AL: Alabama Genetic Data Privacy Act (HB 21, 2024)

October 1, 2024

Enacted § 8-43-1 et seq., requiring direct-to-consumer genetic testing companies to protect the confidentiality of customers' genetic information and to obtain the customer's initial express consent to run the ordered test, plus separate consent for each new use — including using the sample or data for any secondary product or service, transferring or disclosing the genetic profile to a third party, or marketing a specific product to the consumer based on that profile. Bars disclosure of a consumer's genetic data to law enforcement or a government agency absent a 'valid legal process' such as a search warrant or court order. Effective October 1, 2024.