Us Congress 2025-2026 Regular Session

Us Congress Senate Bill SB863 Compare Versions

Only one version of the bill is available at this time.
OldNewDifferences
11 II
22 119THCONGRESS
33 1
44 STSESSION S. 863
55 To provide consumers with the right to delete their genomic data, and for
66 other purposes.
77 IN THE SENATE OF THE UNITED STATES
88 MARCH5, 2025
99 Mr. C
1010 ASSIDY(for himself and Mr. PETERS) introduced the following bill;
1111 which was read twice and referred to the Committee on Commerce,
1212 Science, and Transportation
1313 A BILL
1414 To provide consumers with the right to delete their genomic
1515 data, and for other purposes.
1616 Be it enacted by the Senate and House of Representa-1
1717 tives of the United States of America in Congress assembled, 2
1818 SECTION 1. SHORT TITLE. 3
1919 This Act may be cited as the ‘‘Genomic Data Protec-4
2020 tion Act’’. 5
2121 SEC. 2. CONSUMER RIGHTS REGARDING PRIVACY OF 6
2222 GENOMIC DATA. 7
2323 (a) R
2424 EQUIREMENTS.— 8
2525 (1) C
2626 ONSUMER CONTROLS .— 9
2727 VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863
2828 kjohnson on DSK7ZCZBW3PROD with $$_JOB 2
2929 •S 863 IS
3030 (A) IN GENERAL.—A direct-to-consumer 1
3131 genomic testing company shall provide a simple 2
3232 and effective mechanism to allow a consumer 3
3333 to— 4
3434 (i) access the genomic data of the con-5
3535 sumer; and 6
3636 (ii) subject to paragraph (4)— 7
3737 (I) delete the account of the con-8
3838 sumer, including any genomic data as-9
3939 sociated with such account; and 10
4040 (II) request the destruction of 11
4141 any biological sample of the consumer. 12
4242 (B) R
4343 EQUIRED MECHANISM .—The direct- 13
4444 to-consumer genomic testing company shall 14
4545 make available to a consumer the mechanism 15
4646 described in subparagraph (A) through the pri-16
4747 mary means by which the company commu-17
4848 nicates with the consumer. 18
4949 (2) N
5050 OTIFICATION.— 19
5151 (A) C
5252 ONSUMER CONTROLS AND USE OF 20
5353 DEIDENTIFIED GENOMIC DATA .—A direct-to- 21
5454 consumer genomic testing company shall make 22
5555 available, in a clear and conspicuous, not mis-23
5656 leading, and easy-to-read manner a notice 24
5757 that— 25
5858 VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863
5959 kjohnson on DSK7ZCZBW3PROD with $$_JOB 3
6060 •S 863 IS
6161 (i) provides a detailed and accurate 1
6262 representation of the rights set forth in 2
6363 clauses (i) and (ii) of paragraph (1)(A); 3
6464 and 4
6565 (ii) discloses that the deidentified 5
6666 genomic data of a consumer may be shared 6
6767 or disclosed to conduct medical or scientific 7
6868 research, consistent with the privacy regu-8
6969 lations promulgated under section 264(c) 9
7070 of the Health Insurance Portability and 10
7171 Accountability Act of 1996 (42 U.S.C. 11
7272 1320d–2 note). 12
7373 (B) P
7474 URCHASE OF COMPANY .—In the 13
7575 event that a direct-to-consumer genomic testing 14
7676 company is purchased or otherwise acquired by 15
7777 another entity, the direct-to-consumer genomic 16
7878 testing company shall send to each consumer, 17
7979 not fewer than 30 days prior to the date on 18
8080 which the purchase or acquisition is complete, a 19
8181 notice that includes— 20
8282 (i) the identity of the entity pur-21
8383 chasing or otherwise acquiring the com-22
8484 pany; and 23
8585 (ii) a detailed and accurate represen-24
8686 tation of the how a consumer can exercise 25
8787 VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863
8888 kjohnson on DSK7ZCZBW3PROD with $$_JOB 4
8989 •S 863 IS
9090 the rights set forth in clauses (i) and (ii) 1
9191 of paragraph (1)(A) under the new owner-2
9292 ship. 3
9393 (3) P
9494 ROCESSING OF DELETION OR DESTRUC -4
9595 TION REQUESTS.— 5
9696 (A) I
9797 N GENERAL.—With respect to a con-6
9898 sumer’s request to delete the genomic data or 7
9999 to destroy the biological sample of the con-8
100100 sumer, a direct-to-consumer genomic testing 9
101101 company shall— 10
102102 (i) fulfill such request not later than 11
103103 30 days after the date on which the con-12
104104 sumer makes such request; and 13
105105 (ii) notify the consumer of such dele-14
106106 tion or destruction not later than 30 days 15
107107 after the deletion or destruction. 16
108108 (B) O
109109 UTSTANDING REQUESTS DURING 17
110110 PURCHASE OF COMPANY .—In the event that a 18
111111 direct-to-consumer genomic testing company is 19
112112 purchased or otherwise acquired by another en-20
113113 tity while a consumer’s request to delete the 21
114114 genomic data or to destroy the biological sample 22
115115 of the consumer is outstanding— 23
116116 (i) the entity that is purchasing or 24
