Comparing HB 4897 → HB 5110 — Genetic Information Privacy Act

Struck = only in HB 4897 · added = only in HB 5110.

Previous
Latest
*LRB10417552BDA30980b* HB4897 104TH GENERAL ASSEMBLY State of Illinois and 2026 HB4897 by Rep.
WEST VIRGINIA LEGISLATURE REGULAR SESSION Introduced House Bill 5110 By Delegate Young [Introduced January 25, 2024;
Nabeela Syed SYNOPSIS AS INTRODUCED:
Referred to the Committee on Health and Human Resources then the Judiciary Intr HB 2024R2281 A BILL to amend the Code of West Virginia, 1931, as amended, by adding thereto a new article, designated §16-67-1, §16-67-2, §16-67-3, and §16-67-4, all relating to creating the Genetic Information Privacy Act;
ILCS 513/20 Amends the Genetic Information Privacy Act.
and to provide guidelines for the collection, storage, and protection of privacy with concern to genetic material and information.
Removes language exempting insurers that are issuing a long-term care policy from specified provisions.
Be it enacted by the Legislature of West Virginia:
Provides that, with regard to any policy, contract, or plan offered, entered into, issued, amended, or renewed on or after January 1, by a health insurer, life insurer, disability insurer, or long-term care insurer authorized to transact insurance in this State, a health insurer, life insurer, disability insurer, or long-term care insurer may not:
ARTICLE 67.
(1) cancel, limit, or deny coverage or establish differentials in premium rates based on a person's genetic information;
GENETIC INFORMATION PRIVACY ACT.
or (2) require or solicit an individual's genetic information, use an individual's genetic test results, or consider an individual's decisions or actions relating to genetic information or a genetic test in any manner for any insurance purpose.
§16-67-1.
Provides that the provisions may not be construed as:
Definitions.
(1) preventing a life insurer, disability insurer, or long-term care insurer from accessing an individual's medical record as part of an application;
(a) This article shall be known, and may be cited, as the Genetic Information Privacy Act.
or (2) prohibiting a life insurer, disability insurer, or long-term care insurer from considering a clinical diagnosis, such as a manifest disease or disorder, included in an individual's medical record for insurance purposes to the extent otherwise allowable by law.
(b) For purposes of this article, the following definitions apply:
Effective July 1, 2026.
(1) "Biological sample" means any material part of the human, discharge therefrom, or derivative thereof, such as tissue, blood, urine, or saliva, known to contain deoxyribonucleic acid (DNA).
LRB104 17552 BDA 30980 b A BILL FOR HB4897 LRB104 17552 BDA 30980 b AN ACT concerning health.
(2) "Consumer" means an individual who is a resident of this state.
Be it enacted by the People of the State of Illinois, represented in the General Assembly:
(3) "Direct-to-consumer genetic testing company" or "company" means an entity that:
Section 5.
(A) Offers consumer genetic testing products or services directly to a consumer;
The Genetic Information Privacy Act is amended by changing Section 20 as follows:
or (B) Collects, uses, or analyzes genetic data that resulted from a direct-to-consumer genetic testing product or service and was provided to the company by a consumer.
(410 ILCS 513/20) Sec.
(4) "Direct-to-consumer genetic testing company" does not include any entity only when they are engaged in collecting, using, or analyzing genetic data or biological samples in the context of research, as defined in 45 C.F.R sec.
20.
164.501, conducted in accordance with the Federal Policy for the Protection of Human Subjects, 45 C.F.R.
Use of genetic testing information for insurance purposes.
pt.
(a) An insurer may not seek information derived from genetic testing for use in connection with a policy of accident and health insurance.
46, the Good Clinical Practice Guideline issued by the International Council for Harmonisation, or the United States Food and Drug Administration Policy for the Protection of Human Subjects under 21 C.F.R.
Except as provided in subsection (c), an insurer that receives information derived from genetic testing, regardless of the source of that information, may not use the information for a nontherapeutic purpose as it relates to a policy of accident and health insurance.
pts.
(b) An insurer shall not use or disclose protected health information that is genetic information for underwriting purposes.
