§ 35-32-105 — General provisions; limitations

(a) The provisions of this chapter applicable to direct to
consumer genetic testing companies shall not be waived.
(b) The disclosure of genetic data pursuant to this
chapter shall comply with all state and federal laws for the
protection of privacy and security. This chapter shall not apply
to protected health information that is collected by a covered
entity or business associate governed by the privacy, security
and breach notification rules issued by the United States
Department of Health and Human Services (Parts Regulations) 160
and 164 of Title 45 of the Code of Federal Services (Parts
Regulations) established pursuant to the federal Health
Insurance Portability and Accountability Act of 1996 (P.L. 104-
191) and the federal Health Information Technology for Economic
and Clinical Health Act (P.L. 111-5).