You are on page 1of 29

Tuesday,

November 9, 2010

Part III

Equal Employment
Opportunity
Commission
29 CFR Part 1635
Regulations Under the Genetic
Information Nondiscrimination Act of
2008; Final Rule
wwoods2 on DSK1DXX6B1PROD with RULES3

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00001 Fmt 4717 Sfmt 4717 E:\FR\FM\09NOR3.SGM 09NOR3
68912 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

EQUAL EMPLOYMENT OPPORTUNITY rise to the potential misuse of genetic discrimination in group premiums
COMMISSION information to discriminate in health based on genetic information and the
insurance and employment.’’ GINA use of genetic information as a basis for
29 CFR Part 1635 Section 2(1), 42 U.S.C. 2000ff, note. determining eligibility or setting
Experts predict that the twenty-first premiums in the individual and
RIN [3046—AA84]
century will see tremendous strides in Medigap insurance markets, and place
Regulations Under the Genetic the new field of genomic medicine, limitations on genetic testing and the
Information Nondiscrimination Act of bringing it into mainstream medical collection of genetic information in
2008 practice. The National Human Genome group health plan coverage, the
Research Institute (NHGRI), the institute individual insurance market, and the
AGENCY: Equal Employment within the National Institutes of Health Medigap insurance market. Title I also
Opportunity Commission. responsible for the mapping of the requires the Secretary of Health and
ACTION: Final rule. human genome, notes that ‘‘by Human Services to revise the privacy
identifying the genetic factors associated regulations promulgated pursuant to the
SUMMARY: The Equal Employment with disease, researchers may be able to Health Insurance Portability and
Opportunity Commission (‘‘EEOC’’ or design more effective drugs; to prescribe Accountability Act of 1996 (HIPAA).
‘‘Commission’’) is issuing a final rule to the best treatment for each patient; to HHS has published a notice of proposed
implement Title II of the Genetic identify and monitor individuals at high rulemaking that proposes to clarify that
Information Nondiscrimination Act of risk from disease; and to avoid adverse genetic information is health
2008 (‘‘GINA’’). Congress enacted Title II drug reactions.’’ NHGRI, The Future of information, and to prohibit group
of GINA to protect job applicants, Genomic Medicine: Policy Implications health plans, health insurance issuers
current and former employees, labor for Research and Medicine (Bethesda, (including HMOs), issuers of Medicare
union members, and apprentices and Md. Nov. 16, 2005), available at http:// supplemental policies, and all other
trainees from discrimination based on www.genome.gov/17516574 (last visited health plans covered under the HIPAA
their genetic information. Title II of July 7, 2010). privacy regulations from using or
GINA requires the EEOC to issue Many genetic tests now exist that can disclosing genetic information for
implementing regulations. The inform individuals whether they may be underwriting purposes.
Commission issued a proposed rule in at risk for developing a specific disease Title II of GINA prohibits use of
the Federal Register on March 2, 2009, or disorder. But just as the number of genetic information in the employment
for a sixty-day notice and comment genetic tests increases, so do the context, restricts employers and other
period that ended on May 1, 2009. After concerns of the general public about entities covered by Title II from
consideration of the public comments, whether they may be at risk of losing requesting, requiring, or purchasing
the Commission has revised portions of access to health coverage or genetic information, and strictly limits
both the final rule and the preamble. employment if insurers or employers such entities from disclosing genetic
DATES: Effective January 10, 2011.
have their genetic information. Congress information. The law incorporates by
enacted GINA to address these reference many of the familiar
FOR FURTHER INFORMATION CONTACT:
concerns, by prohibiting discrimination definitions, remedies, and procedures
Christopher J. Kuczynski, Assistant based on genetic information and
Legal Counsel, or Kerry E. Leibig, Senior from Title VII of the Civil Rights Act of
restricting acquisition and disclosure of 1964, as amended, and other statutes
Attorney Advisor, at (202) 663–4638 such information, so that the general
(voice) or (202) 663–7026 (TTY). (These protecting federal, state, and
public would not fear adverse Congressional employees from
are not toll free numbers.) This rule also employment- or health coverage-related
is available in the following formats: discrimination.2
consequences for having a genetic test
large print, Braille, audio tape, and or participating in research studies that Background
electronic file on computer disk. examine genetic information. Scientific
Requests for this rule in an alternative The Commission published a
advances require significant cooperation proposed rule to implement Title II of
format should be made to the and participation from members of the
Publications Information Center at GINA on March 2, 2009, and asked for
general public. In the absence of such public comment on the proposed rule,
1–800–669–3362 (voice) or participation, geneticists and other
1–800–800–3302 (TTY). the discussion in the preamble, and
scientists would be hampered in their other Title II issues not addressed in
SUPPLEMENTARY INFORMATION: research, and efforts to develop new either document. See 74 FR 9056
medicines and treatments for genetic (March 2, 2009). Several days earlier, on
Introduction
diseases and disorders would be slowed February 25, 2009, the Commission held
On May 21, 2008, President George or stymied. a public meeting to announce its
W. Bush signed the Genetic Information GINA Title I’s health coverage approval of the proposed rule at which
Nondiscrimination Act of 2008 provisions apply to group health plans invited panelists spoke about the impact
(‘‘GINA’’), Public Law 110–233, 122 Stat. sponsored by private employers, unions, of genetic information discrimination in
881, codified at 42 U.S.C. 2000ff et seq., and state and local government the workplace (transcript available at
into law. Congress enacted GINA in employers; issuers in the group and http://www.eeoc.gov/eeoc/meetings/2-
recognition of, among many individual health insurance markets; 25-09/index.cfm). Although they had
achievements in the field of genetics, and issuers of Medicare supplemental not had an opportunity to review the
the decoding of the human genome and (Medigap) insurance.1 These Title I
wwoods2 on DSK1DXX6B1PROD with RULES3

the creation and increased use of provisions generally prohibit 2 Prior to November 21, 2009, Executive Order
genomic medicine. As Congress noted, 13145 prohibited federal executive branch agencies
‘‘New knowledge about genetics may 1 This regulation does not interpret the from discriminating against applicants and
allow for the development of better requirements of GINA Title I relating to genetic employees on the basis of genetic information and
nondiscrimination in health coverage. Those limited access to and use of genetic information.
therapies that are more effective against requirements are administered by the Departments Since its effective date in November 2009, GINA
disease or have fewer side effects than of Health and Human Services, Labor, and the has protected federal employees from genetic
current treatments. These advances give Treasury. discrimination.

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00002 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68913

proposed rule, commenters at the public The Commission also coordinated sites, or social networking sites) that are
meeting did express their views on with the Departments of Labor (DOL), likely to contain genetic information
issues they believed should be Health and Human Services (HHS), and about individuals.
addressed in EEOC’s regulation to the Treasury, which have responsibility For reasons more fully set forth in the
effectuate Title II’s purposes. for issuing regulations applicable to preamble’s discussion of 1635.8(a),
The Commission received 43 GINA Title I. In particular, DOL (the (b)(1) and (4), the Commission agrees
comments from individuals, from Employee Benefits Security that a covered entity may violate GINA
groups representing individuals, and Administration), HHS (the Centers for without a specific intent to acquire
from organizations representing Medicare & Medicaid Services), and the genetic information. For that reason, the
employers and professionals in response Treasury (the Internal Revenue Service) Commission has removed the reference
to the proposed rule. Most of those who are responsible for issuing regulations to ‘‘deliberate acquisition’’ of genetic
participated in the February 25, 2009 applicable to GINA sections 101–103.4 information in 1635.1. We likewise
public meeting submitted written These agencies issued interim final recognize that not every acquisition of
comments after reviewing the proposed rules on sections 101 through 103 of genetic information violates GINA.
rule that were consistent with their GINA on October 7, 2009. See 74 FR Accordingly, the section now simply
public testimony. Further, on March 26, 51664. The HHS Office for Civil Rights indicates that Title II of GINA restricts
2010, President Obama appointed to the is responsible for issuing the regulations requesting, requiring, or purchasing
Commission by way of recess applicable to GINA section 105 and genetic information. The rest of the
appointments the Chair and two new issued a proposed rule on October 7, language of 1635.1 concerning GINA’s
Commissioners. These new members of 2009 at 74 FR 51698. Among the various prohibition on the use of genetic
the Commission (and others who were Title II provisions are several that information in employment decision-
previously serving on the Commission) address the relationship between Title I making, the requirement that genetic
met with a number of stakeholders who and Title II, and the relationship information be kept confidential (which
had submitted comments to the record. between Title II and several statutes that includes maintaining written genetic
Records of these meetings are included the Departments enforce, including the information that exists in paper or
in the rulemaking docket. Employee Retirement Income Security electronic form as a confidential
In developing this regulation, the Act of 1974 (ERISA), the Public Health medical record), and the limitations on
Commission closely followed the terms Service Act, the Internal Revenue Code, disclosure of genetic information is the
of the statute. The Commission’s goal is and HIPAA. same as the language in the proposed
to implement the various provisions of rule.
Section-by-Section Analysis of the We have also modified this section to
Title II consistent with Congress’s Regulation
intent, to provide some additional include a point made only in the
clarification of those provisions, and to Section 1635.1 Purpose preamble to the proposed rule. A new
explain more fully those sections where subparagraph, 1635.1(b), clarifies that
In this section, the Commission sets
Congress incorporated by reference the final rule does not apply to actions
forth the general purposes of GINA. The
provisions from other statutes. For of a covered entity that do not pertain
language in this section of the final rule to an individual’s status as an employee,
example, where GINA section has been modified slightly in response
201(2)(A)(i) defines employee by member of a labor organization, or
to several comments that disagreed with participant in an apprenticeship
reference to Title VII of the Civil Rights the characterization of Title II as
Act of 1964 and other statutes, this program. The final rule offers two
prohibiting the ‘‘deliberate acquisition’’ examples to illustrate this point. Title II
regulation expands on that reference by of genetic information. See Comments of of GINA would not apply to a medical
importing language from these statutes the American Civil Liberties Union examination of an individual conducted
so that those using the final regulation (ACLU), Coalition for Genetic Fairness for the purpose of diagnosis and
need not refer to other sources when (CGF), Genetic Alliance, and the treatment unrelated to employment,
determining the scope of GINA’s Genetics and Public Policy Center in which is conducted by a health care
coverage.3 collaboration with Jeremy Gruber professional in the hospital or other
The Commission also recognizes that (GPPC). These organizations noted that health care facility where the individual
Title II of GINA includes terms that are the term ‘‘deliberate acquisition’’ is an employee. Similarly, Title II would
outside the areas of its expertise. In suggested that a covered entity must not govern the actions of a covered
particular, the definition of ‘‘genetic have a specific intent to acquire genetic entity carried out in its capacity as a law
test’’ refers to ‘‘analysis of human DNA, information in order to violate the law. enforcement agency investigating
RNA, chromosomes, proteins, or According to these commenters, a criminal conduct, even where the
metabolites that detects genotypes, covered entity violates GINA by subject of the investigation is also an
mutations, or chromosomal changes.’’ engaging in acts that present a employee of the covered entity.
None of these terms is common to heightened risk of acquiring genetic
employment discrimination law. For information, even without a specific Section 1635.2 Definitions—General
this reason, Commission staff sought intention to do so, such as when they The Commission reiterates the
and obtained technical assistance from fail to inform an individual from whom definitions set forth in GINA section
NHGRI, the institute within the National they have requested documentation 201, many of which come from Title VII
Institutes of Health responsible for about a manifested disease or disorder of the Civil Rights Act of 1964.
decoding the human genome and for not to provide genetic information or However, where the statute merely
wwoods2 on DSK1DXX6B1PROD with RULES3

developing technologies applicable to when they access sources of information incorporates by reference different
the study of the genetic components of (e.g., certain types of databases, Web categories of covered employees, the
complex disorders. regulation describes more fully the
4 The National Association of Insurance
3 Unless
employees GINA protects. We have
otherwise noted, use of the term ‘‘GINA’’ Commissioners issued conforming model
means ‘‘Title II of GINA.’’ When needed for clarity, regulations relating to section 104 on September 24,
retained without change language from
the preamble will refer to Title I of GINA or Title 2008, published in the Federal Register on April the proposed rule which said that the
II of GINA. 24, 2009 at 74 FR 18808. term ‘‘employee’’ also includes former

