1. (a) In this subtitle the following words have the meanings indicated.

2. (b)

   1. (1) “Biological sample” means a material part or a derivative of or discharge from a material part of a human known to contain DNA.
   2. (2) “Biological sample” includes human tissue, blood, urine, and saliva.

3. (c) “Deidentified data” means data that:

   1. (1) Cannot reasonably be:

      1. (i) Used to infer information about a consumer; or
      2. (ii) Linked to an identifiable consumer; and

   2. (2) Is subject to:

      1. (i) Administrative and technical measures to ensure that the data cannot be associated with a particular consumer;
      2. (ii) Public commitment by the company to maintain and use data in a deidentifiable form and not attempt to reidentify data; and
      3. (iii) Legally enforceable contractual obligations that prohibit a recipient of the data from attempting to reidentify the data.

4. (d) “Direct-to-consumer genetic testing company” means an entity that:

   1. (1) Offers genetic testing products or services directly to a consumer; or
   2. (2) Collects, uses, or analyzes genetic data that resulted from a direct-to-consumer genetic testing product or service that was provided to the company by a consumer.
5. (e) “DNA” means deoxyribonucleic acid.
6. (f) “Express consent” means an affirmative response by a consumer to a specific, discrete, freely given, and unambiguous notice regarding the collection, use, or disclosure of the consumer's genetic data for a specific purpose.

7. (g)

   1. (1) “Genetic data” means data, in any format, that concerns the genetic characteristics of a consumer.

   2. (2) “Genetic data” includes:

      1. (i) Raw sequence data that result from sequencing of a consumer's complete extracted DNA or a portion of the consumer's complete extracted DNA;
      2. (ii) Genotypic and phenotypic information that results from analyzing raw sequence data;
      3. (iii) Information extrapolated, derived, or inferred from the analysis of raw sequence data; and

      4. (iv) Self-reported health information submitted to a direct-to-consumer genetic testing company by a consumer regarding the consumer's health conditions:

         1. 1. That is used for scientific research or product development; and
         2. 2. Analyzed in connection with the consumer's raw sequence data.
   3. (3) “Genetic data” does not include deidentified data.
8. (h) “Genetic testing” means a laboratory test of the complete DNA, regions of DNA, chromosomes, genes, or gene products of a consumer to determine the genetic characteristics of the consumer.
9. (i) “Marketing” does not include the providing of customized content or offers on the websites or through the applications or services provided by the direct-to-consumer genetic testing company with the first-party relationship to the consumer.

Added by Acts 2022, c. 501, § 1, eff. Oct. 1, 2022. Amended by Acts 2026, c. 153, § 1, eff. April 14, 2026.