The "Genetic Information Privacy Act" is a proposed bill aimed at regulating direct-to-consumer genetic testing services in Rhode Island, addressing concerns about the misuse of personal and genetic information. The bill introduces a new chapter in Title 6 of the General Laws, establishing definitions and guidelines for the collection, use, and disclosure of genetic data. Key provisions include the requirement for companies to obtain "express consent" from consumers before any collection or use of their genetic data, ensuring that consent cannot be inferred from inaction or manipulative user interfaces. The act also clarifies that genetic data does not include deidentified data under certain conditions, thereby enhancing consumer privacy and trust in genetic testing services.
Additionally, the bill mandates that genetic testing companies provide clear information about their data practices, obtain explicit consent for various uses of genetic data, and implement mechanisms for consumers to revoke consent easily. It restricts the disclosure of genetic data to health and employment insurance entities and establishes penalties for violations, including civil penalties for negligent and willful breaches. The legislation also includes a severability clause and emphasizes that in cases of conflict with other laws, the law providing the greatest privacy protection will prevail. Overall, the act aims to enhance consumer protection and privacy in the realm of genetic testing while ensuring that consumers have control over their genetic information.