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00003 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
68914 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

employees. We received two comments statute makes clear, GINA’s definition of Accountability Act, which protects
raising concerns with this inclusion. ‘‘employer’’ includes employers as employees in the legislative branch. See
The Illinois Credit Union League (ICUL) defined by Title VII at 42 U.S.C. 2 U.S.C. 1301(9). Although the EEOC
suggested that there should be a 2000(e)b. Numerous courts have held has no enforcement authority under the
temporal qualifier on the term ‘‘former that this definition was not intended to Congressional Accountability Act, as the
employee,’’ while a comment jointly permit individual liability. See Lane v. only agency with authority to issue
submitted by the U.S. Chamber of Lucent Tech., Inc., 388 F. Supp. 2d 590 regulations under Title II of GINA, we
Commerce, the Society for Human (M.D.N.C. 2005) (citing cases from every believe that referencing that law in this
Resource Management and a number of circuit except the First Circuit rejecting final regulation appropriately puts
other employer representatives individual liability); see also, e.g., employees in the legislative branch and
(Chamber/SHRM) objected that our Mandell v. County of Suffolk, 316 F.3d covered employing offices on notice of
citation to Robinson v. Shell Oil Co., 519 368 (2d Cir. 2003); Wathen v. General their rights and responsibilities under
U.S. 337, 346 (1997), did not support Elec. Co., 115 F.3d 400 (6th Cir. 1997); GINA.
the proposition that the term Cross v. Alabama, 49 F.3d 1490 (11th
‘‘employee’’ also includes former Cir. 1995); Grant v. Lone Star Co., 21 Section 1635.3 Definitions Specific to
employees. Chamber/SHRM contends F.3d 649 (5th Cir. 1994). Therefore, it is GINA
that Robinson decided only that the not necessary to make this point in the
term ‘‘employee’’ as used in Title VII’s regulation. GINA includes six terms not found in
anti-retaliation provision, 42 U.S.C. The final regulation includes a any of the other employment
2000e–3(a), applied to former definition of ‘‘covered entity.’’ It uses the discrimination statutes that the
employees, not whether ‘‘employee’’ as term to refer to all entities subject to Commission enforces. This final
used in section 701(f) of Title VII Title II of GINA: The different categories regulation provides some additional
applied to former employees. In of GINA-covered employers (private guidance regarding these terms. One
Robinson, the Supreme Court observed sector, state and local government, comment said that many of the
that the definition of ‘‘employee’’ in Congressional employers, executive definitions in the NPRM were too
section 701(f), which is the basis for the branch, federal/civil service), as well as difficult to understand without
term ‘‘employee’’ in GINA, ‘‘lacks any employment agencies, labor scientific knowledge. See Comment of
temporal qualifier and is consistent with organizations, and joint labor- Federal Deposit Insurance Corporation
either current or past employment.’’ management training and (FDIC). As noted above, in developing
Robinson, 519 U.S. at 342. The apprenticeship programs. By using the these definitions, EEOC coordinated
Commission has read Robinson as term ‘‘covered entity’’ to describe the closely with NHGRI. We also were
supporting its well-established position requirements or prohibited practices careful to track closely the language of
that ‘‘[f]ormer employees are protected applicable to all entities subject to Title Title II itself where possible to avoid
by the EEO statutes when they are II of GINA, the final regulation avoids any unintended consequences that
subjected to discrimination arising from some of the repetition found in sections might result from attempting to
the former employment relationship.’’ 202–205 of the statute. This use of the paraphrase or simplify scientifically
See EEOC’s Compliance Manual Section term ‘‘covered entity’’ as a simplifying technical language. However, we have
2 on Threshold Issues at § 2–III.A.2. & shorthand to aid in the readability of the added a number of examples to the
n. 79 (available at http://www.eeoc.gov/ final regulation is similar to EEOC’s use regulation itself that will further clarify
policy/docs/threshold.html#2-III-A-2) of ‘‘covered entity’’ in the regulation the meanings of some of these terms.
(citing to Robinson). An example under implementing Title I of the Americans
GINA would be a situation in which a with Disabilities Act, 42 U.S.C. 12111 Section 1635.3(a) Family Member
former employer disclosed to a (ADA). One comment urged the The statute defines an individual’s
prospective employer an individual’s Commission not to use the term ‘‘family member’’ both by reference to
genetic information. Accordingly, the ‘‘covered entity’’ because of possible ERISA section 701(f)(2) and as
final regulation makes clear that the confusion with the same term in extending to the individual’s fourth
term ‘‘employee’’ includes an applicant HIPAA. See Comment of American degree relatives. First, section 201(3)(a)
and a former employee. Medical Association (AMA). We do not of GINA states that family member is
The final regulation provides a believe that use of the term ‘‘covered defined as ‘‘a dependent (as that term is
concise explanation of the employers entity’’ in this regulation will cause
used for purposes of section [701(f)(2) of
covered by GINA, rather than following confusion, as most of the entities subject
ERISA])’’ of the individual.5 For
the statute’s example of providing to Title II are not HIPAA covered
purposes of Title II, the Commission has
citations to definitions of ‘‘employer’’ entities and those that are should be
determined that the dependents covered
provided by other laws. For example, able to distinguish between their roles
by Title II are limited to persons who
the final regulation explains that Indian as HIPAA covered entities and as
are or become related to an individual
tribes, as well as bona fide private clubs covered entities subject to Title II of
(other than labor organizations) that are GINA. We note that HIPAA covered 5 The Commission’s definition of ‘‘dependent’’ is
exempt from taxation under section entities do not appear to have solely for purposes of interpreting Title II of GINA,
501(c) of the Internal Revenue Code of experienced confusion from use of the and is not relevant to interpreting the term
1986, are not employers, rather than term ‘‘covered entities’’ in Title I of the ‘‘dependent’’ under Title I of GINA or under section
merely referring to Title VII’s exclusion ADA, even though the ADA, like 701(f)(2) of ERISA and the parallel provisions of the
of these groups from the definition of HIPAA, places limitations on the Public Health Service Act and the Internal Revenue
wwoods2 on DSK1DXX6B1PROD with RULES3

Code. The Commission believes its interpretation of


‘‘employer.’’ See 42 U.S.C. 2000e(b)(1) acquisition and disclosure of medical the term ‘‘family member,’’ particularly the way in
and (2). information. which GINA’s reference to section 701(f)(2) of
One commenter asked that the final The final regulation says that the term ERISA relates to that term, is consistent with the
regulation state that there is no ‘‘covered entity’’ includes an ‘‘employing plain language of both section 701(f)(2) and Title II
of GINA, furthers Congress’s intent to prohibit
individual liability for violations of office.’’ The term ‘‘employing office,’’ genetic discrimination in the employment context,
GINA. See Comment of TOC referenced in sections 201 and 207 of and provides covered entities with clear standards
Management Services (TOC). As the GINA, is used in the Congressional governing compliance with the law.

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00004 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68915

through marriage, birth, adoption, or among first-degree relatives.7 See medical history’’ to prevent a covered
placement for adoption.6 Comment of GPPC. entity from making decisions about an
Groups who represent employers The Commission declines, however, individual’s health based on the
thought that persons who become to expand the degree of relationship of existence of an inheritable disease of a
family members beyond the fourth family member. See also id. at 28
dependents by adoption or placement
degree as one comment suggested we (reiterating the Title I discussion of
for adoption should not be considered
should do. See Comment of Members of family medical history in the Report
family members, because genetic
the Personal Genetics Education Project section addressing Title II).8
information about them would not
(PGEP). Whether or not genetic Citing this legislative history, some
indicate whether an individual
information about an individual’s employer groups urged that we include
protected by GINA might acquire a
relatives beyond the fourth degree of the word ‘‘inheritable’’ before the words
disease or disorder. See Comments of relationship has predictive value with ‘‘disease or disorder’’ in the regulation’s
Illinois Chamber of Commerce (ICC) and respect to the individual, the language definition of ‘‘family medical history,’’
Chamber/SHRM. However, GINA’s of the statute on which the regulation is arguing that Congress did not intend
express reference to section 701(f)(2) of patterned does not permit such an that GINA apply to conditions such as
ERISA and section 701(f)(2)’s explicit expansion of the definition of ‘‘family the common cold or the flu. See
reference to dependents by adoption or member.’’ In fact, GINA’s definition of Comments of Chamber/SHRM and ICC.
placement for adoption makes it ‘‘family member’’ is already broader than For three reasons, the Commission has
absolutely clear that Congress intended that term is understood in the practice decided not to make this change in the
to include such persons in GINA’s of medicine. As discussed in the final rule. First, the regulation’s
definition of ‘‘family member.’’ following section, a typical family language is consistent with the plain
Moreover, the acquisition of information medical history used for the purposes of language of the statute, which also does
about the occurrence of a disease or diagnosis and treatment includes not include the word ‘‘inheritable.’’
disorder in an applicant’s or employee’s information about an individual’s first- Second, given the rapidly-developing
adopted child could certainly result in degree, second-degree, and third-degree field of genetics, we believe that
the type of discrimination GINA was relatives. requiring Title II covered entities or
intended to prohibit. For example, an EEOC investigators to determine
employer might use information it Section 1635.3(b) Family Medical whether a disease or disorder in family
obtains about the current health status History members of an individual is
of an adopted child to discriminate The final regulation includes a ‘‘inheritable’’ or has a genetic basis
against an employee because of definition of ‘‘family medical history’’ would present significant compliance
concerns over potential health care because it is a term used in the statute’s and enforcement problems. Finally, the
costs, including increased health discussion of prohibited employment Commission doubts that questions about
insurance rates, associated with the practices, but it is not specifically whether a family member has a cold, the
family member’s medical condition. See defined by the statute. In the legislative flu, or similar conditions will often
S. Rep. No. 110–48 at 28 (indicating that history of GINA, Congress stated that result in charges being filed under
spouses and adopted children were the term ‘‘family medical history GINA.
included in the definition of family [should] be understood as it is used by One commenter also suggested that
member for this exact reason). medical professionals when treating or we clarify that medical information
Second, GINA includes as family examining patients.’’ S. Rep. No. 110– obtained from one employee will not be
members persons related from the first 48, at 16. In particular, the Senate considered family medical history of a
to the fourth degree of an individual. Report notes as follows: family member who also works for the
The degree of relationship reflects the [T]he American Medical Association
employer. See Comment of Chamber/
average proportion of genes in common (AMA) has developed an adult family history SHRM. This commenter is apparently
between two individuals. The GINA form as a tool to aid the physician and concerned that an employer will be
provisions thus include the individual’s patient to rule out a condition that may have liable for a violation of GINA if it
children, siblings, and parents (first developed later in life, which may or may not requests information about a manifested
have been inherited. This form requests disease or disorder of an employee
degree), grandparents, grandchildren, information about the patient’s brothers,
uncles, aunts, nephews, nieces, and whose family member also works for the
sisters, and their children, biological mother, employer. The Commission recognizes
half-siblings (second degree), great- the mother’s brothers, sisters, and their
grandparents, great grandchildren, great children, maternal grandfather, maternal
the problem that this commenter is
uncles, great aunts, and first cousins grandmother, biological father, the father’s trying to avoid, but does not agree with
(third degree), and great-great brothers, sisters, and their children, paternal the proposed solution. We disagree that
grandparents and first cousins once grandfather and paternal grandmother. The the first employee’s medical information
removed (the children of a first cousin) committee expects that the use of ‘‘family is not family medical history as to the
history’’ in this bill will evolve with the second employee. An employer who
(fourth degree). The inclusion of half- medical profession and the tools it develops
siblings among second-degree relatives learns that one employee has a
in this area. manifested disease or disorder would be
responds to a comment we received to
the proposed rule which said that we Id. The Report further notes that ‘‘a in possession of family medical history
had incorrectly listed half-siblings family medical history could be used as about a second employee who is a
a surrogate for a genetic trait,’’ id., and
that the definition of ‘‘genetic 8 Since 2004 the U.S. Surgeon General’s Family
wwoods2 on DSK1DXX6B1PROD with RULES3

6 ‘‘Placement for adoption’’ or being placed for History Initiative has actively promoted the
adoption means the assumption and retention of a information’’ had to include ‘‘family
collection and use of family history information in
legal obligation for total or partial support of a child clinical settings, including featuring a bilingual
by a person with whom the child has been placed 7 This approach is different from the approach
Web-based tool through which the user creates and
in anticipation of the child’s adoption. The child’s taken in regulations implementing Title I of GINA. organizes his/her family health history (http://
placement for adoption with such person ends See GINA Title I regulations at 26 CFR 54.9802– www.hhs.gov/familyhistory/). GINA is not intended
upon the termination of such legal obligation. See 3T(a)(2)(ii), 29 CFR 2590.702–1(a)(2)(ii) and 45 CFR to limit the collection of family medical history by
29 CFR 2590.701–2 (the definitions for part 7 of 146.122(a)(2)(ii), which were published in the health care professionals for diagnostic or treatment
ERISA) Federal Register on October 7, 2009 at 74 FR 51664. purposes.

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00005 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
68916 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

