A direct-to-consumer genetic testing company may not disclose a consumer's genetic data without the consumer's written consent to:
(1) an entity that offers health insurance, life insurance, or long-term care insurance; or
(2) an employer of the consumer.