{"data":{"id":"us-va/va.-code-59.1-597","jurisdiction":"us-va","citation":"Va. Code § 59.1-597","heading":"Other requirements applicable to direct-to-consumer genetic testing companies","body":"Every direct-to-consumer genetic testing company shall:1. Implement and maintain reasonable security procedures and practices to protect a consumer's genetic data against unauthorized access, destruction, use, modification, or disclosure; and2. Develop procedures and practices to allow a consumer to easily (i) access the consumer's genetic data; (ii) delete the consumer's genetic data, except any data required by state or federal law to be retained by the direct-to-consumer genetic testing company and any account the consumer may have created with the direct-to-consumer genetic testing company; and (iii) revoke express consent to storage of the consumer's biological sample and request destruction of such biological sample.2023, c. 526.","path":["Title 59.1. Trade and Commerce","Chapter 56. Genetic Data Privacy"],"source_url":"https://law.lis.virginia.gov/vacode/59.1-597/","current_through":"9/4/2026","vintage":"","retrieved_at":"2026-09-04T15:17:49Z","sha256":"412493c855d4206e101a570c2bf2cc9e4b6469f4c808d6ae6f098c43fe8fca8b","source_id":"us-va","stale":true,"prev":"us-va/va.-code-59.1-596","next":"us-va/va.-code-59.1-598"},"notice":"GroundRules: Original legal text. Not legal advice."}