Enacts the "genetic privacy and protection act" to require the mandatory deletion of genetic data upon financial distress or bankruptcy; prohibits the sale, transfer, or continued use of genetic data without explicit and renewed consent from the original consumer; provides for attorney general enforcement.
A07559, the “genetic privacy and protection act,” would add a new article to the General Business Law governing how companies that collect, store, or process consumer genetic data must handle that data when they face financial distress. The bill defines genetic data broadly to include DNA-related information, inherited characteristics, and genetic predispositions, and it defines financial distress to include a public merger or sale announcement, a bankruptcy filing, or notice of material financial instability by state regulators.
Under the bill, a genetic data holder that is likely to seek bankruptcy protection must permanently delete all consumer genetic data within 30 days of experiencing financial distress, and it must notify affected consumers within 15 days after deletion. The bill also bars the sale, lease, sharing, transfer, retention, or continued use of consumer genetic data in bankruptcy, restructuring, or liquidation unless the original consumer gives explicit renewed consent. In addition, companies operating in New York would have to file annual financial stability disclosures with the Department of State, and if those disclosures show material instability, the company must stop collecting and processing new genetic data pending review and notify consumers.
The bill would significantly affect New York consumer privacy law and bankruptcy-related asset transactions involving genetic information. It creates a new regulatory framework for genetic data holders doing business in the state, imposes disclosure and deletion obligations, and authorizes the Attorney General to seek injunctions against violations. It also establishes a civil penalty of up to $50,000 per affected consumer, with penalties payable to the New York State Office of Victim Services.
The overall sentiment in the available record appears protective of consumer privacy, with the bill framed as a safeguard against the misuse of highly sensitive genetic information during corporate distress or insolvency. There is no recorded committee debate or vote history in the provided materials, so no formal opposition or support is documented here. Based on the text alone, the measure is aimed at preventing genetic data from becoming a transferable asset in bankruptcy without renewed consumer consent.
The main points of potential contention are likely to be the mandatory deletion requirement, the restriction on asset sales in bankruptcy, and the broad financial reporting obligations imposed on companies. Businesses and bankruptcy stakeholders may view these provisions as burdensome or as limiting the value of assets in restructuring, while privacy advocates would likely support them as necessary protections for sensitive health-related data.
The bill would amend the New York General Business Law by creating a new Article 42-A regulating consumer genetic data held by companies operating in the state. It would require deletion of genetic data during financial distress, prohibit transfer or continued use of that data in bankruptcy or liquidation without renewed consumer consent, require annual financial stability disclosures, and authorize Attorney General enforcement with civil penalties of up to $50,000 per affected consumer.
No committee transcript or vote record is provided, so there is no documented floor or committee sentiment to summarize. The bill’s text reflects a strong consumer-privacy orientation, suggesting support from privacy advocates and likely concern from companies that collect genetic data, bankruptcy practitioners, and potential asset purchasers. The measure is presented as a protective response to the risks posed when sensitive genetic information is held by financially unstable firms.
The likely areas of contention are the bill’s requirement that genetic data be permanently deleted upon financial distress, its ban on selling or transferring genetic data in bankruptcy or restructuring, and its requirement for renewed explicit consent before any successor can use retained data. Companies and insolvency stakeholders may argue these provisions interfere with ordinary asset sales and restructuring, while supporters would argue that genetic data is uniquely sensitive and should not be treated like ordinary corporate property. The annual financial disclosure requirement and the Attorney General’s enforcement authority may also draw scrutiny from regulated entities.