Genetic data privacy; civil penalty. Establishes requirements for direct-to-consumer genetic testing companies, defined in the bill, including requirements related to information to be provided to consumers, express consent requirements, requirements related to security of and consumer access to genetic data, requirements for contracts between direct-to-consumer genetic testing companies and service providers, and prohibitions on disclosure of genetic data by direct-to-consumer genetic testing companies. The bill also prohibits discrimination against a consumer based on exercise of rights related to genetic data privacy and imposes civil penalties for violations of the provisions of the bill.