family member as defined by GINA. final rule also says that information disease or condition. For example, tests
Likewise, an employer who learns the about race and ethnicity that is not to determine whether an individual
results of one employee’s genetic test or derived from a genetic test is not genetic carries the genetic variant evidencing a
learns that the employee has sought or information. See Comment of ACLU. predisposition to breast cancer—
received genetic services would possess whether the individual has the BRCA1
Section 1635.3(d) Genetic Monitoring
genetic information about the employee or BRCA2 variant—or to determine
who is a family member. (See Genetic monitoring is defined in whether an individual has a genetic
discussion of the definition of ‘‘genetic GINA section 201(5) as the ‘‘periodic variant associated with hereditary
information,’’ below.) We do not think examination of employees to evaluate nonpolyposis colorectal cancer are
Congress could have intended that an acquired modifications to their genetic genetic tests. It is important to note,
employee not be protected from the material * * * caused by the toxic however, that the presence of a genetic
discriminatory use or the disclosure of substances they use or are exposed to in variant relating to a predisposition to
his or her genetic information just performing their jobs.’’ The final disease is not evidence of, and does not
because the employer obtained it from regulation uses language similar to that equate to, disease. Similarly, a positive
a family member who was also an found in the statute in defining the test for a genetic variant as strongly
employee. term. As more fully described in penetrant as Huntington’s Disease does
However, we do agree with the 1635.8(b)(5) and its accompanying not equate to the presence of the
comment to the extent it seeks to limit preamble discussion, a covered entity disease, even though development of
liability under GINA for the acquisition may acquire genetic information as part the disease is almost inevitable.
of information about an employee’s of genetic monitoring that is either The Commission invited comments
manifested condition. Although required by law or voluntarily on the scope of the term ‘‘genetic test.’’
acquisition of information about undertaken, provided the entity In response, we received comments
manifested conditions is limited under complies strictly with certain generally agreeing with how the
other laws such as the ADA, it is conditions. Commission characterized certain kinds
permissible under GINA, even where an of tests in the preamble and text of the
Section 1635.3(e) Genetic Services
employee’s family member works for proposed rule. Several comments asked
the same employer. We have added a The term ‘‘genetic services’’ is defined that we place examples from the
new subsection to § 1635.8 to clarify in GINA section 201(6). It includes preamble to the proposed rule in the
this point, and to make the related point genetic tests, genetic counseling, and text of the regulation itself, and we have
that an employer will not violate GINA’s genetic education. Making an done so. See Comments of the Equal
provisions prohibiting the acquisition of employment decision based on Employment Advisory Council (EEAC),
an employee’s genetic information when knowledge that an individual has CGF, Genetic Alliance, GPPC and TOC.
it requests genetic information or received genetic services violates GINA, Thus, the regulation says that tests for
information about a manifested disease even if the covered entity is unaware of infectious and communicable diseases
or disorder from an employee’s family the specific nature of the genetic that may be transmitted through food
member to whom health or genetic services received or the specific handling, complete blood counts,
services are being provided on a information exchanged in the course of cholesterol tests, and liver-function tests
voluntary basis. (See discussion of providing them. are not genetic tests. To the proposed
§ 1635.8(c), below.) A number of comments asked that the rule’s examples of genetic tests, we have
final rule offer additional examples of added a number of others suggested by
Section 1635.3(c) Genetic Information genetic services that emphasize the several commenters, including carrier
GINA section 201(4) and the term’s breadth, including genetic screenings of adults to determine the
regulation define genetic information to education before and after testing and risk of conditions such as cystic fibrosis,
include information from genetic tests, preventive therapies that an individual sickle cell anemia, spinal muscular
the genetic tests of family members, and might undergo in response to a genetic atrophy, and fragile X syndrome in
family medical history. Genetic test to reduce or eliminate the risk of future offspring; amniocentesis and
information also includes information acquiring a condition in the future. See other evaluations used to determine the
about an individual’s or family Comments of AMA, CGF, Genetic presence of genetic abnormalities in a
member’s request for or receipt of Alliance, and GPPC. We have not made fetus; newborn screening tests for
genetic services. GINA section 209(b) any additions to the definition in the conditions such as PKU, which may
and the regulation add that the term final regulation. The definition of allow preventive treatment to begin
genetic information includes genetic genetic services provided in the before the disease manifests; DNA
information of a fetus carried by an proposed rule encompasses genetic testing that reveals family relationships
individual or an individual’s family education, whether it is offered before, (e.g., paternity tests); and DNA testing
member or an embryo lawfully held by after, or unrelated to genetic testing. that determines the presence of genetic
an individual or family member Moreover, we have determined that the markers associated with ancestry. See
receiving assistive reproductive statutory definition of genetic services Comments of CGF, Genetic Alliance,
services. See Comment of FDIC (noting was not intended to encompass the and GPPC.
that the preamble to the proposed rule types of clinical services mentioned by Two commenters requested that the
cited to the wrong section of GINA these commenters. preamble and regulation refrain from
when discussing the genetic information listing specific tests that are excluded
of a fetus or embryo). The statute and Section 1635.3(f) Genetic Test from the definition of genetic test. One
wwoods2 on DSK1DXX6B1PROD with RULES3

regulation exclude from coverage GINA section 201(7) defines ‘‘genetic argued that the science of genetics is
information about an individual’s or test’’ to mean the ‘‘analysis of human constantly developing and that it is
family member’s age or gender. In DNA, RNA, chromosomes, proteins, or therefore shortsighted to specify tests
response to a comment, and mindful metabolites that detects genotypes, that are not genetic in nature. See
that many employers routinely request mutations, or chromosomal changes.’’ Comment of National Counsel of EEOC
such information on a voluntary basis to Genetic tests are used to detect gene Locals no. 216, American Federation of
comply with their EEO obligations, the variants associated with a specific Government Employees, AFL–CIO

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00006 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68917

(AFGE). Although we acknowledge this defined ‘‘manifestation or manifested’’ to genetic variant is 100 percent predictive
concern, excluding illustrative examples mean, with respect to a disease, for development of disease, the presence
of what does not meet this definition disorder, or pathological condition: of the variant does not by itself equal
would only serve to confuse those that an individual has been or could diagnosis of the disease.
attempting to understand the bounds of reasonably be diagnosed with the disease, Two comments asked the Commission
the law. disorder, or pathological condition by a to delete from § 1635.3(g) the concept
Another comment argued that while health care professional with appropriate that a disease, disorder, or pathological
the excluded tests are not genetic tests, training and expertise in the field of condition is not manifested if it is based
it is still important that the results of medicine involved. For purposes of this part, ‘‘principally on genetic information or
tests that are not genetic tests be kept a disease, disorder, or pathological condition on the results of one or more genetic
is not manifested if the diagnosis is based
confidential and not be used as a basis tests.’’ See Comments of America’s
principally on genetic information or on the
for discrimination. See Comment of results of one or more genetic tests. Health Insurance Plans (AHIP) and
Disability Rights Legal Center (DRLC). Chamber/SHRM; see also Comments of
Concerns about the discriminatory use The final rule deletes the words ‘‘or on EEAC and SBA (raising similar
of medical tests that are not genetic are the results of one or more genetic tests,’’ concern). Although the Commission has
addressed by the ADA, which limits the which are unnecessary, given that the deleted reference to ‘‘the results of one
use of medical examinations and term ‘‘genetic information’’ already or more genetic tests’’ as explained
prohibits the use of medical and non- includes the results of genetic tests. The above, the final rule still includes the
medical tests that screen out or tend to definition of the term ‘‘manifested’’ is basic concept that a condition is not
screen out an individual with a consistent both with the definition of manifest if it is based principally on
disability or a class of individuals with genetic test found in Title I, which genetic information. We agree, however,
disabilities from employment, unless permits use of certain diagnostic tests in that a clarification is needed to address
the test is shown to be job-related for the order to determine whether an what we believe to be the central
position in question and consistent with individual has a current—or manifest— concern of these commenters, i.e., that
business necessity. See 29 CFR 1630.10. disease, disorder, or condition, see S. the language at issue extends the
Section 1635.11(a) of the final rule and Rep. No. 110–48. at 16, and with the protections of GINA to people with
the accompanying preamble discussion notion, discussed above in conjunction manifested conditions when genetic
make it clear that Title II of GINA does with the definition of genetic test information played a role in diagnosing
not limit other laws, including the ADA, (§ 1635.3(f)), that the mere presence of a them. We therefore note that where
that protect individuals on the basis of genetic variant does not mean that an diagnosis of a disease, disorder, or
disability. individual has an associated condition, pathological conditions depends on
The Title II definition of ‘‘genetic test’’ disease, or disorder. The presence of a both the presence of signs and
differs from the definition of this term genetic variant alone does not constitute symptoms and genetic information, the
in Title I. Specifically, the Title II a diagnosis; other signs or symptoms disease, disorder, or pathological
definition does not have the express must be present. This interpretation is condition will be considered
exclusion that Title I does for ‘‘an consistent with current ERISA manifested. The fact that an individual
analysis of proteins or metabolites that regulations which prohibit a group has the diagnosed disease, disorder, or
is directly related to a manifested health plan, and a health insurance pathological condition will not be
disease, disorder, or pathological issuer offering group health insurance considered genetic information about
condition that could reasonably be coverage, from imposing a preexisting the individual; nor will information
detected by a health care professional condition exclusion relating to a about the signs or symptoms the
with appropriate training and expertise condition based solely on genetic individual has. Such information,
in the field of medicine involved.’’ GINA information. Thus, for example, a however, is still subject to other laws
101(d), 29 U.S.C. 1191b–(d)(7)(B). woman who has group health plan regulating the acquisition and use of
However, as explained below, the coverage and has the BRCA1 gene medical information, including Title I of
Commission borrowed from Title I’s use variant may not be subject to a the ADA. See 42 U.S.C. 12112(d).
of the term ‘‘manifest’’ in the definition preexisting condition exclusion merely Moreover, information about any
of ‘‘genetic test’’ in formulating a because she has the variant. Id. Example genetic test or family medical history
definition of ‘‘manifested or at 29 CFR 2590.701–3(b)(6)(ii). used as part of the diagnosis of the
manifestation.’’ However, if an individual is diagnosed disease, disorder, or pathological
with a condition, even if the condition condition is genetic information subject
Section 1635.3(g) Manifestation or relates to genetic information—for to Title II of GINA and this regulation.
Manifested example, breast cancer stemming from Several commenters requested that
The final rule includes a definition of the BRCA1 gene variant—the plan may the final regulation clarify that the
the term ‘‘manifestation or manifested’’ impose a preexisting condition genetic information of an individual
because sections 201(4)(A)(iii) and 210 exclusion with respect to the condition with a manifested disease is still
use the terms. Specifically, GINA as of the date the disease was diagnosed, protected under GINA, citing the
section 201(4)(A)(iii), defining ‘‘genetic subject to other HIPAA portability example of an individual with breast
information,’’ refers to the requirements. See 29 CFR 2590.701– cancer who undergoes a genetic test and
‘‘manifestation of a disease or disorder 3(b)(6)(i). learns that she tests positive for a BRCA
in family members’’ of an individual, Similarly, Huntington’s Disease (HD) mutation, which increases one’s risk for
and section 210, entitled ‘‘Medical is an example of a genetic disease that developing ovarian cancer as well as
wwoods2 on DSK1DXX6B1PROD with RULES3

information that is not genetic is not diagnosed solely through use of breast cancer. See Comments of CGF,
information,’’ refers to a ‘‘manifested a genetic test; other signs and symptoms Genetic Alliance, and GPPC. These
disease, disorder, or pathological must be present. The presence of the commenters requested that we make
condition.’’ genetic variant virtually guarantees the clear that discriminating against this
The definition of ‘‘manifestation or later development of disease, but the individual due to the presence of the
manifested’’ was developed with the disease does not usually manifest until genetic variant is a violation of GINA
assistance of NHGRI. The proposed rule adulthood. Therefore, even when a despite the fact that she also has a

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00007 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
68918 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

manifested disease caused by the establishment of this Commission, candidates with a family medical
variant. We note that § 1635.12(b) makes which is scheduled to begin its work on history for certain conditions would
it clear that genetic information of an May 21, 2014. violate GINA. An employment agency
individual with a manifested disease is In response to a comment, we clarify that acted pursuant to the employer’s
protected genetic information under that a covered entity will not be deemed direction would be liable for violating
GINA and that discriminating against to have violated § 1635.5 if it limits or GINA either directly, because the law
someone based on this information is restricts an employee’s job duties based applies to employment agencies, or as
prohibited. on genetic information because it was an agent of the employer. Similarly, an
required to do so by a law or regulation employer would violate GINA if it used
Section 1635.4 Prohibited Practices— mandating genetic monitoring such as a labor organization’s hiring hall to
In General regulations administered by the obtain genetic information in making
In describing the prohibited practices Occupational and Safety Health job referrals, and the labor union would
under GINA Title II, Congress adopted Administration (OSHA). See Comment be liable under GINA either directly or
language similar to that used in Title VII of EEAC (requesting clarification of this as the employer’s agent. The final rule
and other equal employment statutes, point); see also 1635.8(b)(5) (concerning modifies the language of § 1635.6 of the
evincing its intent to prohibit voluntary genetic monitoring and proposed rule slightly so that it leaves
discrimination with respect to a wide monitoring pursuant to state or federal no doubt that no GINA covered entity
range of covered entity practices, law) and 1635.11(a) below (GINA does may cause another covered entity to
including hiring, promotion and not limit the statutory or regulatory discriminate on the basis of genetic
demotion, seniority, discipline, authority of OSHA, the Mine Safety and information.
termination, compensation, and the Health Administration or other
terms, conditions, and privileges of workplace health and safety laws and Section 1635.7 Retaliation
employment. In response to a comment, regulations.) The final regulation reiterates the
we further note that the broad language statutory prohibition against retaliation
Congress adopted in describing the Section 1635.6 Causing a Covered where an individual opposes any act
practices prohibited by Title II makes Entity To Discriminate made unlawful by GINA, files a charge
clear that claims of harassment on the GINA sections 203(a)(3), 204(a)(3), of discrimination or assists another in
basis of genetic information are and 205(a)(3) expressly bar employment doing so, or gives testimony in
cognizable. See Comment of Disability agencies, labor organizations, and connection with a charge. Because
Rights Legal Center (DLRC). In separate apprenticeship or other training Congress adopted in GINA the language
GINA sections 203–205, the statute programs from causing an employer to of the anti-retaliation provision in Title
notes additional covered actions of discriminate on the basis of genetic VII of the Civil Rights Act of 1964, the
employment agencies (failing or information. These sections recognize Commission believes that Congress
refusing to refer for employment), labor that employers engage in most of the intended the standard for determining
unions (excluding or expelling from employment-related activities that the what constitutes retaliatory conduct
membership), and training, retraining, Act reaches. Other covered entities, under GINA to be the same as the
and apprenticeship programs (denying however, might engage in conduct that standard under Title VII, as announced
admission to or employment in such could cause an employer to by the Supreme Court in Burlington
programs). discriminate. For example, an Northern & Santa Fe Ry. v. White, 548
employment agency or union might U.S. 53 (2006). In that case, the Court
Section 1635.5 Limiting, Segregating, share or attempt to share genetic held that Title VII’s anti-retaliation
and Classifying information it obtained (whether legally provision protects an individual from
The final regulation reiterates the or not) about a client or member with conduct, whether related to
statutory language barring actions by an employer. Such conduct would employment or not, that a reasonable
covered entities that may limit, violate sections 203(a)(3) and 204(a)(3), person would have found ‘‘materially
segregate, or classify employees because regardless of the intent of the adverse,’’ meaning that the action ‘‘well
of genetic information. For example, an employment agency or union in sharing might have ‘dissuaded a reasonable
employer could not reassign someone the information. See Comment of DLRC worker from making or supporting a
whom it learned had a family medical (requesting clarification on this point). charge of discrimination.’ ’’ Id. at 57–58
history of heart disease from a job it Although section 202 does not (citations omitted).
believed would be too stressful and include a similar provision explicitly
might eventually lead to heart-related prohibiting an employer from causing Section 1635.8 Acquisition of Genetic
problems for the employee. This section another covered entity to discriminate, Information
also makes clear that although the it is well settled under Title VII that the Each of the discrete GINA sections
language of the statute specifically definition of employer includes addressing the conduct of employers,
prohibits actions that have the ‘‘purpose employers’ agents under common law employment agencies, labor
or effect’’ of limiting, segregating, or agency principles. See Vinson v. Meritor organizations, and apprenticeship or
classifying individuals on the basis of Savings Bank, 477 U.S. 57, 72 (1986). other training programs includes a
genetic information, neither the statute Because GINA incorporates Title VII’s section prohibiting covered entities
nor the final regulation creates a cause definition of employer, including the from requesting genetic information
of action for disparate impact. Section application of common law agency from applicants, employees, or other
208 of GINA specifically prohibits such principles, GINA would bar an individuals; from requiring that
wwoods2 on DSK1DXX6B1PROD with RULES3

actions, and establishes the Genetic employer from engaging in actions that applicants or employees provide genetic
Nondiscrimination Study Commission, would cause another covered entity information; or from purchasing genetic
to examine ‘‘the developing science of acting as its agent to discriminate. For information about an applicant or
genetics’’ and recommend to Congress example, an employer that directed an employee. Each section also includes
‘‘whether to provide a disparate impact employment agency to ask applicants the same five exceptions. Sections 202,
cause of action under this Act.’’ The for genetic information or told the covering employers, and 205, covering
final regulation does not address the employment agency not to send it joint labor-management training and

