On May 6, 2026, Rhode Island took a bold step in protecting consumer rights by passing the Genetic Information Privacy Act. This new legislation aims to give residents more control over their genetic data, amid increasing worries about the security of personal information.
The Rhode Island Senate voted unanimously—37-0—to approve this bill, following a similar outcome in the House just days earlier, where it passed 68-0 on April 28. The law responds to growing concerns about the unregulated nature of the genetic testing market and potential risks associated with sharing sensitive information.
Key provisions of the legislation include:
- Genetic testing companies must provide privacy policies in plain language.
- Consumers must give explicit consent for the collection and use of their genetic data.
- The use of ‘dark patterns’—manipulative design choices—by these companies is banned.
- Civil penalties for negligent violations can reach up to $1,000, while willful violations could incur penalties from $1,000 to $10,000 plus court costs.
Sam Zurier, a key supporter of the bill, emphasized its importance: “It protects our genetic information when we send it off to these companies so that they can’t sell it to other people.” This sentiment resonates with many Rhode Islanders who feel vulnerable in an age where data breaches are all too common.
Edith Ajello also voiced her support, stating, “Rhode Islanders deserve to know if their data might be shared or sold, and they should be able to opt out or request that their information be deleted.” This reflects a collective desire for transparency and control over personal data.
The legislation draws inspiration from a California law enacted in 2021. As states across the U.S. grapple with similar issues regarding privacy and consumer rights, Rhode Island’s initiative may serve as a model for others. However, uncertainties linger; how effectively will these regulations be enforced? And what implications might arise for companies like 23andMe and Ancestry.com?