1 | 1 | | II |
---|
2 | 2 | | 119THCONGRESS |
---|
3 | 3 | | 1 |
---|
4 | 4 | | STSESSION S. 863 |
---|
5 | 5 | | To provide consumers with the right to delete their genomic data, and for |
---|
6 | 6 | | other purposes. |
---|
7 | 7 | | IN THE SENATE OF THE UNITED STATES |
---|
8 | 8 | | MARCH5, 2025 |
---|
9 | 9 | | Mr. C |
---|
10 | 10 | | ASSIDY(for himself and Mr. PETERS) introduced the following bill; |
---|
11 | 11 | | which was read twice and referred to the Committee on Commerce, |
---|
12 | 12 | | Science, and Transportation |
---|
13 | 13 | | A BILL |
---|
14 | 14 | | To provide consumers with the right to delete their genomic |
---|
15 | 15 | | data, and for other purposes. |
---|
16 | 16 | | Be it enacted by the Senate and House of Representa-1 |
---|
17 | 17 | | tives of the United States of America in Congress assembled, 2 |
---|
18 | 18 | | SECTION 1. SHORT TITLE. 3 |
---|
19 | 19 | | This Act may be cited as the ‘‘Genomic Data Protec-4 |
---|
20 | 20 | | tion Act’’. 5 |
---|
21 | 21 | | SEC. 2. CONSUMER RIGHTS REGARDING PRIVACY OF 6 |
---|
22 | 22 | | GENOMIC DATA. 7 |
---|
23 | 23 | | (a) R |
---|
24 | 24 | | EQUIREMENTS.— 8 |
---|
25 | 25 | | (1) C |
---|
26 | 26 | | ONSUMER CONTROLS .— 9 |
---|
27 | 27 | | VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863 |
---|
28 | 28 | | kjohnson on DSK7ZCZBW3PROD with $$_JOB 2 |
---|
29 | 29 | | •S 863 IS |
---|
30 | 30 | | (A) IN GENERAL.—A direct-to-consumer 1 |
---|
31 | 31 | | genomic testing company shall provide a simple 2 |
---|
32 | 32 | | and effective mechanism to allow a consumer 3 |
---|
33 | 33 | | to— 4 |
---|
34 | 34 | | (i) access the genomic data of the con-5 |
---|
35 | 35 | | sumer; and 6 |
---|
36 | 36 | | (ii) subject to paragraph (4)— 7 |
---|
37 | 37 | | (I) delete the account of the con-8 |
---|
38 | 38 | | sumer, including any genomic data as-9 |
---|
39 | 39 | | sociated with such account; and 10 |
---|
40 | 40 | | (II) request the destruction of 11 |
---|
41 | 41 | | any biological sample of the consumer. 12 |
---|
42 | 42 | | (B) R |
---|
43 | 43 | | EQUIRED MECHANISM .—The direct- 13 |
---|
44 | 44 | | to-consumer genomic testing company shall 14 |
---|
45 | 45 | | make available to a consumer the mechanism 15 |
---|
46 | 46 | | described in subparagraph (A) through the pri-16 |
---|
47 | 47 | | mary means by which the company commu-17 |
---|
48 | 48 | | nicates with the consumer. 18 |
---|
49 | 49 | | (2) N |
---|
50 | 50 | | OTIFICATION.— 19 |
---|
51 | 51 | | (A) C |
---|
52 | 52 | | ONSUMER CONTROLS AND USE OF 20 |
---|
53 | 53 | | DEIDENTIFIED GENOMIC DATA .—A direct-to- 21 |
---|
54 | 54 | | consumer genomic testing company shall make 22 |
---|
55 | 55 | | available, in a clear and conspicuous, not mis-23 |
---|
56 | 56 | | leading, and easy-to-read manner a notice 24 |
---|
57 | 57 | | that— 25 |
---|
58 | 58 | | VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863 |
---|
59 | 59 | | kjohnson on DSK7ZCZBW3PROD with $$_JOB 3 |
---|
60 | 60 | | •S 863 IS |
---|
61 | 61 | | (i) provides a detailed and accurate 1 |
---|
62 | 62 | | representation of the rights set forth in 2 |
---|
63 | 63 | | clauses (i) and (ii) of paragraph (1)(A); 3 |
---|
64 | 64 | | and 4 |
---|
65 | 65 | | (ii) discloses that the deidentified 5 |
---|
66 | 66 | | genomic data of a consumer may be shared 6 |
---|
67 | 67 | | or disclosed to conduct medical or scientific 7 |
---|
68 | 68 | | research, consistent with the privacy regu-8 |
---|
69 | 69 | | lations promulgated under section 264(c) 9 |
---|
70 | 70 | | of the Health Insurance Portability and 10 |
---|
71 | 71 | | Accountability Act of 1996 (42 U.S.C. 11 |
---|
72 | 72 | | 1320d–2 note). 12 |
---|
