United States of America: Implemented Tennessee Genetic Information Privacy Act (HB1310)

On 1 July 2023, the Tennessee Genetic Information Privacy Act was implemented. In particular, the Act requires companies providing genetic testing services to provide consumers with essential information about the collection, use, and disclosure of their genetic data and a publicly available privacy notice with information about the company’s data collection, consent, use, access, disclosure, transfer, security, retention, and deletion practices. In addition, genetic testing companies are required to obtain consumers’ express consent for collecting, using, or disclosing their genetic data. Furthermore, companies need to implement a security program to protect consumers’ data. Finally, companies are required to provide a process for a consumer to access and delete their genetic data.