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00008 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68919

apprenticeship programs, include a individual’s current health status (e.g., particularly in response to 1635.8(b)(1),
sixth exception. The proposed for the purpose of making a reasonable (2) and (4).
regulation addressed each of the accommodation) affirmatively warn the Inadvertently Requesting or Requiring
exceptions, as does the final regulation. person providing the information not to Genetic Information: First, as noted in
Covered entities are cautioned, include genetic information, since the proposed rule, a covered entity that
however, that the use of genetic acquisition of genetic information in the ‘‘inadvertently requests or requires
information to discriminate, no matter form of family medical history would be family medical history’’ from an
how that information may have been likely in the absence of a warning. See individual does not violate GINA.
acquired, is prohibited. Comments of ACLU, the American Congress intended this exception to
Concerning the general prohibition on Medical Association (AMA), CGF, address what it called the ‘‘ ‘water cooler
acquiring genetic information, two Genetic Alliance, GPPC, and the problem’ in which an employer
commenters noted that the regulatory Leadership Conference on Civil Rights unwittingly receives otherwise
language of 1635.8(a) did not track the (LCCR). Similarly, most of these prohibited genetic information in the
statutory language in that it failed to commenters said that the exception for form of family medical history through
indicate that the prohibition applies to acquisition of genetic information from casual conversations with an employee’’
the genetic information of family sources that are commercially and or by overhearing conversations among
members of individuals, as well as to publicly available should not apply to co-workers. S. Rep. No. 110–48, at 29;
that of the individuals themselves. See sources that are likely to, or present a see also H.R. Comm. on Education and
Comment of the American ‘‘heightened risk’’ of, containing genetic Labor, Genetic Information
Psychological Association (APA) and information, and one commenter Nondiscrimination Act of 2007, H.R.
FDIC. Although we believe the specifically asked that the final rule Rep. No. 110–28 part I, 37–38 (2008)
substance of the regulatory language is prohibit Internet searches that include (H.R. Rep. No. 110–28, part I). Congress
correct, in that the genetic information an individual’s name and a particular did not want casual conversation among
of an individual includes the genetic genetic marker. See Comments of LCCR. co-workers regarding health to trigger
information of that individual’s family The Commission acknowledges all federal litigation whenever someone
members, we agree that it would be best these concerns and, for purposes of mentioned something that might
to follow the statutory language of this GINA Title II, has added language to constitute protected family medical
prohibition and have altered 1635.8(a) 1635.8(a) as follows: ‘‘ ‘Request’ includes history. The Commission’s proposed
accordingly. conducting an Internet search on an regulation therefore noted that a covered
Another comment argued that a entity inadvertently acquires family
individual in a way that is likely to
covered entity violates GINA’s medical history where a manager or
result in a covered entity obtaining
provisions prohibiting the acquisition of supervisor overhears a conversation
genetic information; actively listening to
genetic information only when it among co-workers that includes
third-party conversations or searching
undertakes the purposeful act of information about family medical
an individual’s personal effects for the
requesting, requiring, or purchasing history (e.g., a conversation in which
genetic information. See Comment of purpose of obtaining genetic
one employee tells another that her
Chamber/SHRM. It was improper, this information; and making requests for
father has Alzheimer’s disease).
comment reasoned, for the Commission information about an individual’s Although the language of this
to have included examples of ‘‘passive current health status in a way that is exception in GINA specifically refers to
acquisition’’ in 1635.8(b)(1) (governing likely to result in a covered entity family medical history, the Commission
inadvertent acquisition of genetic obtaining genetic information.’’ believes that it is consistent with
information) and 1635.8(b)(4) We think it is equally clear that Congress’s intent to extend the
(concerning acquisition of genetic Congress intended certain ‘‘passive exception to any genetic information
information through sources that are acquisitions’’ of genetic information to that an employer inadvertently acquires.
commercially and publicly available). be exceptions to the rule prohibiting The Commission does not believe, for
However, other commenters read the acquisition, rather than being wholly example, that Congress intended that an
prohibition on acquisition more outside the prohibition. The examples, employer would be liable for the
broadly, noting their view that GINA particularly those in § 1635.8(b)(1) and acquisition of genetic information
restricts ‘‘deliberate acts that result in (4), are similar to the so-called ‘‘water because it overhears a conversation in
the acquisition of genetic information,’’ cooler’’ example that Congress thought which one employee tells another that
not just purposefully requesting, should be an exception to the general her mother had a genetic test to
requiring, or purchasing genetic prohibition against requesting, determine whether she was at increased
information. See Comments of ACLU, requiring, or purchasing genetic risk of getting breast cancer. If the
CGF, Genetic Alliance, and GPPC. A information. See S. Rep. No. 110–48, at exception were read to cover only
similar construction of the acquisition 29 (‘‘[t]he committee recognizes that family medical history, this would
prohibition underlay suggestions for conversations among coworkers about violate GINA, even though it occurred
changes to the portion of the rule the health of a family member are inadvertently, because information that
concerning inadvertent acquisition of common and intends to prevent such a family member has had a genetic test,
genetic information. Several normal interaction from becoming the while genetic information, is not
commenters said that covered entities basis of litigation’’). We therefore retain information about the occurrence of a
that make inquiries or engage in actions the examples offered in the preamble to disease or disorder in a family member.
reasonably likely to result in the the proposed rule, as we believe that Although we received numerous
wwoods2 on DSK1DXX6B1PROD with RULES3

acquisition of genetic information they provide useful guidance. See comments in regard to 1635.8(b)(1), no
should not be able to avail themselves Comment of TOC (encouraging EEOC to commenter expressed disagreement
of the exceptions in 1635.8(b)(1) or retain examples). with the decision to extend the
1635.8(b)(4). Thus, for example, as We now turn to a discussion of the exception to all genetic information that
discussed below, commenters asked that specific exceptions described in a covered entity inadvertently acquires.
the Commission require that covered 1635.8(b). We received a number of See, e.g., Comment of GPPC (discussing
entities requesting information about an comments concerning these exceptions, the need for a restrictive view of this

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00009 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
68920 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

exception, but expressing agreement exhaustive. See Comments of ICC and covered entities will obtain a great deal
that it was intended to extend to all Chamber/SHRM. The FDIC made a of genetic information through general
genetic information and not just family similar point when it requested that the requests for medical information if they
medical history). rule state that this exception applies to are not required to affirmatively indicate
The Commission also understands questions by an employer ‘‘not likely to that genetic information should not be
this exception to apply in any situation elicit genetic information’’ but does not provided. See Comments of the ACLU,
in which an employer might apply to questions ‘‘likely to elicit AMA, CGF, Genetic Alliance, GPPC,
inadvertently acquire genetic genetic information.’’ See Comment of and LCCR. See also Comments of
information, not just to situations FDIC. Burton Blatt Institute (noting that the
involving conversations between co- These comments make apparent the exception’s application to acquisition
workers that are overheard. The need for greater clarity concerning this through legitimate medical information
proposed regulation provided an exception. We include in the final requests should be limited because
illustrative list of examples, reiterated regulation itself the examples from the doctors will not know to exclude
here, where we believe Congress preamble to the proposed rule that genetic information) and World Privacy
intended the exception to apply. Thus, illustrate how this exception applies Forum (requesting further limitations on
for example, the exception applies when and provide an additional example both this exception). Employer groups raised
the covered entity, acting through a here and in the final regulation at the related point that human resource
supervisor or other official, receives 1635.8(b)(1)(ii)(B). The additional offices do not have control over what is
family medical history directly from an example is as follows: A covered entity received from health care providers in
individual following a general inquiry that inadvertently acquires genetic response to requests for medical
about the individual’s health (e.g., ‘‘How information about someone’s family information and that covered entities
are you?’’ or ‘‘Did they catch it early?’’ member in response to a general should not be subjected to liability if
asked of an employee who was just question about the family member’s health care providers provide genetic
diagnosed with cancer) or a question as health may not then ask follow-up information that was not requested. See
to whether the individual has a questions that are probing in nature, Comments of Chamber/SHRM, EEAC
manifested condition.9 Similarly, a such as whether other family members and the International Public
casual question between colleagues, or also have the condition, or whether the Management Association for Human
between a supervisor and subordinate, individual has been tested for the Resources, the League of Minnesota
concerning the general well-being of a condition. Cities and the International Municipal
family member would not violate GINA We also include an additional Lawyers Association (IPMA/IMLA).
(e.g., ‘‘How’s your son feeling today?’’, example here and in the final regulation In response to these comments and to
‘‘Did they catch it early?’’ asked of an at 1635.8(b)(1)(ii)(D) to clarify that the facilitate compliance with the law, we
employee whose family member was inadvertent acquisition exception have added language to the final rule
just diagnosed with cancer, or ‘‘Will applies not only to interactions within indicating that when a covered entity
your daughter be OK?’’), nor would the the workplace during which a covered warns anyone from whom it requests
receipt of genetic information that was entity unwittingly receives genetic health-related information not to
not solicited or sought by the employer information, but also to interactions that provide genetic information, the
(e.g., where a manager or supervisor take place in the ‘‘virtual’’ world, i.e., covered entity may take advantage of
receives an unsolicited email from a co- through a social media platform from the exception in 1635.8(b)(1) if it
which a covered entity unwittingly nevertheless receives genetic
worker about the health of an
receives genetic information. In other information. This ‘‘safe harbor’’ in
employee’s family member).
A number of commenters raised words, this exception applies where a 1635.8(b)(1)(i)(B) provides that any
concerns about the exact parameters of manager, supervisor, union receipt of genetic information in
this exception. Civil rights groups and representative, or employment agency response to a lawful request for medical
organizations promoting genetic representative inadvertently learns information will be deemed inadvertent
research asked that the EEOC clarify genetic information from a social media and not in violation of GINA if the
platform which he or she was given request contained such a warning.
that pointed questions or other attempts
permission to access by the creator of The final rule includes the following
to gather genetic information by, for
the profile at issue (e.g., where a language that a covered entity may use
example, intentionally eavesdropping
supervisor and employee are connected to provide such notice: ‘‘The Genetic
on private conversations or asking
on a social networking site and the Information Nondiscrimination Act of
highly specific follow-up questions
employee provides family medical 2008 (GINA) prohibits employers and
when an employee mentions that a
history on his page). other entities covered by GINA Title II
family member is ill, do not fall within We further note that the examples from requesting or requiring genetic
the bounds of this exception. See provided in this preamble and the information of employees or their family
Comments of ACLU, CGF, the Genetic regulation are non-exhaustive and that members. In order to comply with this
Alliance, GPPC, and LCCR. The Illinois other situations in which a covered law, we are asking that you not provide
Chamber of Commerce (ICC) requested entity inadvertently acquires genetic any genetic information when
that the regulation specifically state that information are covered by this responding to this request for medical
there is no violation of the prohibition exception as long as the requirements information. ‘Genetic information,’ as
against acquisition unless the employer provided in the regulation are met. defined by GINA, includes an
purposefully acquires genetic We received a significant number of individual’s family medical history, the
wwoods2 on DSK1DXX6B1PROD with RULES3

information and both ICC and Chamber/ comments expressing concern about results of an individual’s or family
SHRM requested that it be made clear GINA’s application to a covered entity’s member’s genetic tests, the fact that an
that the examples provided are not request for medical information that individual or an individual’s family
9 When asking questions likely to elicit
results in the receipt of genetic member sought or received genetic
information about a disability, covered entities
information that was not requested. services, and genetic information of a
must, of course, also abide by the requirements of Civil rights groups, groups promoting fetus carried by an individual or an
the ADA. genetic research, and others argued that individual’s family member or an