117117 otherwise acquiring the company shall 25
118118 VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863
119119 kjohnson on DSK7ZCZBW3PROD with $$_JOB 5
120120 •S 863 IS
121121 comply with the requirements described in 1
122122 subparagraph (A); and 2
123123 (ii) the 30-day period to fulfill such 3
124124 request shall begin on the date on which 4
125125 the consumer makes such request to the 5
126126 direct-to-consumer genomic testing com-6
127127 pany. 7
128128 (4) E
129129 XCEPTIONS.—A direct-to-consumer 8
130130 genomic testing company shall not permit a con-9
131131 sumer to exercise a right described in paragraph 10
132132 (1)(A)(ii) if the company determines that the exer-11
133133 cise of the right would require the deletion of infor-12
134134 mation— 13
135135 (A) subject to a warrant, lawfully executed 14
136136 subpoena, or other court order; or 15
137137 (B) the company is required to retain in 16
138138 order to comply with any other applicable legal 17
139139 or regulatory requirement. 18
140140 (b) E
141141 NFORCEMENT.— 19
142142 (1) U
143143 NFAIR OR DECEPTIVE ACTS OR PRAC -20
144144 TICES.—A violation of this section or a regulation 21
145145 promulgated thereunder shall be treated as a viola-22
146146 tion of a rule defining an unfair or deceptive act or 23
147147 practice under section 18(a)(1)(B) of the Federal 24
148148 Trade Commission Act (15 U.S.C. 57a(a)(1)(B)). 25
149149 VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00005 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863
150150 kjohnson on DSK7ZCZBW3PROD with $$_JOB 6
151151 •S 863 IS
152152 (2) POWERS OF THE COMMISSION .— 1
153153 (A) I
154154 N GENERAL.—The Commission shall 2
155155 enforce this section in the same manner, by the 3
156156 same means, and with the same jurisdiction, 4
157157 powers, and duties as though all applicable 5
158158 terms and provisions of the Federal Trade 6
159159 Commission Act (15 U.S.C. 41 et seq.) were in-7
160160 corporated into and made a part of this section. 8
161161 (B) P
162162 RIVILEGES AND IMMUNITIES .—Any 9
163163 person who violates this section or a regulation 10
164164 promulgated thereunder shall be subject to the 11
165165 penalties and entitled to the privileges and im-12
166166 munities provided in the Federal Trade Com-13
167167 mission Act (15 U.S.C. 41 et seq.). 14
168168 (C) A
169169 UTHORITY PRESERVED .—Nothing in 15
170170 this section shall be construed to limit the au-16
171171 thority of the Commission under any other pro-17
172172 vision of law. 18
173173 (D) R
174174 ULEMAKING.—Not later than 1 year 19
175175 after the date of enactment of this section, the 20
176176 Commission may promulgate in accordance with 21
177177 section 553 of title 5, United States Code, such 22
178178 rules as may be necessary to carry out this sec-23
179179 tion. 24
180180 (c) D
181181 EFINITIONS.—In this section: 25
182182 VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00006 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863
183183 kjohnson on DSK7ZCZBW3PROD with $$_JOB 7
184184 •S 863 IS
185185 (1) BIOLOGICAL SAMPLE.—The term ‘‘biological 1
186186 sample’’ means any material part of the human, dis-2
187187 charge therefrom, or derivative thereof, such as tis-3
188188 sue, blood, urine, or saliva, known to contain 4
189189 deoxyribonucleic acid (DNA). 5
190190 (2) C
191191 OMMISSION.—The term ‘‘Commission’’ 6
192192 means the Federal Trade Commission. 7
193193 (3) C
194194 ONSUMER.—The term ‘‘consumer’’ means 8
195195 an individual who provides a biological sample to a 9
196196 direct-to-consumer genomic testing company. 10
197197 (4) D
198198 EIDENTIFIED GENOMIC DATA .—The term 11
199199 ‘‘deidentified genomic data’’ means data that cannot 12
200200 be used to infer information about, or otherwise be 13
201201 linked to, a particular individual, provided that the 14
202202 business that possesses the information does all of 15
203203 the following: 16
204204 (A) Takes reasonable measures to ensure 17
205205 that the information cannot be associated with 18
206206 a particular individual. 19
207207 (B) Publicly commits to maintain and use 20
208208 the information only in deidentified form and 21
209209 not to attempt to reidentify the information, ex-22
210210 cept that the business may attempt to reiden-23
211211 tify the information solely for the purpose of 24
212212 determining whether its deidentification proc-25
213213 VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00007 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863
214214 kjohnson on DSK7ZCZBW3PROD with $$_JOB 8
215215 •S 863 IS
216216 esses satisfy the requirements of this subpara-1
217217 graph, provided that the business does not use 2
