Law / United States / 
Utah
Genetic Information Privacy Act
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 3 May 2023.
A sensitive categories rule binding private bodies.
As of 23 August 2026.
What it requires
- Obtain a Utah consumer's initial express consent before collecting, using, or disclosing their genetic data through a direct-to-consumer genetic testing product or service, and give them a public privacy notice describing your data practices.
- Obtain separate express consent before transferring genetic data outside your vendors, using it beyond the primary testing purpose, or retaining a biological sample after testing.
- Let a Utah consumer access their genetic data, delete their account and genetic data, and have their biological sample destroyed on request.
- Do not disclose a Utah consumer's genetic data to a health, life, or long-term-care insurer, or to the consumer's employer, without the consumer's written consent.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Binds a direct-to-consumer genetic testing company, an entity that offers genetic testing products or services to consumers or that collects, uses, or analyzes genetic data a consumer provides. Requires a public privacy notice and the consumer's initial express consent to collect, use, or disclose genetic data, plus separate express consent to transfer or disclose the data beyond the company's vendors, to use it beyond the primary testing purpose, or to retain a biological sample after testing.
Requires valid legal process for law-enforcement disclosure absent express written consent, a comprehensive security program, and a process for a consumer to access their genetic data, delete their account and data, and have their biological sample destroyed. Bars disclosure to health, life, or long-term-care insurers or to the consumer's employer without written consent. Originally enacted in 2021 (Chapter 361), renumbered and amended into its current Part 1 structure in 2023 (Chapter 327).
When LexLint raises it
processes_biometricstrains_models
Read the law
official Utah Code text, Utah State Legislature
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.