Learn About The Law
Get help with your legal needs
FindLaw’s Learn About the Law features thousands of informational articles to help you understand your options. And if you’re ready to hire an attorney, find one in your area who can help.
Current as of January 01, 2025 | Updated by Findlaw Staff
(1) A direct-to-consumer genetic testing company shall:
(a) provide to a consumer:
(i) essential information about the company's collection, use, and disclosure of genetic data; and
(ii) a prominent, publicly available privacy notice that includes information about the company's data collection, consent, use, access, disclosure, transfer, security, retention, and deletion practices;
(b) obtain a consumer's initial express consent for collection, use, or disclosure of the consumer's genetic data that:
(i) clearly describes the company's use of the genetic data that the company collects through the company's genetic testing product or service;
(ii) specifies who has access to test results; and
(iii) specifies how the company may share the genetic data;
(c) if the company engages in any of the following, obtain a consumer's:
(i) separate express consent for:
(A) the transfer or disclosure of the consumer's genetic data to any person other than the company's vendors and service providers;
(B) the use of genetic data beyond the primary purpose of the company's genetic testing product or service; or
(C) the company's retention of any biological sample provided by the consumer following the company's completion of the initial testing service requested by the consumer;
(ii) informed consent in accordance with the Federal Policy for the Protection of Human Subjects, 45 C.F.R. Part 46, for transfer or disclosure of the consumer's genetic data to a third party for:
(A) research purposes; or
(B) research conducted under the control of the company for the purpose of publication or generalizable knowledge; and
(iii) express consent for:
(A) marketing to a consumer based on the consumer's genetic data; or
(B) marketing by a third party person to a consumer based on the consumer having ordered or purchased a genetic testing product or service;
(d) require valid legal process for the company's disclosure of a consumer's genetic data to law enforcement or any government entity without the consumer's express written consent;
(e) develop, implement, and maintain a comprehensive security program to protect a consumer's genetic data against unauthorized access, use, or disclosure; and
(f) provide a process for a consumer to:
(i) access the consumer's genetic data;
(ii) delete the consumer's account and genetic data; and
(iii) destroy the consumer's biological sample.
(2) Notwithstanding Subsection (1)(c)(iii), a direct-to-consumer genetic testing company with a first-party relationship to a consumer may, without obtaining the consumer's express consent, provide customized content or offers on the company's website or through the company's application or service.
Cite this article: FindLaw.com - Utah Code Title 13. Commerce and Trade § 13-60-104. Consumer genetic information--Privacy notice--Consent--Access--Deletion--Destruction - last updated January 01, 2025 | https://codes.findlaw.com/ut/title-13-commerce-and-trade/ut-code-sect-13-60-104/
FindLaw Codes may not reflect the most recent version of the law in your jurisdiction. Please verify the status of the code you are researching with the state legislature before relying on it for your legal needs.
A free source of state and federal court opinions, state laws, and the United States Code. For more information about the legal concepts addressed by these cases and statutes, visit FindLaw’s Learn About the Law.
Get help with your legal needs
FindLaw’s Learn About the Law features thousands of informational articles to help you understand your options. And if you’re ready to hire an attorney, find one in your area who can help.
Search our directory by legal issue
Enter information in one or both fields (Required)