Law / United States / 
Arizona
Genetic Information Privacy Act: de-identified genetic data
Genetic Information Privacy Act, section 44-8001(3) and (6)(c)
In force since .
A de-identification rule binding public and private bodies.
- Enforcement body
- Arizona Attorney General, who may bring an action to enforce the chapter.
- How the hook was established
- express
- What makes it apply
- Data subject residence
- Obligation class
- Prohibition
- Audit expectation
- none
What it requires
- To keep data outside the definition of genetic data, de-identify it in accordance with 45 CFR section 164.514(b); data de-identified in that way is de-identified data under the chapter, and genetic data does not include de-identified data (section 44-8001(3) and (6)(c)).
These lines are LexLint's reading of the law's text.
If you get it wrong
Penalty structure
Section 44-8004: a civil penalty of up to $2,500 for each violation, the payment of actual damages incurred by consumers, and the costs and reasonable attorney fees incurred by the office of the attorney general.
- Rule
- Per violation only
- As of
- Currency
- USD
- Per violation unit
- Violation
- Per violation amount
- 2,500
What it makes you log
Logging duty
The chapter states duties of notice, consent, legal process, security and consumer access and deletion, and states no duty to keep, show or file a record of them.
- Kind
- None
- As of
What this law does
The chapter defines de-identified data as data that has been de-identified in accordance with 45 CFR section 164.514(b). Genetic data under the chapter includes raw sequence data and the genotypic and phenotypic information that results from analyzing it, and does not include de-identified data.
The Attorney General may bring an action to enforce the chapter, and a person who violates it is subject to a civil penalty of up to $2,500 for each violation, actual damages incurred by consumers, and the Attorney General's costs and reasonable attorney fees. The general effective date for acts of the 2021 First Regular Session is .
When LexLint raises it
When your app profile says your app processes personal data or processes de-identified data.
Back to the example · Lint your app
Page updated .