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00010 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68921

embryo lawfully held by an individual reasonable accommodation under the genetic information in either of these
or family member receiving assistive ADA or state or local law, the request situations.10 Acquisition of genetic
reproductive services.’’ Alternative for medical documentation can be made information in these circumstances will
language may also be used, as long as only when the disability and/or the be considered inadvertent if the covered
individuals and health care providers need for accommodation is not obvious. entity affirmatively warns individuals
are informed that genetic information In this situation, the employer may ask and health care providers from whom
should not be provided. the individual for reasonable they are seeking medical documentation
Although one commenter expressed documentation about his/her disability not to provide genetic information, or,
concern that giving notice would and/or need for accommodation. in the absence of such a warning, where
impose an unnecessary burden on small Reasonable documentation means that the request for medical information was
businesses, we note that the warning the employer may require only the not likely to result in the acquisition of
may be conveyed verbally if the request documentation that is needed to genetic information.11 In response to
for medical information itself is also establish that a person has a disability two comments concerning the need for
verbal. See Comment of the National within the meaning of the ADA and that additional clarity with regard to how the
Federation of Independent Business the disability necessitates a reasonable exceptions to the prohibition against
(NFIB). We are aware that many accommodation. For example, an acquiring genetic information apply to
businesses, especially small businesses, employer cannot request a person’s information received pursuant to the
do not use forms when requesting complete medical records because they FMLA, we have added the above
medical information, and we do not are likely to contain information examples to 1635.8(b)(1)(ii)(D)(2)(which
intend this regulation to change the unrelated to the disability at issue and was 1635.8(b)(1)(iv) in the proposed
practice of making such requests the need for accommodation. If an rule), as well as additional detail to the
verbally. individual has more than one disability, preamble’s discussion of the FMLA
If a covered entity does not give such an employer can request information exception (1635.8(b)(3)), discussed
a written or verbal notice, it may pertaining only to the disability that below. See Comments of APA and Anil
nonetheless establish that a particular requires a reasonable accommodation. Chaudhry.
receipt of genetic information in See EEOC’s Enforcement Guidance on The Commission believes that the first
response to a request for medical Reasonable Accommodation and Undue exception to the general prohibition of
information was an inadvertent Hardship Under the Americans With requesting, requiring, or purchasing
acquisition because the covered entity’s Disabilities Act, EEOC Notice No. genetic information should also apply
request was not made in a way that was 915.002 (Oct. 17, 2002), available at when an individual requests leave
‘‘likely to result in the covered entity’s http://www.eeoc.gov/policy/docs/ pursuant to a leave policy independent
obtaining genetic information’’ (for accommodation.html. Like any request of a federal, state, or local leave or
example where an overly broad for medical documentation, the request disability law. Acquisition of genetic
response is received in response to a for documentation as part of the information in these circumstances, like
tailored request for medical reasonable accommodation process the acquisition of genetic information
information). We note, however, that a should generally inform the individual where leave is requested pursuant to the
warning is mandatory in all cases where or entity from whom the documentation FMLA or a state or local leave law, will
a covered entity requests a health care is sought, using language like that noted be considered inadvertent if the covered
professional to conduct an employment- above, that genetic information should entity affirmatively warns individuals
related medical examination on the not be provided. and health care providers from whom
covered entity’s behalf, since in that We note that GINA’s prohibition on they are seeking medical documentation
situation, the covered entity should requesting, requiring, or purchasing not to provide genetic information,
know that the acquisition of genetic genetic information would control using language like that noted above, or,
information (e.g., family medical during the interactive process used to in the absence of such a warning, where
history) would be likely in the absence determine an appropriate reasonable the request for medical information was
of the warning. (See discussion of accommodation. The Commission not made in a way that was likely to
1635.8(d), below.) knows of no reason why a covered result in the covered entity’s obtaining
The proposed regulation noted that entity would need to request genetic genetic information. Covered entities
when a covered entity seeks information information to determine an should also be aware that overbroad
from an individual who requests a individual’s current physical or mental requests for documentation to support
reasonable accommodation under the limitations and whether those
ADA or state or local law, the limitations can be accommodated. 10 There is a separate exception for the acquisition

acquisition of genetic information as The Commission further recognizes of family medical history received from individuals
part of the documentation that the requesting leave under the FMLA or similar state
that other federal, state, or local laws or local laws to care for a family member. This
individual provides in support of the may allow covered entities to obtain exception is discussed in detail below.
request is considered inadvertent, as medical information about employees. 11 One commenter expressed concern that adding

long as the request for documentation A covered entity that inadvertently any language to the FMLA certification form would
was lawful. We received numerous receives genetic information in response result in a statutory violation of the FMLA. See
Comment of Illinois Credit Union League. The
comments asking us to describe in the to a lawful request for medical EEOC does not enforce the Family and Medical
regulation itself what it means for a information under such a law would not Leave Act and therefore has no authority to
request for documentation supporting a violate GINA. For example, a covered interpret it. We know of no reason, however, that
request for reasonable accommodation entity might receive genetic information informing a health care provider that genetic
wwoods2 on DSK1DXX6B1PROD with RULES3

information should not be provided when certifying


to be considered lawful. See Comments in connection with an employee’s an employee’s own serious health condition would
of APA, Disability Rights Legal Center request for FMLA leave to attend to the lead to a violation of the FMLA. Moreover, the
(DRLC), the Epilepsy Foundation, and employee’s own serious health notice informing applicants/employees and health
ICC. In response, we explain in the final condition or in connection with the care providers that they must not provide genetic
information, including family medical history, to
rule that in order to be considered a FMLA’s employee return to work covered entities need not be made on the FMLA
lawful request for documentation made certification requirements, even though certification form itself, as long as it is provided in
in response to an individual seeking a an employee is not required to provide writing along with the form.

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00011 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
68922 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

an employee’s use of leave may violate language reasonably likely to be alone or in conjunction with other
the ADA. For information on the understood by the individual from factors, makes an individual’s genetic
appropriate scope of inquiries in whom the information is sought; information readily identifiable, noting
response to requests for leave (other describes the information being that this would impose burdens
than as a reasonable accommodation), requested; and describes the safeguards particularly on small businesses. See
see EEOC’s Enforcement Guidance on in place to protect against unlawful Comments Chamber/SHRM and IPMA/
Disability-Related Inquiries and Medical disclosure. Additionally, the proposed IMLA.
Examinations of Employees Under the rule said that a wellness program or In the final rule, we have retained the
Americans With Disabilities Act, 8 Fair other health or genetic services that a language in the NPRM, which tracked
Empl. Prac. Man. (BNA) 405:7701, covered entity offers must be voluntary. the statutory language. GINA says that a
(Enforcement Guidance) Questions 15– The preamble to the proposed rule covered entity may only receive genetic
17 (July 27, 2000) available at http:// noted that, under the ADA, a wellness information related to a wellness
www.eeoc.gov/policy/docs/guidance- program that requires employees to program ‘‘in aggregate terms that do not
inquiries.html. answer disability-related inquiries and/ disclose the identity of specific
One commenter raised a concern or to submit to a medical examination [individuals],’’ see 42 U.S.C. 2000ff–
about proposed 1635.8(b)(1)(vi), which is voluntary if the program neither 1(b)(2)(D); 2000ff–2(b)(2)(D); 2000ff–
extended the inadvertent acquisition requires participation, nor penalizes 3(b)(2)(D); and 2000ff–4(b)(2)(D).
exception to a covered entity that learns employees for non-participation. However, we have reconsidered the
genetic information about an individual We received two comments asking position taken in the preamble to the
in response to an inquiry about the whether the written request and NPRM that a covered entity offering
individual’s general health, an inquiry authorization to participate in a health or genetic services will not
about whether the individual has any wellness program could be provided comply with 1635.8(b)(2) if aggregate
current disease, disorder, or electronically. See Comments of AHIP information disclosed to the covered
pathological condition, or an inquiry and Kelly Hart & Hallman (KHH). We entity makes the genetic information of
about the general health of an think this is permissible and have individuals readily identifiable. A
individual’s family member. See revised the final rule accordingly. We provider of health or genetic services
Comment of APA. APA asked that this do not think it is necessary to provide will likely be unaware of facts known to
exception be limited to requests in the final rule specific standards for an a covered entity that would make
‘‘permitted by Federal, State or local electronic consent and authorization. identification of specific individuals
law.’’ Rather than add any limiting The particular format chosen, however, readily identifiable from aggregate
language, we have decided to eliminate must be functionally equivalent to what information. Likewise, a covered entity
this subsection altogether, as it merely would be required in a written may not know that the identity of
reiterates the examples spelled out in authorization, in terms of content and specific individuals from aggregate
1635.8(b)(1)(ii)(B) (formerly form. For example, because written information will be readily identifiable
1635.8(b)(1)(ii) in the proposed rule). authorization is a prerequisite to the until after it receives the information.
Finally, one commenter asked that the acquisition of genetic information as We do not believe that Congress
inadvertent acquisition exception be part of health or genetic services offered intended to impose liability on covered
extended to acquisition of genetic by a covered entity, such as a voluntary entities who receive aggregate
information by a self-insured employer wellness program, a covered entity information about health or genetic
making health insurance billing could not utilize an on-line form that services under such circumstances.
determinations in its capacity as an first requires an individual to input Therefore, the Commission here clarifies
insurer. See Comment of Navigenics. It family medical history and then asks the that GINA is not violated if the provider
is not necessary to extend the exception individual to indicate his or her of health or genetic services gives
to cover these circumstances because, acceptance of the terms of an information to a covered entity in
when a self-insured employer is acting authorization. Instead, a potential aggregate terms that, for reasons outside
in its capacity as an insurer, its actions participant in the health or genetic the control of the provider or the
are regulated by Title I of GINA, not services being offered must first be covered entity (such as the small
Title II. Title I of GINA has specific presented with an electronic number of participants), makes the
rules about acquiring genetic authorization that describes the request genetic information of a particular
information for insurance payment in terms reasonably likely to be individual readily identifiable with no
purposes. See 42 U.S.C. 1182(c)(3); 42 understood by the individual, the effort on the covered entity’s part. On
U.S.C. 300gg–1(c)(3); 26 U.S.C. purposes for which it will be used, and the other hand, efforts undertaken by a
9802(c)(3). the safeguards in place for assuring its covered entity to link genetic
Health or Genetic Services: GINA confidentiality, before any genetic information provided in the aggregate to
permits covered entities to acquire information (such as family medical a particular employee will violate GINA.
genetic information where health or history) can be provided. We received numerous comments in
genetic services are offered by the The proposed regulation stated that response to a question we asked in the
employer, including such services individually identifiable information preamble to the proposed rule
offered as part of a wellness program, if may be provided only to the individual concerning when a wellness program
the covered entity meets specific from whom it was obtained and that that includes a request for genetic
requirements. The proposed regulation covered entities are entitled only to information should be considered
listed the specific requirements in the receive information in aggregate terms voluntary. Specifically, we wanted to
wwoods2 on DSK1DXX6B1PROD with RULES3

statute as prerequisites to the that do not disclose the identity of know the level of inducement, if any,
acquisition of genetic information when specific individuals. Some comments that a covered entity could offer to
offering health or genetic services: the objected to a statement in the preamble promote participation in a wellness
individual provides prior knowing, to the proposed rule that a covered program. See 74 FR 9056, 9062 (March
voluntary, and written authorization, entity that receives ‘‘aggregate’’ 2, 2009). From the many comments we
meaning that the covered entity uses an information may still violate GINA received emphasizing the potential cost
authorization form that is written in where the small number of participants, savings and benefits for employee

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00012 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68923

