Tex. Business & Commerce Code § 503A.005
This is the official text of Tex. Business & Commerce Code § 503A.005, part of Texas’s Business & Commerce Code — governs commercial transactions and general business practices.
Not legal advice. This page reproduces the official text of a government statute for reference only. Laws change, and how a statute applies depends on your specific facts. For advice about your situation, consult a licensed attorney in your state.
§ 503A.005. REQUIREMENTS FOR CERTAIN USES OR DISCLOSURE OF GENETIC DATA AND BIOLOGICAL SAMPLE.
Official statutory text
(a) A direct-to-consumer genetic testing company shall:
(1) develop, implement, and maintain a comprehensive security program to protect an individual's genetic data against unauthorized access, use, or disclosure; and
(2) make publicly available:
(A) a high-level privacy policy overview that includes basic, essential information about the company's collection, use, or disclosure of genetic data; and
(B) a prominent privacy notice that includes information about the company's data collection, consent, use, access, disclosure, transfer, security, retention, and deletion practices.
(b) Before collecting, using, or disclosing an individual's genetic data, a direct-to-consumer genetic testing company shall provide to the individual information about the company's collection, use, and disclosure of genetic data the company collects through a genetic testing product or service, including information that:
(1) clearly describes the company's use of the genetic data;
(2) specifies the persons who have access to test results; and
(3) specifies the manner in which the company may share the genetic data.
(c) A direct-to-consumer genetic testing company shall provide a process for an individual to:
(1) access the individual's genetic data;
(2) delete the individual's account and genetic data; and
(3) destroy or require the destruction of the individual's biological sample.
(1) develop, implement, and maintain a comprehensive security program to protect an individual's genetic data against unauthorized access, use, or disclosure; and
(2) make publicly available:
(A) a high-level privacy policy overview that includes basic, essential information about the company's collection, use, or disclosure of genetic data; and
(B) a prominent privacy notice that includes information about the company's data collection, consent, use, access, disclosure, transfer, security, retention, and deletion practices.
(b) Before collecting, using, or disclosing an individual's genetic data, a direct-to-consumer genetic testing company shall provide to the individual information about the company's collection, use, and disclosure of genetic data the company collects through a genetic testing product or service, including information that:
(1) clearly describes the company's use of the genetic data;
(2) specifies the persons who have access to test results; and
(3) specifies the manner in which the company may share the genetic data.
(c) A direct-to-consumer genetic testing company shall provide a process for an individual to:
(1) access the individual's genetic data;
(2) delete the individual's account and genetic data; and
(3) destroy or require the destruction of the individual's biological sample.
Status: in_force · Read it on the official government site
Dealing with a business matter in Texas?
See all Texas Business lawyers
About this page: Statute text is reproduced from official government publishers via the
Open US Law dataset
(Vaquill AI, snapshot v2026.08, CC BY 4.0). Primary legislative text like this is public domain under the government-edicts doctrine
(Georgia v. Public.Resource.Org, 2020). We link every section back to its official source so you can verify it independently.