50 and 56;
For purposes of this Section, "underwriting purposes" means, with respect to an insurer:
(5) "Express consent" means a consumer's affirmative response to a clear, meaningful, and prominent notice regarding the collection, use, or disclosure of genetic data for a specific purpose.
(1) rules for, or determination of, eligibility (including enrollment and continued eligibility) for, or determination of, benefits under the plan, coverage, or HB4897 - 2 - LRB104 17552 BDA 30980 b policy (including changes in deductibles or other cost-sharing mechanisms in return for activities such as completing a health risk assessment or participating in a wellness program);
1 Intr HB 2024R2281 (6) "Genetic data" means any data, regardless of its format, that concerns a consumer's genetic characteristics.
(2) the computation of premium or contribution amounts under the plan, coverage, or policy (including discounts, rebates, payments in kind, or other premium differential mechanisms in return for activities, such as completing a health risk assessment or participating in a wellness program);
(A) "Genetic data" includes, but is not limited to:
(3) the application of any pre-existing condition exclusion under the plan, coverage, or policy;
(i) Raw sequence data that result from sequencing of a consumer's complete extracted or a portion of the extracted DNA;
and (4) other activities related to the creation, renewal, or replacement of a contract of health insurance or health benefits.
(ii) Genotypic and phenotypic information that results from analyzing the raw sequence data;
"Underwriting purposes" does not include determinations of medical appropriateness where an individual seeks a benefit under the plan, coverage, or policy.
and (iii) Self-reported health information that a consumer submits to a company regarding the consumer's health conditions and that is used for scientific research or product development and analyzed in connection with the consumer's raw sequence data.
This subsection (b) does not apply to insurers that are issuing a long-term care policy, excluding a nursing home fixed indemnity plan.
(B) "Genetic data" does not include deidentified data.
(c) An insurer may consider the results of genetic testing in connection with a policy of accident and health insurance if the individual voluntarily submits the results and the results are favorable to the individual.
For purposes of this subsection, "deidentified data" means data that cannot reasonably be used to infer information about, or otherwise be linked to, an identifiable consumer, and that is subject to:
(d) An insurer that possesses information derived from HB4897 - 3 - LRB104 17552 BDA 30980 b genetic testing may not release the information to a third party, except as specified in this Act.
(i) Administrative and technical measures to ensure that the data cannot be associated with a particular consumer;
(e) A company providing direct-to-consumer commercial genetic testing is prohibited from sharing any genetic test information or other personally identifiable information about a consumer with any health or life insurance company without written consent from the consumer.
(ii) Public commitment by the company to maintain and use data in deidentified form and not attempt to reidentify data;
(f) A health insurer, life insurer, disability insurer, or long-term care insurer authorized to transact insurance in this State may not:
and (iii) Legally enforceable contractual obligations that prohibit any recipients of the data from attempting to reidentify the data.
(1) cancel, limit, or deny coverage or establish differentials in premium rates based on genetic information collected, used, or stored for health care treatment;
(7) "Genetic testing" means any laboratory test of a consumer's complete DNA, regions of DNA, chromosomes, genes, or gene products to determine the presence of genetic characteristics of a consumer.
or (2) require or solicit an individual's genetic information, use an individual's genetic test results, or consider an individual's decisions or actions relating to genetic information or a genetic test in any manner for any insurance purpose.
(8) "Person" means an individual, partnership, corporation, association, business, business trust, or legal representative of an organization.
This subsection applies to any policy, contract, or plan that is offered, entered into, issued, amended, or renewed on or after January 1, 2027 by a health insurer, life insurer, disability insurer, or long-term care insurer authorized to transact insurance in this State.
§16-67-2.
(g) Nothing in this Section may be construed as:
Collection and Use of Genetic Data.
(1) preventing a life insurer, disability insurer, or HB4897 - 4 - LRB104 17552 BDA 30980 b long-term care insurer from accessing an individual's medical record as part of an application;
(a) To safeguard the privacy, confidentiality, security, and integrity of a consumer's genetic 2 Intr HB 2024R2281 data, a direct-to-consumer genetic testing company shall:
or (2) prohibiting a life insurer, disability insurer, or long-term care insurer from considering a clinical diagnosis, such as a manifest disease or disorder, included in an individual's medical record for insurance purposes to the extent otherwise allowable by law.
