CT: An Act Concerning Consumer Data Privacy and Protection, Including Genetic Data (SB 4, P.A. 26-64, 2026)

October 1, 2026

Enacted a comprehensive consumer data privacy act whose genetic-data provisions define 'genetic data,' 'DNA,' and 'direct-to-consumer genetic testing company,' grant consumers a property right and exclusive control over any biological sample and testing results derived from their body, and require companies to obtain express informed consent before collecting, using, disclosing, or retaining genetic data and to bar disclosure of results to third parties except with express consent or pursuant to a court order, warrant, or subpoena. Public Act No. 26-64 (SB 4, 2026); effective October 1, 2026.