health that could be brought about those allowed under the ‘‘twenty percent violation of Title II of GINA, however,
through wellness programs, four rule’’ would violate the standard for covered entities who offer such
approaches to voluntariness emerged. voluntariness under the ADA and GINA. programs and inducements to
One approach suggested that we use See Comments of AHIP, IPMA/IMLA, individuals based on their voluntarily
regulations promulgated pursuant to KHH, NFIB, and Staywell Health provided genetic information must also
HIPAA, which define maximum levels Management. offer the programs and inducements to
of inducements employers may offer to A third approach merely asked that individuals with current health
employees who participate in, or we allow employers to offer conditions and/or to individuals whose
achieve certain health outcomes as a inducements to promote employee lifestyle choices put them at risk of
result of participating in, wellness participation in wellness programs, but acquiring a condition.
programs. See Comments of American did not indicate whether inducements Recognizing that employers that
Benefits Council (ABC), Chamber/ should be limited in any way. See sponsor group health plans (including
SHRM, DMAA: The Care Continuum Comments of EEAC and Navigenics. self-insured group health plans) are
Alliance (DMAA), Dorsey and Whitney, Finally, several comments urged that required to comply with Title II of GINA
LLP, Healthways, National Business covered entities not be allowed to offer when operating as employers, and that
Group on Health (NBGH), and United any monetary inducements to promote their plans are required to comply with
Healthcare. Under the HIPAA participation in wellness programs that Title I of GINA, the Commission wishes
regulations, employers may offer include the collection of genetic to provide examples of how Titles I and
financial inducements of any size to information, including family medical II allow employers and plans to use
encourage participation in wellness history. See Comments of ACLU, AMA, financial incentives to promote
programs, and may offer inducements of GPPC and World Privacy Forum. employee wellness and healthy
up to a specified percentage of the cost Balancing the potential benefits of lifestyles.14 The Commission notes that
of group health insurance coverage for health and genetic services offered to providing financial incentives in
an individual or an individual and employees on a voluntary basis, compliance with these GINA Title II
family to participants who achieve including wellness programs, with the regulations does not relieve covered
specific health outcomes. See 26 CFR need to construe exceptions to the entities of their responsibility to comply
54.9802–1(f)(1), 29 CFR 2590.702(f)(1), prohibition of acquisition of genetic with other GINA requirements under
and 45 CFR 146.121(f)(1) (explaining information in a manner appropriately Title I, with other civil rights laws, such
that a wellness program does not violate tailored to their specific purposes, we as the ADA, and with other applicable
HIPAA’s nondiscrimination have concluded that covered entities laws and regulations. See
requirements if none of the conditions may offer certain kinds of financial 1635.8(b)(2)(iv) (indicating that the ADA
for obtaining a reward are based on an inducements to encourage participation requires ‘‘reasonable accommodations’’
individual satisfying a certain health in health or genetic services under to enable individuals with disabilities to
standard, as long as participation in the certain circumstances, but they may not participate fully in wellness programs,
program is offered to all similarly offer an inducement for individuals to and that the HIPAA nondiscrimination
situated individuals). See also 26 CFR provide genetic information. As a result, rules require plans and issuers to
54.9802–1(f)(2), 29 CFR 2590.702 (f)(2), the Commission concludes that it would provide an individual with a
and 45 CFR 146.121(f)(2) (providing not violate Title II of GINA for a covered ‘‘reasonable alternative’’ (or waiver of
limits on financial inducements when entity to offer individuals an the otherwise applicable standard),
rewards are conditioned on achieving inducement for completing a health risk when it is unreasonably difficult due to
certain health outcomes).12 assessment that includes questions a medical condition to satisfy or
about family medical history or other medically inadvisable to attempt to
Other comments appeared to suggest
genetic information, as long as the satisfy the otherwise applicable
a combination of the approach taken in
covered entity specifically identifies standard, 26 CFR 54.9802–1(f)(2), 29
the HIPAA regulations and the rule
those questions and makes clear, in CFR 2590.702(f)(2), and 45 CFR
under the ADA as articulated by EEOC
language reasonably likely to be 146.121(f)(2)) and 1635.8(b)(2)(v)
in its Enforcement Guidance on
understood by those completing the (noting that wellness programs that
Disability-Related Inquiries and Medical
health risk assessment, that the constitute group health plans may have
Examinations of Employees Under the
individual need not answer the to comply with Title I of GINA, among
Americans with Disabilities Act (July 27,
2000) (‘‘Enforcement Guidance’’). As we questions that request genetic
9802 of the Internal Revenue Code of 1986, 26
understand this suggestion, the standard information in order to receive the U.S.C. 9802, section 702 of the Employee
for determining whether a wellness inducement. The regulation provides Retirement Income Security Act of 1974 (ERISA), 29
program is voluntary under the ADA— two examples to illustrate this approach U.S.C. 1182, or section 2705 of the Public Health
that a covered entity neither requires to health risk assessments. Service Act (i.e., Title I of GINA). Regulations
issued under these statutes impose special
participation nor penalizes individuals We also believe that Title II allows requirements on wellness programs that collect
for non-participation—should apply to covered entities to offer financial genetic information. Moreover, wellness programs
GINA as well. See Enforcement inducements for participation in disease that condition rewards on an individual satisfying
Guidance at Question 22. Any management programs or other a standard related to a health factor must meet
additional requirements. See 26 CFR 54.9802–1(f),
inducement that complied with the programs that encourage healthy 29 CFR 2590.702(f), and 45 CFR 146.121(f).
HIPAA ‘‘twenty percent rule’’ should be lifestyles, such as programs that provide 14 Whether an employer or other covered entity

deemed neither a penalty for non- coaching to employees attempting to that sponsors a group health plan chooses to
wwoods2 on DSK1DXX6B1PROD with RULES3

participation nor a requirement to meet particular health goals (e.g., provide benefits through self-insurance or through
achieving a certain weight, cholesterol a policy, certificate, or contract of insurance does
participate. Inducements greater than not affect the applicability of GINA Titles I and II.
level, or blood pressure).13 To avoid a See 29 CFR 1635.11(b)(2) (discussing the
12 The 20 percent threshold described in the relationship of GINA Titles I and II). The above
HIPAA nondiscrimination rules will increase to 30 13 A wellness program that provides (directly, examples of actions permissible under both titles
percent beginning in 2014 under statutory changes through reimbursement, or otherwise) medical care are therefore helpful to all employers who offer
made under the Patient Protection and Affordable (including genetic counseling) may constitute a health coverage to employees, whether through self-
Care Act, Public Law 111–148. group health plan required to comply with section insured or insured plans.

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00013 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
68924 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

other laws). While the GINA Title II example, when completing the Commission reads this exception as
regulations and the interim rules issued certification form required by section applying to all genetic information, not
on October 7, 2009 to implement Title 103 of the FMLA). A covered entity that just to family medical history. For
I (29 CFR 2590.702–1; 45 CFR 146.122, receives family medical history under example, an employer would not violate
26 CFR 54.9802–3T) each prohibit the these circumstances would not violate GINA if it learned that an employee had
use of financial inducements to collect GINA. This exception is needed the breast cancer gene by reading a
genetic information, they both permit because, unlike the situations discussed newspaper article profiling several
covered entities or group health plans under the inadvertent acquisition women living with the knowledge that
(including self-insured plans) to: exception, the receipt of genetic they have the gene.
• Provide bifurcated health risk information in these circumstances is The statute identifies newspapers,
assessments (HRAs), under which not inadvertent. By asking the employee magazines, periodicals, and books as
financial incentives permitted under the to provide the information required by potential sources of genetic information.
applicable title may be used to the FMLA certification form or similar The proposed regulation added to that
encourage individuals to complete the state or local laws when seeking leave list information obtained through
HRA, if the section of the questionnaire to care for a seriously ill family member, electronic media, such as the Internet,
seeking genetic information (e.g. family a covered entity is requesting family television, and movies. The exception
medical history) includes a notice that medical history from the employee. does not include genetic information
completing that portion is optional and One commenter expressed concern contained in medical databases or court
that the reward will be provided that businesses that are not covered by records. Research databases available to
whether that portion is completed or the FMLA or similar state or local laws, scientists on a restricted basis, such as
not; but who have company policies databases that NIH maintains for the
• Use information collected through allowing the use of leave to care for scientific community, would not be
such bifurcated HRAs, including seriously ill family members, would not considered ‘‘commercially and publicly
voluntarily provided genetic be covered by this exception. See available.’’
information indicating that an Comment of the Small Business We received numerous comments in
individual may be at risk for a disease, Administration (SBA). We agree that it response to our queries as to whether
to target advertising materials or was unclear in the proposed rule the additional sources noted in the
otherwise solicit voluntary participation whether acquisition of genetic proposed regulation should remain part
in a disease management or prevention information in such circumstances of the final regulation and whether there
program, provided that such a program would be covered by the exception and are sources similar in kind to those
is also available to individuals who do therefore provide this clarification: This identified in the statute that may
not provide genetic information as part exception applies to an employer that is contain genetic information and should
of the HRA (that is, the program is not not covered by the FMLA or similar be included either in the group of
limited only to individuals who state or local laws but that has a policy excepted sources or the group of
complete the portion of the HRA that allowing for the use of leave to care for prohibited sources, such as personal
requests genetic information); ill family members, as long as that Web sites or social networking sites. In
• Provide financial incentives policy is applied evenhandedly by general, civil rights groups and groups
permitted under the appropriate title to requiring all employees seeking leave to promoting genetic research, as well as
individuals to participate in certain provide documentation about the health others, indicated that excepted sources
disease management or prevention condition of the relevant family should be limited to widely available
programs. The incentives to participate member.15 media with no heightened risk for
in such programs must also be available Of course, family medical history containing genetic information,
to individuals who qualify for the received from individuals requesting providing a variety of arguments in
program but have not volunteered leave pursuant to the FMLA, similar support of this position. See Comments
genetic information through an HRA. state or local laws, or company policies, of ACLU, APA, CGF, FDIC, GPPC,
Under the Title II regulation, covered is still subject to GINA’s confidentiality Genetic Alliance, LCCR, Members of
entities may contract with a third party requirements and must be placed in a PGEP, and World Privacy Forum.
to operate a wellness program or to separate medical file and treated as a Several of these groups also noted that
provide other health or genetic services, confidential medical record, as more employers who access commercially
or may provide such programs and fully described below. and publicly available materials with a
services through an in-house health Commercially and Publicly Available specific intent of searching for genetic
services office, as long as individually Information: Fourth, GINA provides an information should not be permitted to
identifiable genetic information is exception for the purchase of take advantage of the exception. See
accessible only to the individual and the commercially and publicly available Comments of CGF, FDIC, GPPC, Genetic
health care provider involved in materials that may include family Alliance, LCCR and World Privacy
providing such services. Covered medical history. As with the exception Forum. Employers and employer
entities must ensure that individually applicable to the inadvertent acquisition groups, on the other hand, maintained
identifiable genetic information is not of family medical history, the that media formats such as personal web
accessible to managers, supervisors, or pages, social networking sites, and blogs
others who make employment 15 Although we also received a comment
should be part of the exception arguing,
decisions, or to anyone else in the requesting that the exception be limited to the among other things, that such sources
workplace. acquisition of genetic information directly relevant
are publicly available and that
wwoods2 on DSK1DXX6B1PROD with RULES3

to the leave request—e.g., if the request is to care


Family and Medical Leave Act: Third, for the employee’s daughter, only information employers have legitimate reasons to
GINA recognizes that individuals received about the daughter’s condition would be access them. See Comments of
requesting leave to care for a seriously covered by the exception—we find that such a Chamber/SHRM, EEAC, Navigenics,
ill family member under the Family and requirement is beyond the scope of our enforcement
authority as it would be an attempt to limit the NFIB, SBA and TOC.16
Medical Leave Act (FMLA) or similar actions of the employee’s health care provider who
state or local law will be required to completes the certification form. See Comment of 16 Chamber/SHRM reiterated its comment that a

provide family medical history (for World Privacy Foundation. covered entity must undertake an intentional act of

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00014 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68925

We conclude that a more detailed acquisition of family medical history.’’). monitoring is not specifically required
explanation of this exception is For example, an employer who acquires by federal or state law or regulation,
necessary. First, we agree that media genetic information by conducting an must obtain an individual’s prior
sources with limited access should not Internet search for the name of an knowing, written, and voluntary
be considered commercially and employee and a particular genetic authorization. Second, the regulation
publicly available. Thus, if a media marker will not be protected by this describes the type of authorization form
source requires permission for access exception, even if the information the the employer must provide in order to
from a specific individual, as opposed employer ultimately obtained was from ensure that an individual’s
to a media source that simply requires a source that is commercially and authorization is knowing and voluntary.
users to obtain a username and/or publicly available. Conversely, an The authorization form must be written
password, or if access is conditioned on employer who inadvertently acquires in a way that is reasonably likely to be
membership in a particular group (e.g., genetic information while conducting understood by the person from whom
a professional organization), the an Internet search of an employee the information is being sought, must
acquisition of genetic information without reference to a genetic marker describe the type of genetic information
through that source will not be will be protected by this exception. that will be obtained and the general
protected by this exception. For Third, we have concluded that the purposes for which it will be used, and
example, many Facebook, Linked In, My exception does not apply to the must describe the limitations on
Space profiles, and other social acquisition of genetic information disclosure of the genetic information.
networking platforms require through a media source, whether or not Third, all monitoring must comply with
permission from the creator of the it is commercially and publicly all applicable provisions of the law and
profile to gain access to anything available, if the covered entity is likely implementing regulations, including
beyond basic information such as name to acquire genetic information by regulations promulgated pursuant to the
and profession and therefore would not accessing that source. Thus, a covered Occupational Safety and Health Act of
be considered commercially and entity that acquires genetic information 1970 (29 U.S.C. 651 et seq.), the Federal
publicly available, although the after accessing a Web site that focuses Mine Safety and Health Act of 1977 (30
exception at 1635.8(b)(1) would still on issues such as genetic testing of U.S.C. 801 et seq.), and the Atomic
apply to any genetic information individuals or a commercial database Energy Act of 1954 (42 U.S.C. 2011 et
inadvertently obtained from such containing individually identifiable seq.).
sources. On the other hand, most health information 17 will not be able to Whether or not the monitoring is
personal Web sites and blogs are not so take advantage of this exception. undertaken pursuant to federal or state
limited, but may simply require users to Finally, in response to comments from law, GINA requires that the individual
obtain a username and/or password, and some employer groups that human receive results of the monitoring and
therefore would be considered resource professionals and other that the covered entity receive
commercially and publicly available. Of employers may access various media information only in aggregate terms that
course, there are profiles or portions sources for personal reasons and not in do not disclose the identity of specific
thereof on social networking sites that their capacity as covered entities, we individuals. As is the case with health
do not require permission to access, and clarify that the requirements and or genetic services offered by a covered
there may be situations in which access prohibitions of GINA do not apply to entity on a voluntary basis, we have
to a social networking site is granted acquisitions of genetic information concluded that there is no violation of
routinely, so that access cannot be said outside the employment context. See GINA if a covered entity receives
to be limited. There are also Web sites Comments of NFIB and Navigenics. information only in aggregate terms, but
and blogs that do limit access. The In response to one comment we is able to identify the genetic
determining factor, then, in deciding received, we further clarify that genetic information of specific individuals for
whether a media source is commercially information about an individual reasons outside the covered entity’s
and publicly available is whether access acquired through any media source, control and with no effort on its part
requires permission of an individual or including one that is commercially and (e.g., because of the small number of
is limited to individuals in a particular publicly available or a source accessed employees involved in the monitoring).
group, not whether the source is outside the employment context, may We have revised the language in the
categorized as a social networking site, final regulation to mirror the statutory
not be used to discriminate in
personal Web site, or blog. language.
employment decision-making and may
Second, we agree that the exception Several commenters mentioned the
not be disclosed in violation of Title II’s need for a provision in the final
does not apply to genetic information
confidentiality provisions. See regulation that protects workers who
acquired by covered entities that access
Comment of National Counsel of EEOC refuse to participate in genetic
commercially and publicly available
Locals no. 216, American Federation of monitoring that is not required by law.
sources with the intent of obtaining
Government Employees, AFL–CIO See Comments of ACLU, CGF, Genetic
genetic information. This exception was
(AFGE). Alliance, GPPC and LCCR. These
intended to protect from liability a
Genetic Monitoring: The statute also commenters also requested that the final
covered entity that inadvertently obtains
permits a covered entity to engage in the regulation describe what actions a
genetic information and not a covered
genetic monitoring of the biological covered entity may legitimately take in
entity that is actively searching for
effects of toxic substances in the response to such a refusal. Id. We agree
genetic information. See S. Rep. 110–48
workplace, as long as that monitoring with these groups that GINA prohibits a
at 30 (‘‘The fourth exception, like the
wwoods2 on DSK1DXX6B1PROD with RULES3

meets certain requirements. First, a covered entity from retaliating or


first, relates to the inadvertent
covered entity must provide written otherwise discriminating against an
requesting, requiring or purchasing genetic
notice of the monitoring and, where the employee who refuses to participate in
information to violate the prohibition on genetic monitoring that is not
acquisition and argued that accessing a social 17 For example, one commenter provided several

networking site that does not require payment is lists of identifiable individuals with diabetes
specifically required by law. An
therefore outside the scope of Title II. As explained available for sale on the Internet. See Comment of individual who refuses to participate in
above, we reject this interpretation of the statute. World Privacy Forum. a voluntary genetic monitoring program

