(a) A direct-to-consumer genetic testing company may not disclose an individual's genetic data to a law enforcement entity or other governmental body unless:
(1) the company first obtains the individual's express written consent; or
(2) the entity or body obtains a warrant or complies with another valid legal process required by the company.
(b) A direct-to-consumer genetic testing company may not disclose, without first obtaining an individual's written consent, the individual's genetic data to:
(1) an entity that offers health insurance, life insurance, or long-term care insurance; or
(2) an employer of the individual.