73 | 73 | | (B) P |
---|
74 | 74 | | URCHASE OF COMPANY .—In the 13 |
---|
75 | 75 | | event that a direct-to-consumer genomic testing 14 |
---|
76 | 76 | | company is purchased or otherwise acquired by 15 |
---|
77 | 77 | | another entity, the direct-to-consumer genomic 16 |
---|
78 | 78 | | testing company shall send to each consumer, 17 |
---|
79 | 79 | | not fewer than 30 days prior to the date on 18 |
---|
80 | 80 | | which the purchase or acquisition is complete, a 19 |
---|
81 | 81 | | notice that includes— 20 |
---|
82 | 82 | | (i) the identity of the entity pur-21 |
---|
83 | 83 | | chasing or otherwise acquiring the com-22 |
---|
84 | 84 | | pany; and 23 |
---|
85 | 85 | | (ii) a detailed and accurate represen-24 |
---|
86 | 86 | | tation of the how a consumer can exercise 25 |
---|
87 | 87 | | VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863 |
---|
88 | 88 | | kjohnson on DSK7ZCZBW3PROD with $$_JOB 4 |
---|
89 | 89 | | •S 863 IS |
---|
90 | 90 | | the rights set forth in clauses (i) and (ii) 1 |
---|
91 | 91 | | of paragraph (1)(A) under the new owner-2 |
---|
92 | 92 | | ship. 3 |
---|
93 | 93 | | (3) P |
---|
94 | 94 | | ROCESSING OF DELETION OR DESTRUC -4 |
---|
95 | 95 | | TION REQUESTS.— 5 |
---|
96 | 96 | | (A) I |
---|
97 | 97 | | N GENERAL.—With respect to a con-6 |
---|
98 | 98 | | sumer’s request to delete the genomic data or 7 |
---|
99 | 99 | | to destroy the biological sample of the con-8 |
---|
100 | 100 | | sumer, a direct-to-consumer genomic testing 9 |
---|
101 | 101 | | company shall— 10 |
---|
102 | 102 | | (i) fulfill such request not later than 11 |
---|
103 | 103 | | 30 days after the date on which the con-12 |
---|
104 | 104 | | sumer makes such request; and 13 |
---|
105 | 105 | | (ii) notify the consumer of such dele-14 |
---|
106 | 106 | | tion or destruction not later than 30 days 15 |
---|
107 | 107 | | after the deletion or destruction. 16 |
---|
108 | 108 | | (B) O |
---|
109 | 109 | | UTSTANDING REQUESTS DURING 17 |
---|
110 | 110 | | PURCHASE OF COMPANY .—In the event that a 18 |
---|
111 | 111 | | direct-to-consumer genomic testing company is 19 |
---|
112 | 112 | | purchased or otherwise acquired by another en-20 |
---|
113 | 113 | | tity while a consumer’s request to delete the 21 |
---|
114 | 114 | | genomic data or to destroy the biological sample 22 |
---|
115 | 115 | | of the consumer is outstanding— 23 |
---|
116 | 116 | | (i) the entity that is purchasing or 24 |
---|
117 | 117 | | otherwise acquiring the company shall 25 |
---|
118 | 118 | | VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863 |
---|
119 | 119 | | kjohnson on DSK7ZCZBW3PROD with $$_JOB 5 |
---|
120 | 120 | | •S 863 IS |
---|
121 | 121 | | comply with the requirements described in 1 |
---|
122 | 122 | | subparagraph (A); and 2 |
---|
123 | 123 | | (ii) the 30-day period to fulfill such 3 |
---|
124 | 124 | | request shall begin on the date on which 4 |
---|
125 | 125 | | the consumer makes such request to the 5 |
---|
126 | 126 | | direct-to-consumer genomic testing com-6 |
---|
127 | 127 | | pany. 7 |
---|
128 | 128 | | (4) E |
---|
129 | 129 | | XCEPTIONS.—A direct-to-consumer 8 |
---|
130 | 130 | | genomic testing company shall not permit a con-9 |
---|
131 | 131 | | sumer to exercise a right described in paragraph 10 |
---|
132 | 132 | | (1)(A)(ii) if the company determines that the exer-11 |
---|
133 | 133 | | cise of the right would require the deletion of infor-12 |
---|
134 | 134 | | mation— 13 |
---|
135 | 135 | | (A) subject to a warrant, lawfully executed 14 |
---|
136 | 136 | | subpoena, or other court order; or 15 |
---|
137 | 137 | | (B) the company is required to retain in 16 |
---|