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00015 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
68926 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

should be informed of the potential disorder, or pathological condition examination on its behalf that the
dangers (e.g., the consequences that should not be considered genetic covered entity does not want to receive
might result if the effects of certain information (i.e. family medical history) genetic information acquired as part of
toxins in the workplace are not about a family member working for the the examination. The final rule says that
identified), but the covered entity is same employer. See Comment of the covered entity must tell the health
prohibited from taking any adverse Chamber/SHRM. We decline to take this care professional not to collect genetic
action, as that term is understood under position in the final rule, because we information as part of a medical
Title VII of the Civil Rights Act of 1964 believe that the information would be examination intended to determine the
and other civil rights laws, against the family medical history that an employer ability to perform a job, and must take
individual. could not use to discriminate against, or additional reasonable measures within
DNA Testing for Law Enforcement or disclose with respect to, the second its control if it learns that genetic
Human Remains Identification employee. We agree, however, that a information is being requested or
Purposes: Finally, sections 202(b), request for information about whether required. This could include no longer
covering employers, and 205(b), an individual has a manifested disease, using the services of a health care
covering apprenticeship or other disorder, or pathological condition does professional who continues to request or
training programs, include a sixth not violate GINA simply because a require genetic information during
exception for employers that engage in family member of the individual to medical examinations after being
DNA testing for law enforcement whom the request was made works for informed not to do so. Unlike the
purposes as a forensic lab or for the same employer, is a member of the warning described in 1635.8(b)(1),
purposes of human remains same labor organization, or is which may not be necessary if a covered
identification. GINA provides that these participating in the same apprenticeship entity can show that it could not have
entities may request or require genetic program as the person from whom the known it would receive genetic
information of such employer’s information was requested. We have information in response to a lawful
employees, apprentices, or trainees, ‘‘but modified the final rule to reflect this request for medical documentation, the
only to the extent that such genetic more limited point. warning provided for in 1635.8(d) is
information is used for analysis of DNA Section 1635.8(c)(2) addresses a required, because any time an employer
identification markers for quality related issue that may arise when an sends an applicant or employee for a
control to detect sample contamination.’’ individual’s family member who, medical examination, the employer
42 U.S.C. 2000ff–1(b)(6) and 2000ff– although not an employee of the same knows or should know that genetic
4(b)(6). The genetic information may be employer, a member of the same labor information is likely to be requested. We
maintained and disclosed in a manner organization, or a participant in the note, however, that family medical
consistent with this limited use. This is same apprenticeship program as the history and other genetic information
a very limited exception and, if the individual, nevertheless receives health may be obtained as part of health or
analysis is properly conducted, an or genetic services offered by a covered genetic services provided by the
employer or training program would not entity as permitted under 1635.8(b)(2). employer (see 29 CFR 1635.8(b)(2)), and
obtain health-related genetic The collection of information about the that Title II of GINA does not apply at
information. Several comments, while manifested disease or disorder of a all to medical examinations conducted
expressing general agreement with family member in the course of for the purpose of diagnosis and
EEOC’s position, requested that the final providing health or genetic services to treatment that are unrelated to
regulation make clear that genetic the family member is not an unlawful
employment (e.g., where an employee
information covered by this exception acquisition of genetic information about
seeks health services from the same
must be destroyed after a designated the individual.
hospital where he or she works). See
time period and that the samples and
Section 1635.8(d) 1635.1(b)(1).
results be used solely for quality control
and not be entered into any law We received several comments The preamble to the proposed rule
enforcement database. See Comments of concerning the extent to which health suggested that there would never be
CGF, Genetic Alliance, and GPPC. We care professionals may request genetic situations in which genetic information
find that it is unnecessary to add any information (particularly family medical (including family medical history)
further limitations to those set forth in history) as part of a lawful medical would be needed as part of a medical
the statute and the proposed regulation. examination (e.g., a post-offer exam or examination conducted to assess an
Both make clear that this is a very fitness for duty exam) to determine individual’s ability to perform a job.
limited exception, allowing only for the whether an individual has a manifested One federal agency asked whether the
use of genetic information for analysis disease, disorder, or pathological final rule would include an exception
of DNA identification markers for condition. A number of comments allowing an employer or other covered
quality control and to detect sample suggested that the final rule should not entity to collect family medical history
contamination, and not for any other necessarily limit the scope of the (e.g., questions about the prevalence of
law enforcement purpose. Rather than inquiries a health care professional may a psychiatric disability in family
specifying in the regulation how such make, but should ensure that any members of an individual) as part of the
information should be used, we believe genetic information collected as part of process of determining whether to grant
it is sufficient to state, as the final rule the examination is not shared with the or deny a security clearance. See
does, that the information may be used employer. See Comments of AMA, Comments of United States Customs
in accordance with the purpose for Chamber/SHRM, EEAC and IPMA; see and Immigration Services. Neither the
wwoods2 on DSK1DXX6B1PROD with RULES3

which it was acquired. also Comments of United States plain language of Title II, which
Customs and Immigration Service enumerates very specific exceptions to
Section 1635.8(c) (requesting clarification on this point). the rule prohibiting acquisition of
We have added a new provision to We do not think it is sufficient for an genetic information, nor GINA’s
1635.8. Subsection (c)(1) responds to a employer or other covered entity merely legislative history references such an
comment that said that information to indicate to the health care exception; therefore, the Commission
about an employee’s manifested disease, professional conducting a medical declines to include one in the final rule.

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00016 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68927

In response to comments from some Section 1635.9(a) Treatment of Genetic disclosing those files, we would
employers that genetic information may Information anticipate that covered entities who
be needed to make a diagnosis of a Under GINA, covered entities are have been complying with the ADA will
manifested disease, disorder, or required to treat genetic information in have very few personnel files that
pathological condition, we considered their possession the same way they treat contain genetic information.
adding a very narrow exception to the medical information generally. They We received one comment
prohibition on acquiring genetic must keep the information confidential questioning what an employer should
information to allow a covered entity or and, if the information is in writing, do if it is aware that employees are
health care professional acting on the must keep it apart from other personnel discussing genetic information of co-
covered entity’s behalf to request information in separate medical files.18 workers with other employees. See
genetic information as part of a medical Congress made express the requirement Comment of Navigenics. We do not
examination where doing so is that covered entities keep genetic think this has been a significant
necessary to determine whether an information confidential by using the problem under the ADA, which has a
individual has a particular manifested confidentiality regime required by the similar confidentiality rule pertaining to
disease, disorder, or pathological ADA generally for medical records. H.R. employee medical information in
condition and where information about Rep. 110–28, part I, at 39. GINA does general, and therefore do not think that
the particular disease, disorder, or not require that covered entities many charges will be filed alleging that
pathological condition, as opposed to its maintain a separate medical file for a covered entity violated GINA by
signs and symptoms, is necessary to genetic information. Genetic allowing co-workers to share genetic
evaluate an individual’s ability to information may be kept in the same file information about another individual.
perform a particular job. See Comments as medical information subject to the However, we note that the analysis of an
of AHIP, Chamber/SRHM, EEAC and ADA. employer’s responsibility to prevent
SBA. We decided against creating this In response to questions raised by harassment by co-workers is
extra-statutory exception, however, commenters, we note that although instructive—an employer is liable for
because neither the commenters that genetic information placed in personnel harassment of an employee by co-
raised this concern nor the experts with files prior to the effective date of GINA workers if it knew or should have
whom we consulted were able to Title II need not be removed and an known of the misconduct, unless it can
provide an example that fits within it. employer will not be liable under GINA show that it took immediate and
Although there may be cases where a for the mere existence of the appropriate corrective action. See 29
manifested disease, disorder, or information in the file, disclosing such CFR 1604.11(d). We believe a similar
pathological condition can only be information to a third party is standard would work well in the case of
positively diagnosed through use of prohibited. See Comments of EEAC and an employer’s responsibility to prevent
genetic information, there does not SBA. GINA’s prohibitions on use and individuals from discussing the genetic
appear to be a case in which the information of co-workers.
disclosure of genetic information apply
Chamber/SHRM requested that the
diagnosis, as opposed to the signs and to all genetic information that meets the
final regulation clarify that certain
symptoms, is necessary to evaluate an statutory definition, including genetic communications are exempt from
individual’s ability to perform a information acquired prior to the GINA’s confidentiality provisions, such
particular job. For example, although effective date of GINA. See Comments of as communications to a contractor
experts at the National Institutes of CGF, Genetic Alliance, and GPPC performing relevant business functions
Health noted that a genetic test may be (requesting clarification of this point). (e.g., storing medical information on
used to confirm a diagnosis of cystic We would not anticipate that removing behalf of an employer) or to attorneys
fibrosis based principally on the clinical genetic information in a personnel file for purposes of litigation or legal
analysis of the patient, the signs or acquired before GINA’s effective date in assessment. This clarification is not
symptoms of cystic fibrosis (including, response to a request to disclose the file necessary. First, it is apparent that a
for example, frequent lung infections, would impose a significant burden on covered entity’s attorney or a business
sinusitis, bronchitis and pneumonia, covered entities. Most genetic with whom it has contracted to store
and nasal polyps, among others) would information is medical information that medical information on its behalf is an
be sufficient, regardless of the specific has been subject to the ADA’s agent of the covered entity and would
disease, disorder, or pathological confidentiality requirements since 1992 therefore be permitted access to relevant
condition that may be causing them, to (with respect to employers with 25 or genetic information. Second, as noted
assess an individual’s ability to do a job. more employees) or 1994 (with respect above, GINA uses the confidentiality
Moreover, in the case of cystic fibrosis, to employers with 15 to 24 employees). regime required by the ADA generally
it is extremely unlikely that an Consequently, although all covered for medical records. This regime does
individual seeking employment would entities must remove genetic not include specific exceptions for
be unaware of his or her diagnosis. information from personnel files prior to communications to attorneys for the
Because we have no information purposes of litigation or to contractors
supporting the need for this type of 18 Genetic information that a covered entity
performing relevant business functions;
exception, we decided not to add to the receives verbally and does not reduce to writing
must still be kept confidential, except to the extent yet we have not seen any charges
exceptions specifically described in the that GINA permits disclosure. As noted in the challenging these types of
statute. regulation at 1635.9(a)(3), a covered entity need not communications.
reduce to writing genetic information that it As noted above, a covered entity does
Section 1635.9 Confidentiality
wwoods2 on DSK1DXX6B1PROD with RULES3

receives orally. Although one commenter requested


that this language be altered to indicate that covered
not violate GINA when it acquires
GINA section 206 addresses entities should not reduce genetic information that genetic information through sources that
confidentiality of genetic information it receives orally to writing, we have decided to are publicly and commercially
generally, establishes permitted maintain the existing language. See Comment of available, as long as it does not research
DLRC. This language was inserted in the proposed
disclosures, and describes the rule to respond to concerns that GINA required
those sources with the intent of
relationship between GINA and HIPAA. employers to reduce to writing any genetic acquiring genetic information or access
Each of these items is discussed below. information received. sources that are likely to include genetic

