Connecticut Enacts Genetic Privacy Law Protecting DNA Data

### Connecticut‘s New Genetic Privacy Law: What You Need to Know

Connecticut’s taking a big step forward in protecting data-sales-crackdown-on-data-brokers/”>personal information. With the new SB 4 law, the state now enforces strict rules for companies that offer direct-to-consumer (DTC) genetic testing.

Find Your Ideal Getaway in Connecticut
Explore top-rated stays with no booking fees and instant confirmation. Your dream trip starts here!
Start Exploring Now

This new legislation aims to give people more control over their genetic data. Concerns about how businesses collect, use, and store this sensitive information keep growing, and Connecticut wants to address them head-on.

Other states have tackled genetic privacy, sure, but Connecticut’s approach is a bit different. The focus here is on the unique challenges that come with DTC genetic testing companies.

This law lays out a framework for both consumers and businesses—whether you’re in Hartford, New Haven, or anywhere else in the state.

Understanding DTC Genetic Testing Under Connecticut Law

The law, SB 4, spells out what counts as a “direct-to-consumer genetic testing company.”

Who is Covered by the New Regulations?

Any company offering genetic tests directly to people, even if a healthcare provider isn’t involved.
Businesses that collect, use, or analyze genetic data people provide themselves.

SB 4 does carve out some exceptions. Licensed healthcare professionals ordering tests for real medical reasons aren’t covered by these DTC rules.

Disclosures made under a court order are also exempt. If data is de-identified—meaning all personal identifiers are stripped away—it falls outside these regulations too.

Key Consumer Protections Under SB 4

SB 4 gives Connecticut residents strong rights when using DTC genetic testing services. People now get more ownership and control over their biological information.

Data Ownership and Consent

One of the biggest changes is the recognition of property rights for consumers.

Consumers now own their biological samples, whether that’s saliva, blood, or other tissue.
This ownership also covers any test results that come from their DNA, no matter if the company analyzes or stores them.

Companies have to be upfront about how they handle genetic data. Before collecting, using, sharing, keeping, or transferring genetic data—including for any extra uses or keeping samples after testing—they need to get your express consent.

That means you have to actively and knowingly agree, not just passively click “accept.” For folks in Stamford, Bridgeport, or anywhere else, this should make it much clearer who’s got your data and what’s happening with it.

If a company wants to use your data for research—especially if they’re going to publish findings—they have to follow the federal Common Rule and get informed consent, just like with human subjects research.

SB 4 doesn’t exempt research that’s already under typical human subjects protections, and it doesn’t carve out exceptions for entities or data covered by HIPAA. That’s actually a big difference from other states’ genetic privacy laws.

Consumer Rights and Enforcement

SB 4 gives consumers a bunch of rights to help them stay in control of their genetic info and biological samples. Whether you’re in Waterbury, Norwich, or anywhere else, these rules are meant to protect you.

Access, Deletion, and Revocation

Consumers can access their genetic data held by these companies.
They can also demand deletion of their genetic data.
Individuals may request destruction of their biological samples.
People have the right to revoke consent for the use and storage of their genetic data, which is a pretty important protection.

These rules aim to give folks a clear way out and real control, even if they’ve already done a genetic test.

Say someone in Danbury changes their mind and doesn’t want their genetic info stored or used anymore—they’ve got legal options now.

Violating SB 4 counts as an unfair or deceptive trade practice.

Only the Connecticut Attorney General can enforce these rules, so there’s one office handling the job.

The new protections kick in on October 1, 2026, which gives companies a little breathing room to get their act together for these privacy changes.

Here is the source article for this story: Connecticut Enacts Genetic Privacy Law

Discover Your Perfect Stay in Connecticut
Find available hotels and vacation homes instantly. No fees, best rates guaranteed!
Check Availability Now