GeneSight & Pharmacogenomics

Is Genetic Testing Private? GINA, Insurance and Your Results

By Dr. Stacey Forbes, DNP, APRN, PMHNP-BC · Updated October 12, 2026

A pharmacogenomic test, such as GeneSight, reads part of your DNA to help a prescriber think about medication. Because it is genetic, people reasonably ask who else could see it. The short answer: a clinically ordered result sits in your medical record under the same privacy rules as your other health information, and a federal law called GINA stops health insurers and most employers from using genetic information against you. There are real gaps, mainly life, disability and long-term care insurance. This guide lays out what is protected, what is not, and how consumer DNA kits differ.

Where a pharmacogenomic result lives

When a clinician orders a pharmacogenomic test, two parties hold the result: the laboratory and your prescriber. GeneSight, for example, states that when it performs a test ordered by a provider it does so as a HIPAA covered entity. Your prescriber files the report in your chart, where it is protected health information like a blood test or a visit note.

That means the familiar HIPAA rules apply: the result can be used for your treatment, for payment and for the practice’s operations, and most other disclosures need your written permission. Genome.gov notes that since HIPAA was amended in 2013, genetic information is explicitly treated as health information. How HIPAA works for psychiatric care in general, including what a health plan sees on a claim, is covered in our guide to psychiatric confidentiality, so this page focuses on what is different about genetic results.

You also have the right to your own copy. Under HIPAA, a covered provider must act on a request for access within 30 days, and can send the copy to a person you designate in a signed written request.

What GINA protects: health insurance

The Genetic Information Nondiscrimination Act of 2008, usually shortened to GINA, has two main parts. Title I covers health insurance. MedlinePlus summarizes it this way: it is illegal for health insurers to use or require genetic information to make decisions about your eligibility or coverage.

The HIPAA rules reinforce this. A federal regulation, 45 CFR 164.502, says a health plan may not use or disclose genetic information for underwriting, which includes decisions about eligibility, benefits and premiums. The one carve-out in that rule is for issuers of long-term care policies.

Separately, the Affordable Care Act stops health insurers from refusing coverage for pre-existing conditions, which genome.gov notes protects people with genetic conditions too. In everyday terms, a pharmacogenomic result should not affect whether you can get health insurance or what you pay for it.

A practical note on billing: the GeneSight test is billed by the testing company, not the practice, so its claim goes from the lab to your plan. At Willow & Stone, insurance for visits is accepted only for Texas patients, depending on the plan; elsewhere visits are direct-pay. Neither route gives a health plan permission to use genetic information for underwriting.

What GINA protects: jobs

Title II covers employment and is enforced by the U.S. Equal Employment Opportunity Commission (EEOC). According to the EEOC, an employer may not use genetic information in hiring, firing, pay, promotion or any other employment decision. It is also usually unlawful for an employer to request, require or buy genetic information about you.

“Genetic information” is broad. The EEOC includes your own genetic tests, genetic tests of your family members, and your family medical history. The exceptions are narrow, such as information an employer comes across accidentally or a properly designed voluntary wellness program. When an employer does hold genetic information, it must keep it confidential in a separate medical file.

GINA applies to employers with 15 or more employees. If you work for a smaller business, state law may or may not fill the gap.

The gaps: life, disability and long-term care insurance

This is the part most people do not know. Genome.gov states plainly that GINA’s insurance protections do not cover life insurance, disability insurance or long-term care insurance. Federal law therefore does not stop those insurers from asking about, or considering, genetic test results in the application process.

Two things put this in proportion. First, a pharmacogenomic result describes how you are likely to process certain medications, not a risk of developing a disease, which is usually what these insurers care about. Second, genome.gov notes that a patchwork of state laws exists, that GINA does not override stricter state protections, and that some states extend protections to these types of insurance. Because the rules vary, if you are about to apply for one of these policies and the question matters to you, it is reasonable to read the application’s questions and your state’s rules before testing, or ask a licensed insurance professional.

Consumer DNA kits are a different privacy picture

A kit you buy online and mail in yourself is generally not part of a medical record. The company’s terms and privacy policy, not a clinician’s HIPAA obligations, are what mainly govern how the data is stored, shared or used for research. MedlinePlus warns that genetic privacy may be compromised if these companies sell or share your genetic information, or if their data is breached.

Before using a consumer test, or uploading its raw data to another site, it is worth reading:

• whether the company shares data with partners or researchers, and whether that is opt-in;
• whether you can delete your data and your sample, and how;
• what happens to your data if the company is sold or closes;
• whether any third-party interpretation site you use keeps a copy of your file.

How consumer reports compare with clinical tests for medication decisions is covered in GeneSight, other pharmacogenomic tests and 23andMe.

Making a calm decision about testing

Privacy worries are a legitimate part of deciding whether to test, and they deserve a clear conversation rather than reassurance. Some questions to bring:

1. Would the result change a medication decision for me right now?
2. Who will hold the result, and who will see it?
3. Am I planning to apply for life, disability or long-term care insurance soon?
4. Do I want a copy, and who else (my primary care clinician, pharmacist) should have one?

At Willow & Stone, pharmacogenomic testing is ordered only when it is clinically useful, and results are reviewed with you as one data point among many. You can read how that fits into care on the GeneSight testing for mental health page, and the practice’s handling of records on the privacy policy. If you decide to go ahead, getting a GeneSight test explains the steps.

Common Questions

Sources & Further Reading

• National Human Genome Research Institute — Genetic Discrimination
• U.S. EEOC — Genetic Information Discrimination
• MedlinePlus Genetics — What is genetic discrimination?
• eCFR — 45 CFR 164.502 (genetic information and underwriting)
• eCFR — 45 CFR 164.524 (right of access)
• MedlinePlus Genetics — Pros and cons of direct-to-consumer genetic testing

This article is general education, not advice for your situation. Do not start, stop, or change a medication based on a genetic test result without talking to the clinician who prescribes it.