  <level label="b">
    <level label="1">
      <text>“Biological sample” means a material part or a derivative of or discharge from a material part of a human known to contain DNA.</text>
    </level>
    <level label="2">
      <text>“Biological sample” includes human tissue, blood, urine, and saliva.</text>
    </level>
  </level>
  <level label="c">
    <text>“Deidentified data” means data that:</text>
    <level label="1">
      <text>Cannot reasonably be:</text>
      <level label="i">
        <text>Used to infer information about a consumer; or</text>
      </level>
      <level label="ii">
        <text>Linked to an identifiable consumer; and</text>
      </level>
    </level>
    <level label="2">
      <text>Is subject to:</text>
      <level label="i">
        <text>Administrative and technical measures to ensure that the data cannot be associated with a particular consumer;</text>
      </level>
      <level label="ii">
        <text>Public commitment by the company to maintain and use data in a deidentifiable form and not attempt to reidentify data; and</text>
      </level>
      <level label="iii">
        <text>Legally enforceable contractual obligations that prohibit a recipient of the data from attempting to reidentify the data.</text>
      </level>
    </level>
  </level>
  <level label="d">
    <text>“Direct–to–consumer genetic testing company” means an entity that:</text>
    <level label="1">
      <text>Offers genetic testing products or services directly to a consumer; or</text>
    </level>
    <level label="2">
      <text>Collects, uses, or analyzes genetic data that resulted from a direct–to–consumer genetic testing product or service that was provided to the company by a consumer.</text>
    </level>
  </level>
  <level label="e">
    <text>“DNA” means deoxyribonucleic acid.</text>
  </level>
  <level label="f">
    <text>“Express consent” means an affirmative response by a consumer to a specific, discrete, freely given, and unambiguous notice regarding the collection, use, or disclosure of the consumer’s genetic data for a specific purpose.</text>
  </level>
  <level label="g">
    <level label="1">
      <text>“Genetic data” means data, in any format, that concerns the genetic characteristics of a consumer.</text>
    </level>
    <level label="2">
      <text>“Genetic data” includes:</text>
      <level label="i">
        <text>Raw sequence data that result from sequencing of a consumer’s complete extracted DNA or a portion of the consumer’s complete extracted DNA;</text>
      </level>
      <level label="ii">
        <text>Genotypic and phenotypic information that results from analyzing raw sequence data;</text>
      </level>
      <level label="iii">
        <text>Information extrapolated, derived, or inferred from the analysis of raw sequence data; and</text>
      </level>
      <level label="iv">
        <text>Self–reported health information submitted to a direct–to–consumer genetic testing company by a consumer regarding the consumer’s health conditions:</text>
        <level label="1">
          <text>That is used for scientific research or product development; and</text>
        </level>
        <level label="2">
          <text>Analyzed in connection with the consumer’s raw sequence data.</text>
        </level>
      </level>
    </level>
    <level label="3">
      <text>“Genetic data” does not include deidentified data.</text>
    </level>
  </level>
  <level label="h">
    <text>“Genetic testing” means a laboratory test of the complete DNA, regions of DNA, chromosomes, genes, or gene products of a consumer to determine the genetic characteristics of the consumer.</text>
  </level>
  <level label="i">
    <text>“Marketing” does not include the providing of customized content or offers on the websites or through the applications or services provided by the direct–to–consumer genetic testing company with the first–party relationship to the consumer.</text>
  </level>
</section>
