{"data":{"id":"us-md/md.-code-commercial-law-14-4405","jurisdiction":"us-md","citation":"Md. Code, Commercial Law § 14–4405","heading":"","body":"(a) A direct–to–consumer genetic testing company shall establish legal policies and processes for disclosing genetic data to law enforcement or another government agency without a consumer’s express written consent.\n(b) A direct–to–consumer genetic testing company shall develop, implement, and maintain a comprehensive security program to protect consumers’ genetic data against unauthorized access, use, or disclosure.\n(c) A direct–to–consumer genetic testing company shall establish a process for a consumer to:\n(1) Access the consumer’s genetic data;\n(2) Delete the consumer’s account and genetic data; and\n(3) Request the destruction of the consumer’s biological sample.\n(d) Notwithstanding any other provisions of law, a direct–to–consumer genetic testing company may not, without the consumer’s written consent, disclose a consumer’s genetic data to:\n(1) An entity offering health insurance, life insurance, disability insurance, or long–term care insurance; or\n(2) An employer of the consumer.","path":["Article - Commercial Law"],"source_url":"https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=gcl\u0026section=14-4405","current_through":"2026-01-01","vintage":"","retrieved_at":"2026-09-14T19:56:33Z","sha256":"57ca05bf5f38cdeaaaf88052eb93befb5b47542689eb9e79904961801fb8921f","source_id":"us-md","stale":false,"prev":"us-md/md.-code-commercial-law-14-4404","next":"us-md/md.-code-commercial-law-14-4406"},"notice":"GroundRules: Original legal text. Not legal advice."}