138 | 138 | | order to comply with any other applicable legal 17 |
---|
139 | 139 | | or regulatory requirement. 18 |
---|
140 | 140 | | (b) E |
---|
141 | 141 | | NFORCEMENT.— 19 |
---|
142 | 142 | | (1) U |
---|
143 | 143 | | NFAIR OR DECEPTIVE ACTS OR PRAC -20 |
---|
144 | 144 | | TICES.—A violation of this section or a regulation 21 |
---|
145 | 145 | | promulgated thereunder shall be treated as a viola-22 |
---|
146 | 146 | | tion of a rule defining an unfair or deceptive act or 23 |
---|
147 | 147 | | practice under section 18(a)(1)(B) of the Federal 24 |
---|
148 | 148 | | Trade Commission Act (15 U.S.C. 57a(a)(1)(B)). 25 |
---|
149 | 149 | | VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00005 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863 |
---|
150 | 150 | | kjohnson on DSK7ZCZBW3PROD with $$_JOB 6 |
---|
151 | 151 | | •S 863 IS |
---|
152 | 152 | | (2) POWERS OF THE COMMISSION .— 1 |
---|
153 | 153 | | (A) I |
---|
154 | 154 | | N GENERAL.—The Commission shall 2 |
---|
155 | 155 | | enforce this section in the same manner, by the 3 |
---|
156 | 156 | | same means, and with the same jurisdiction, 4 |
---|
157 | 157 | | powers, and duties as though all applicable 5 |
---|
158 | 158 | | terms and provisions of the Federal Trade 6 |
---|
159 | 159 | | Commission Act (15 U.S.C. 41 et seq.) were in-7 |
---|
160 | 160 | | corporated into and made a part of this section. 8 |
---|
161 | 161 | | (B) P |
---|
162 | 162 | | RIVILEGES AND IMMUNITIES .—Any 9 |
---|
163 | 163 | | person who violates this section or a regulation 10 |
---|
164 | 164 | | promulgated thereunder shall be subject to the 11 |
---|
165 | 165 | | penalties and entitled to the privileges and im-12 |
---|
166 | 166 | | munities provided in the Federal Trade Com-13 |
---|
167 | 167 | | mission Act (15 U.S.C. 41 et seq.). 14 |
---|
168 | 168 | | (C) A |
---|
169 | 169 | | UTHORITY PRESERVED .—Nothing in 15 |
---|
170 | 170 | | this section shall be construed to limit the au-16 |
---|
171 | 171 | | thority of the Commission under any other pro-17 |
---|
172 | 172 | | vision of law. 18 |
---|
173 | 173 | | (D) R |
---|
174 | 174 | | ULEMAKING.—Not later than 1 year 19 |
---|
175 | 175 | | after the date of enactment of this section, the 20 |
---|
176 | 176 | | Commission may promulgate in accordance with 21 |
---|
177 | 177 | | section 553 of title 5, United States Code, such 22 |
---|
178 | 178 | | rules as may be necessary to carry out this sec-23 |
---|
179 | 179 | | tion. 24 |
---|
180 | 180 | | (c) D |
---|
181 | 181 | | EFINITIONS.—In this section: 25 |
---|
182 | 182 | | VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00006 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863 |
---|
183 | 183 | | kjohnson on DSK7ZCZBW3PROD with $$_JOB 7 |
---|
184 | 184 | | •S 863 IS |
---|
185 | 185 | | (1) BIOLOGICAL SAMPLE.—The term ‘‘biological 1 |
---|
186 | 186 | | sample’’ means any material part of the human, dis-2 |
---|
187 | 187 | | charge therefrom, or derivative thereof, such as tis-3 |
---|
188 | 188 | | sue, blood, urine, or saliva, known to contain 4 |
---|
189 | 189 | | deoxyribonucleic acid (DNA). 5 |
---|
190 | 190 | | (2) C |
---|
191 | 191 | | OMMISSION.—The term ‘‘Commission’’ 6 |
---|
192 | 192 | | means the Federal Trade Commission. 7 |
---|
193 | 193 | | (3) C |
---|
194 | 194 | | ONSUMER.—The term ‘‘consumer’’ means 8 |
---|
195 | 195 | | an individual who provides a biological sample to a 9 |
---|
196 | 196 | | direct-to-consumer genomic testing company. 10 |
---|
197 | 197 | | (4) D |
---|
198 | 198 | | EIDENTIFIED GENOMIC DATA .—The term 11 |
---|
199 | 199 | | ‘‘deidentified genomic data’’ means data that cannot 12 |
---|