218218 or disclose any information reidentified in this 3
219219 process and destroys the reidentified informa-4
220220 tion upon completion of that assessment. 5
221221 (C) Contractually obligates any recipients 6
222222 of the information to take reasonable measures 7
223223 to ensure that the information cannot be associ-8
224224 ated with a particular individual and to commit 9
225225 to maintaining and using the information only 10
226226 in deidentified form and not to reidentify the 11
227227 information. 12
228228 (5) D
229229 IRECT-TO-CONSUMER GENOMIC TESTING 13
230230 COMPANY.— 14
231231 (A) I
232232 N GENERAL.—The term ‘‘direct-to- 15
233233 consumer genomic testing company’’ means a 16
234234 person that does any of the following: 17
235235 (i) Manufactures or develops genomic 18
236236 testing products or services for sale di-19
237237 rectly to consumers. 20
238238 (ii) Analyzes or interprets genomic 21
239239 data obtained from a consumer. 22
240240 (iii) Collects, uses, maintains, or dis-23
241241 closes genomic data collected or derived 24
242242 VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00008 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863
243243 kjohnson on DSK7ZCZBW3PROD with $$_JOB 9
244244 •S 863 IS
245245 from a direct-to-consumer genomic testing 1
246246 product or service. 2
247247 (iv) Purchases or acquires genomic 3
248248 data from a direct-to-consumer genomic 4
249249 testing company. 5
250250 (B) E
251251 XCLUSION FOR HEALTH CARE PRO -6
252252 FESSIONALS.—The term ‘‘direct-to-consumer 7
253253 genomic testing company’’ shall not include a 8
254254 health care professional (as defined in section 9
255255 225 of the Public Health Service Act (42 10
256256 U.S.C. 234)) that performs an action described 11
257257 in subparagraph (A) for purposes of diagnosis 12
258258 or treatment of a medical condition. 13
259259 (6) G
260260 ENOMIC DATA.— 14
261261 (A) I
262262 N GENERAL.—The term ‘‘genomic 15
263263 data’’— 16
264264 (i) means any data, regardless of its 17
265265 format or whether the data has been 18
266266 deidentified, that results from the analysis 19
267267 of a biological sample from a consumer 20
268268 and concerns genomic material; and 21
269269 (ii) includes— 22
270270 (I) deoxyribonucleic acids (DNA), 23
271271 ribonucleic acids (RNA), genes, chro-24
272272 mosomes, alleles, genomes, alterations 25
273273 VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00009 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863
274274 kjohnson on DSK7ZCZBW3PROD with $$_JOB 10
275275 •S 863 IS
276276 or modifications to DNA or RNA, and 1
277277 single nucleotide polymorphisms 2
278278 (SNPs); 3
279279 (II) uninterpreted data that re-4
280280 sults from the analysis of the biologi-5
281281 cal sample; or 6
282282 (III) any information extrapo-7
283283 lated, derived, or inferred therefrom. 8
284284 (B) E
285285 XCLUSION OF DEIDENTIFIED 9
286286 GENOMIC DATA.—The term ‘‘genomic data’’ 10
287287 shall not include the deidentified genomic data 11
288288 of a consumer to the extent that such data is 12
289289 used to conduct medical or scientific research, 13
290290 consistent with the privacy regulations promul-14
291291 gated under section 264(c) of the Health Insur-15
292292 ance Portability and Accountability Act of 1996 16
293293 (42 U.S.C. 1320d–2 note). 17
294294 (7) G
295295 ENOMIC TESTING PRODUCT OR SERV -18
296296 ICE.—The term ‘‘genomic testing product or serv-19
297297 ice’’ means any testing product or service that ana-20
298298 lyzes or interprets the genomic data or biological 21
299299 sample of a consumer. 22
300300 (d) R
301301 ELATIONSHIP TO FEDERAL AND STATE 23
302302 L
303303 AWS.— 24
304304 VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00010 Fmt 6652 Sfmt 6201 E:\BILLS\S863.IS S863
305305 kjohnson on DSK7ZCZBW3PROD with $$_JOB 11
306306 •S 863 IS
307307 (1) FEDERAL LAW PRESERVATION .—Nothing in 1
308308 this Act, or a regulation promulgated under this Act, 2
309309 shall be construed to limit any other provision of 3
310310 Federal law, except as specifically provided in this 4
311311 Act. 5
312312 (2) S
313313 TATE LAW PRESERVATION .—Nothing in 6
314314 this Act, or a regulation promulgated under this Act, 7
315315 shall be construed to preempt, displace, or supplant 8
316316 any State law, except to the extent that a provision 9
317317 of State law conflicts with a provision of this Act, 10
318318 or a regulation promulgated under this Act, and 11
319319 then only to the extent of the conflict. 12
320320 Æ
321321 VerDate Sep 11 2014 22:56 Mar 18, 2025 Jkt 059200 PO 00000 Frm 00011 Fmt 6652 Sfmt 6301 E:\BILLS\S863.IS S863
322322 kjohnson on DSK7ZCZBW3PROD with $$_JOB