(1) Provide clear and complete information regarding the company's policies and procedures for collection, use, or disclosure of genetic data by making available to a consumer:
(Source:
(A) A high-level privacy policy overview that includes basic, essential information about the company's collection, use, or disclosure of genetic data;
P.A.
and (B) A prominent, publicly available privacy notice that includes, at a minimum, information about the company's data collection, consent, use, access, disclosure, transfer, security, and retention and deletion practices;
Show all 72 changed rows (32 more)
Previous
Latest
101-132, eff.
(2) Obtain a consumer's consent for collection, use, or disclosure of the consumer's genetic data including, at a minimum:
1-1-20.) Section 99.
(A) Initial express consent that clearly describes the uses of the genetic data collected through the genetic testing product or service, and specifies who has access to test results and how the genetic data may be shared;
Effective date.
(B) Separate express consent for transferring or disclosing the consumer's genetic data to any person other than the company's vendors and service providers, or for using genetic data beyond the primary purpose of the genetic testing product or service and inherent contextual uses;
This Act takes effect July 1, 2026.
(C) Separate express consent for the retention of any biological sample provided by the consumer following completion of the initial testing service requested by the consumer.
(D) Informed consent in compliance with the federal policy for the protection of human research subjects, 45 C.F.R.
Sec.
46 (2019), for transfer or disclosure of the consumer's genetic data to third party persons for research purposes or research conducted under the control of the company for the purpose of publication or generalizable knowledge;
and (E) Express consent for marketing to a consumer based on the consumer's genetic data;
or for marketing by a third-party person to a consumer based on the consumer having ordered or purchased a genetic testing product or service.
Marketing does not include the provision of customized content or offers on the websites or through the applications or services provided by 3 Intr HB 2024R2281 the direct-to-consumer genetic testing company with the first-party relationship to the customer.
(3) Require valid legal process for disclosing genetic data to law enforcement or any other government agency without a consumer's express written consent;
(4) Develop, implement, and maintain a comprehensive security program to protect a consumer's genetic data against unauthorized access, use, or disclosure;
and (5) Provide a process for a consumer to:
(A) Access the consumer's genetic data;
(B) Delete the consumer's account and genetic data;
and (C) Request and obtain the destruction of the consumer's biological sample.
(b) Notwithstanding any other provisions in this section, a direct-to-consumer genetic testing company may not disclose a consumer's genetic data to any entity offering health insurance, life insurance or long-term care insurance, or to any employer of the consumer without the consumer's written consent.
(c) The Attorney General may bring an action in the name of the state, or as parens patriae on behalf of Consumers, to enforce this article.
In any action brought by the Attorney General to enforce this article, a violation of this article is subject to a civil penalty of $2,500 for each violation of this article, the recovery of actual damages incurred by Consumers on whose behalf the action was brought, and costs and reasonable attorneys' fees incurred by the office of the Attorney General.
§16-67-3.
Limitations.
(a) Limitations.
This article does not apply to:
(1) Protected health information that is collected by a covered entity or business associate as those terms are defined in 45 C.F.R.
Parts 160 and 164;
§16-67-4.
Application.
The disclosure of genetic data pursuant to this article shall comply with all state and federal laws for the protection of privacy and security.
This article shall not apply to protected health 4 Intr HB 2024R2281 information that is collected by a covered entity or business associate governed by the privacy, security, and breach notification rules issued by the United States Department of Health and Human Services (Parts Regulations) 160 and 164 of Title 45 of the Code of Federal Services (Parts Regulations) established pursuant to the federal Health Insurance Portability and Accountability Act of 1996 (Public Law 104-191) and the federal Health Information Technology for Economic and Clinical Health Act (Public Law 111-5).
NOTE:
The purpose of this bill is to provide guidelines for the collection, storage, and protection of privacy with concern to genetic material and information.
Strike-throughs indicate language that would be stricken from a heading or the present law, and underscoring indicates new language that would be added.