200 | 200 | | be used to infer information about, or otherwise be 13 |
---|
201 | 201 | | linked to, a particular individual, provided that the 14 |
---|
202 | 202 | | business that possesses the information does all of 15 |
---|
203 | 203 | | the following: 16 |
---|
204 | 204 | | (A) Takes reasonable measures to ensure 17 |
---|
205 | 205 | | that the information cannot be associated with 18 |
---|
206 | 206 | | a particular individual. 19 |
---|
207 | 207 | | (B) Publicly commits to maintain and use 20 |
---|
208 | 208 | | the information only in deidentified form and 21 |
---|
209 | 209 | | not to attempt to reidentify the information, ex-22 |
---|
210 | 210 | | cept that the business may attempt to reiden-23 |
---|
211 | 211 | | tify the information solely for the purpose of 24 |
---|
212 | 212 | | determining whether its deidentification proc-25 |
---|
213 | 213 | | VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00007 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863 |
---|
214 | 214 | | kjohnson on DSK7ZCZBW3PROD with $$_JOB 8 |
---|
215 | 215 | | •S 863 IS |
---|
216 | 216 | | esses satisfy the requirements of this subpara-1 |
---|
217 | 217 | | graph, provided that the business does not use 2 |
---|
218 | 218 | | or disclose any information reidentified in this 3 |
---|
219 | 219 | | process and destroys the reidentified informa-4 |
---|
220 | 220 | | tion upon completion of that assessment. 5 |
---|
221 | 221 | | (C) Contractually obligates any recipients 6 |
---|
222 | 222 | | of the information to take reasonable measures 7 |
---|
223 | 223 | | to ensure that the information cannot be associ-8 |
---|
224 | 224 | | ated with a particular individual and to commit 9 |
---|
225 | 225 | | to maintaining and using the information only 10 |
---|
226 | 226 | | in deidentified form and not to reidentify the 11 |
---|
227 | 227 | | information. 12 |
---|
228 | 228 | | (5) D |
---|
229 | 229 | | IRECT-TO-CONSUMER GENOMIC TESTING 13 |
---|
230 | 230 | | COMPANY.— 14 |
---|
231 | 231 | | (A) I |
---|
232 | 232 | | N GENERAL.—The term ‘‘direct-to- 15 |
---|
233 | 233 | | consumer genomic testing company’’ means a 16 |
---|
234 | 234 | | person that does any of the following: 17 |
---|
235 | 235 | | (i) Manufactures or develops genomic 18 |
---|
236 | 236 | | testing products or services for sale di-19 |
---|
237 | 237 | | rectly to consumers. 20 |
---|
238 | 238 | | (ii) Analyzes or interprets genomic 21 |
---|
239 | 239 | | data obtained from a consumer. 22 |
---|
240 | 240 | | (iii) Collects, uses, maintains, or dis-23 |
---|
241 | 241 | | closes genomic data collected or derived 24 |
---|
242 | 242 | | VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00008 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863 |
---|
243 | 243 | | kjohnson on DSK7ZCZBW3PROD with $$_JOB 9 |
---|
244 | 244 | | •S 863 IS |
---|
245 | 245 | | from a direct-to-consumer genomic testing 1 |
---|
246 | 246 | | product or service. 2 |
---|
247 | 247 | | (iv) Purchases or acquires genomic 3 |
---|
248 | 248 | | data from a direct-to-consumer genomic 4 |
---|
249 | 249 | | testing company. 5 |
---|
250 | 250 | | (B) E |
---|
251 | 251 | | XCLUSION FOR HEALTH CARE PRO -6 |
---|
252 | 252 | | FESSIONALS.—The term ‘‘direct-to-consumer 7 |
---|
253 | 253 | | genomic testing company’’ shall not include a 8 |
---|
254 | 254 | | health care professional (as defined in section 9 |
---|
255 | 255 | | 225 of the Public Health Service Act (42 10 |
---|
256 | 256 | | U.S.C. 234)) that performs an action described 11 |
---|
257 | 257 | | in subparagraph (A) for purposes of diagnosis 12 |
---|
258 | 258 | | or treatment of a medical condition. 13 |
---|
259 | 259 | | (6) G |
---|
260 | 260 | | ENOMIC DATA.— 14 |
---|
261 | 261 | | (A) I |
---|
262 | 262 | | N GENERAL.—The term ‘‘genomic 15 |
---|
263 | 263 | | data’’— 16 |
---|
264 | 264 | | (i) means any data, regardless of its 17 |
---|
265 | 265 | | format or whether the data has been 18 |
---|
266 | 266 | | deidentified, that results from the analysis 19 |
---|
267 | 267 | | of a biological sample from a consumer 20 |
---|
268 | 268 | | and concerns genomic material; and 21 |
---|
269 | 269 | | (ii) includes— 22 |
---|
270 | 270 | | (I) deoxyribonucleic acids (DNA), 23 |
---|
271 | 271 | | ribonucleic acids (RNA), genes, chro-24 |
---|
272 | 272 | | mosomes, alleles, genomes, alterations 25 |
---|
273 | 273 | | VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00009 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863 |
---|
274 | 274 | | kjohnson on DSK7ZCZBW3PROD with $$_JOB 10 |
---|
275 | 275 | | •S 863 IS |
---|
276 | 276 | | or modifications to DNA or RNA, and 1 |
---|
277 | 277 | | single nucleotide polymorphisms 2 |
---|
278 | 278 | | (SNPs); 3 |
---|
279 | 279 | | (II) uninterpreted data that re-4 |
---|
280 | 280 | | sults from the analysis of the biologi-5 |
---|
281 | 281 | | cal sample; or 6 |
---|
282 | 282 | | (III) any information extrapo-7 |
---|
283 | 283 | | lated, derived, or inferred therefrom. 8 |
---|
284 | 284 | | (B) E |
---|
285 | 285 | | XCLUSION OF DEIDENTIFIED 9 |
---|
286 | 286 | | GENOMIC DATA.—The term ‘‘genomic data’’ 10 |
---|
287 | 287 | | shall not include the deidentified genomic data 11 |
---|
288 | 288 | | of a consumer to the extent that such data is 12 |
---|
289 | 289 | | used to conduct medical or scientific research, 13 |
---|
290 | 290 | | consistent with the privacy regulations promul-14 |
---|
291 | 291 | | gated under section 264(c) of the Health Insur-15 |
---|
292 | 292 | | ance Portability and Accountability Act of 1996 16 |
---|
293 | 293 | | (42 U.S.C. 1320d–2 note). 17 |
---|
294 | 294 | | (7) G |
---|
295 | 295 | | ENOMIC TESTING PRODUCT OR SERV -18 |
---|
296 | 296 | | ICE.—The term ‘‘genomic testing product or serv-19 |
---|
297 | 297 | | ice’’ means any testing product or service that ana-20 |
---|
298 | 298 | | lyzes or interprets the genomic data or biological 21 |
---|
299 | 299 | | sample of a consumer. 22 |
---|
300 | 300 | | (d) R |
---|
301 | 301 | | ELATIONSHIP TO FEDERAL AND STATE 23 |
---|
302 | 302 | | L |
---|
303 | 303 | | AWS.— 24 |
---|
304 | 304 | | VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00010 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863 |
---|
305 | 305 | | kjohnson on DSK7ZCZBW3PROD with $$_JOB 11 |
---|
306 | 306 | | •S 863 IS |
---|
307 | 307 | | (1) FEDERAL LAW PRESERVATION .—Nothing in 1 |
---|
308 | 308 | | this Act, or a regulation promulgated under this Act, 2 |
---|
309 | 309 | | shall be construed to limit any other provision of 3 |
---|
310 | 310 | | Federal law, except as specifically provided in this 4 |
---|
311 | 311 | | Act. 5 |
---|
312 | 312 | | (2) S |
---|
313 | 313 | | TATE LAW PRESERVATION .—Nothing in 6 |
---|
314 | 314 | | this Act, or a regulation promulgated under this Act, 7 |
---|
315 | 315 | | shall be construed to preempt, displace, or supplant 8 |
---|
316 | 316 | | any State law, except to the extent that a provision 9 |
---|
317 | 317 | | of State law conflicts with a provision of this Act, 10 |
---|
318 | 318 | | or a regulation promulgated under this Act, and 11 |
---|
319 | 319 | | then only to the extent of the conflict. 12 |
---|
320 | 320 | | Æ |
---|
321 | 321 | | VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00011 Fmt 6652 Sfmt 6301 E:\BILLS\S863.IS S863 |
---|
322 | 322 | | kjohnson on DSK7ZCZBW3PROD with $$_JOB |
---|