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00017 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
68928 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

information. For example, an employer Moreover, the language of the be construed as applying to the use or
that purchased a newspaper with an regulation, taken from the statute, notes disclosure of genetic information that is
obituary about a family member of an that if the court order was secured protected health information subject to
employee indicating that the employee’s without the knowledge of the employee the HIPAA Privacy Rule. See discussion
relative died of a disease or disorder or member to whom the information of Section 1635.11(d), infra, for an
that has a genetic component would not refers, the covered entity must inform example of the interaction under GINA
violate GINA. Similarly, a labor the employee or member of the court between the HIPAA Privacy Rule and
organization may lawfully acquire a order and the information that was this regulation.
magazine or periodical with an article disclosed. Because the covered entity
Section 1635.10 Enforcement and
about a member that includes family may not know whether the employee or
Remedies
medical history about the member’s member is aware of the court order, it
parent, sibling, or child. In neither should inform the employee or member In crafting GINA’s enforcement and
instance, nor in any similar instance of the court order and the disclosed remedies section, Congress recognized
where a covered entity acquires family information unless it knows that the the advisability of using the existing
medical history through sources that are employee or member already has this mechanisms in place for redress of other
publicly and commercially available, information. This exception does not forms of employment discrimination. In
must the covered entity place the allow disclosures in other particular, the Senate noted that this
information into a confidential medical circumstances during litigation, such as section intends to take ‘‘advantage of the
file. Moreover, inasmuch as one of in response to discovery requests or expertise and process of the EEOC.’’ S.
GINA’s purposes is the protection from subpoenas that are not governed by an Rep. No. 110–48, at 31 & n.17. In this
disclosure of otherwise private genetic order specifying that genetic regard, GINA and the final regulation
information, disclosure of genetic information must be disclosed. Thus, a provide the following:
information obtained through sources covered entity’s refusal to provide • The enforcement mechanism
that are commercially and publicly genetic information in response to a applicable and remedies available to
available does not violate the Act. discovery order, subpoena, or court employees and others covered by Title
However, a covered entity may not use order that does not specify that genetic VII of the Civil Rights Act of 1964 apply
family medical history to make information must be disclosed is to GINA as well.19 The statute
employment decisions, even if the consistent with the requirements of references sections 705–707, 709–711,
information was acquired through GINA. and 717 of Title VII, 42 U.S.C. 2000e–
commercially and publicly available The fourth exception permits 4, et seq. The Commission notes that its
sources. disclosure of relevant genetic implementing regulations found at 29
information to government officials CFR parts 1601 (procedural regulations),
Section 1635.9(b) Exceptions to investigating compliance with the 1602 (recordkeeping and reporting
Limitations on Disclosure statute. The fifth exception permits requirements under Title VII and the
GINA permits disclosure of genetic disclosure consistent with the ADA), and 1614 (federal sector
information in limited circumstances. requirements of the FMLA or similar employees) apply here as well.
First, a covered entity may disclose state or local leave law. For example, an • The procedures applicable and
genetic information to the individual to employee’s supervisor who receives a remedies available to employees
whom it relates, if the individual request for FMLA leave from an covered by sections 302 and 304 of the
requests disclosure in writing. Second, employee who wants to care for a child Government Employee Rights Act of
the section states that genetic with a serious health condition may 1991, 42 U.S.C. 2000e–16(b) & (c)
information may be provided to an forward this request to persons with a (GERA) apply under GINA.20 EEOC
occupational or other health researcher need to know the information because regulations applicable to GERA are
‘‘if the research is being conducted in of responsibilities relating to the found at 29 CFR part 1603.
compliance with the regulations under’’ handling of FMLA requests. Finally, the • The procedures applicable and
45 CFR part 46 (regulating research sixth exception permits disclosure of remedies available to employees
involving human subjects). One family medical history to federal, state, covered by 3 U.S.C. 401 et seq. are set
commenter requested that this type of or local public health officials in forth in 3 U.S.C. 451–454.21 These
disclosure only be permitted if connection with a contagious disease
participation in the research is that presents an imminent hazard of 19 As defined by section 701 of the Civil Rights

voluntary and the information obtained death or life-threatening illness. The Act of 1964, 42 U.S.C. 2000e, an employee is an
is not used for secondary research individual employed by a person engaged in an
statute requires the covered entity to industry affecting commerce who has fifteen or
purposes. See Comment of ACLU. The notify the employee of any release of a more employees for each working day in each of
requirements of 45 CFR part 46 itself, family member’s medical history twenty or more calendar weeks in the current or
however, include obtaining the information when undertaken for this preceding calendar year and any agent of such a
informed consent of research person.
purpose. 20 As defined by section 304(a) of GERA, 42
participants, which involves fully U.S.C. 2000e–16c(a), an employee is a person
informing participants of the purposes Section 1635.9(c) Relationship to
chosen or appointed by an individual elected to
and risks of the research, as well as the HIPAA Privacy Regulations public office by a State or political subdivision of
extent to which confidentiality of GINA section 206(c) provides that the a State to serve as part of the personal staff of the
provisions of Title II of GINA are not elected official, to serve the elected official on a
identifying records will be maintained. policy-making level, or to serve the elected official
See 45 CFR 46.116. We need not adopt intended to apply to uses and as the immediate advisor on the exercise of the
wwoods2 on DSK1DXX6B1PROD with RULES3

further safeguards in these disclosures of health information elected official’s constitutional or legal powers.
circumstances. governed by the HIPAA Privacy Rule. 21 As defined by, and subject to the limitations in,

The third exception permits Accordingly, and consistent with the section 2(a) of the Presidential and Executive Office
disclosure in compliance with a court general rule of construction Accountability Act, 3 U.S.C. 411(c), these
employees include any employee of the executive
order. It provides that the disclosure of implementing this statutory provision at branch not otherwise covered by section 717 of the
genetic information must be carefully 1635.11(d), this rule provides at Civil Rights Act of 1964, 42 U.S.C. 2000e–16,
tailored to the terms of the order. 1635.9(c) that nothing in 1635.9 should section 15 of the Age Discrimination in

VerDate Mar<15>2010 18:10 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00018 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68929

sections provide for counseling and Section 1635.11(a) Relationship to of diagnosis and treatment that is
mediation of employment Other Laws Generally wholly unrelated to employment (e.g.,
discrimination allegations and the The subsection first addresses the where an employee seeks health
formal process of complaints before the relationship of Title II of GINA to other services from the hospital where he or
Commission using the same federal, state, local, and tribal laws she works).
administrative process generally Other provisions in this section
governing genetic discrimination, the
applicable to employees in the clarify that GINA does not (1) limit or
privacy of genetic information, and
Executive Branch of the Federal expand rights or obligations under
discrimination based on disability. Over
workers’ compensation laws; (2) limit or
government; that is, the process set forth 30 states have laws addressing genetic
expand the rights of federal agencies to
in 29 CFR part 1614. discrimination in employment. Some
conduct or support occupational or
Employees covered through the may be more stringent than GINA;
other health research conducted in
Congressional Accountability Act of others less so. GINA makes clear that it
accordance with the rules found in 45
1995 must use the procedures set forth does not preempt any other state or
CFR part 46; or (3) limit the statutory or
local law that provides equal or greater
in that statute. The Commission has no regulatory authority of the Occupational
protections than GINA from Safety and Health Administration or the
authority with respect to the
discrimination on the basis of genetic Mine Safety and Health Administration
enforcement of GINA as to employees information or improper access or
covered through this provision. or other workplace health and safety
disclosure of genetic information. laws and regulations. Another provision
The final regulation includes a Additionally, Title II of GINA does not addresses the exemption from GINA of
separate reference to the remedies limit the rights or protections under the Armed Forces Repository of
provisions applicable to GINA. Similar federal, state, local or tribal laws that Specimen Samples for the Identification
to other federal anti-discrimination provide greater privacy protection to of Remains.
laws, GINA provides for recovery of genetic information. The EEOC will The final provision in this subsection
pecuniary and non-pecuniary damages, provide information on our public Web makes clear that GINA does not require
including compensatory and punitive site about state and local laws that that a covered entity provide
damages. The statute’s incorporation by prohibit employment discrimination on individuals with any specific benefits or
reference of section 1977A of the the basis of genetic information. See specialized health coverage. A covered
Revised Statutes of the United States (42 Comment of SBA (requesting more entity does not have to offer health
U.S.C. 1981a) also imports the information about state and local laws benefits that relate to any specific
limitations on the recovery of addressing genetic information). genetic disease or disorder. GINA
Similarly, GINA does not affect an merely requires that the covered entity
compensatory damages for future
individual’s rights under the ADA, the not discriminate against those covered
pecuniary losses, emotional pain,
Rehabilitation Act, or state or local laws by the Act on the basis of genetic
suffering, etc., and punitive damages
that prohibit discrimination against information.
applicable generally in employment individuals based on disability. So, for
discrimination cases, depending on the example, an individual could challenge Section 1635.11(b) Relationship to
size of the employer. Punitive damages the disclosure of genetic information Other Federal Laws Governing Health
are not available in actions against the under the ADA where the information is Coverage
federal government, or against state or also considered medical information GINA section 209(a)(2)(B) includes
local government employers. subject to that law. Additionally, even four subsections that address the
Finally, at 1635.10(c) the regulation though information that an employee relationship between Title II and
notes that covered entities are required currently has a disease, such as cancer, requirements or prohibitions that are
to post notices in conspicuous places is not subject to GINA’s confidentiality subject to enforcement under other
describing GINA’s applicable provisions, such information would be federal statutes addressing health
provisions. The Commission issued a protected under the ADA, and an coverage. Section 209(a)(2)(B)(i) states
revised EEO poster that may be used for employer would be liable under that that nothing in Title II provides for
this purpose prior to GINA’s effective law for disclosing the information, enforcement of, or penalties for,
date (November 21, 2009). It is available unless a specific ADA exception violations of requirements or
to order or print on EEOC’s Web site at applied. prohibitions subject to enforcement
http://www1.eeoc.gov/employers/ GINA does limit, however, an under GINA Title I. The three following
poster.cfm. employer’s ability to obtain genetic subsections, sections 209(a)(2)(B)(ii)–
information as a part of a disability- (iv), state that nothing in Title II
Section 1635.11 Construction related inquiry or medical examination. provides for enforcement of, or penalties
For example, an employer will no for, any requirement or prohibition
GINA section 209 and this section of longer be able to obtain family medical subject to enforcement under various
the regulation set forth rules of history or conduct genetic tests of post- sections of ERISA, the Public Health
construction applicable to GINA’s offer job applicants, as it currently may Service Act, and the Internal Revenue
coverage and prohibitions. They address do under the ADA. We reiterate, Code, which generally prohibit a group
principally GINA’s relationship to other however, that family medical history health plan or health insurance issuer in
federal laws covering discrimination, and other genetic information may be the group market from:
health insurance, and other areas of acquired in connection with employer- • Imposing a preexisting condition
wwoods2 on DSK1DXX6B1PROD with RULES3

potential conflict. provided health or genetic services, exclusion based solely on genetic
including wellness programs, that are information, in the absence of a
Employment Act of 1967, 29 U.S.C. 633a, or section provided on a voluntary basis (see diagnosis of a condition;
501 of the Rehabilitation Act of 1973, 29 U.S.C. 791, 1635.8(b)(2)), and that Title II of GINA • Discriminating against individuals
whether appointed by the President or any other
appointing authority in the executive branch,
does not apply to genetic information in eligibility and continued eligibility
including an employee of the Executive Office of acquired as part of a medical for benefits based on genetic
the President. examination conducted for the purpose information; and

VerDate Mar<15>2010 18:10 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00019 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
68930 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

• Discriminating against individuals for group coverage in ERISA, the Public including any implementing regulations
in premium or contribution rates under Health Service Act, and the Internal thereunder. The section and the
the plan or coverage based on genetic Revenue Code. The firewall seeks to implementing regulation reiterate the
information, although such a plan or ensure that health plan or issuer limitations imposed on Title II in the
issuer may adjust premium rates for an provisions or actions are addressed and area of group health coverage.
employer based on the manifestation of remedied through ERISA, the Public
Section 1635.11(d) Relationship to
a disease or disorder of an individual Health Service Act, or the Internal
HIPAA Privacy Regulations
enrolled in the plan. Revenue Code, while actions taken by
The intent of this section is to create employers and other GINA Title II Final § 1635.11(d) implements section
a clear ‘‘firewall’’ between GINA Titles I entities are remedied through GINA 206(c) of GINA Title II by providing, as
and II so that health plan or issuer Title II. The regulation reiterates the a general rule of construction, that this
provisions or actions are addressed and language of the section, noting the regulation does not apply to protected
remedied through GINA Title I, ERISA, specific sections from ERISA, the Public health information subject to the HIPAA
the Public Health Service Act, or the Health Service Act, and the Internal Privacy Rule. Thus, entities subject to
Internal Revenue Code and not through Revenue Code that the section covers. the HIPAA Privacy Rule must continue
Title II and other employment Employers and other GINA Title II to apply the requirements of the HIPAA
discrimination procedures. covered entities, however, would Privacy Rule, and not the requirements
We received a variety of comments remain liable for any of their actions of GINA Title II and these implementing
requesting further clarification of the that violate Title II, even where those regulations, to genetic information that
firewall provision. Employer groups actions involve access to health benefits, is protected health information. For
argued that the final regulation should because such benefits are within the example, if a hospital subject to the
make very clear that the firewall is definition of compensation, terms, HIPAA Privacy Rule treats a patient
broad. See Comments of ABC, Blue conditions, or privileges of employment. who is also an employee of the hospital,
Cross and Blue Shield Association For example, an employer that fires an any genetic information that is obtained
(BCBSA), Chamber/SHRM and NFIB. employee because of anticipated high or created by the hospital in its role as
Some of these same groups requested health claims based on genetic a health care provider is protected
that more specific language about the information remains subject to liability health information and is subject to the
lack of double liability be inserted into under Title II. On the other hand, health requirements of the HIPAA Privacy Rule
the regulation itself and provided model plan or issuer provisions or actions and not those of GINA. In contrast,
language for this purpose. See related to the imposition of a preexisting however, any genetic information
Comments of ABC, Blue Cross and Blue condition exclusion; a health plan’s or obtained by the hospital in its role as
Shield Association, (BSBCA), and issuer’s discrimination in health plan employer, for example, as part of a
Chamber/SHRM. Civil rights groups, eligibility, benefits, or premiums based request for leave by the employee,
groups promoting genetic research, and on genetic information; a health plan’s would be subject to GINA Title II and
others argued that the final rule should or issuer’s request that an individual this rule. Similarly, a health care
clarify that the firewall was not undergo a genetic test; and/or a health provider may share genetic information,
intended to immunize from liability plan’s or issuer’s collection of genetic consistent with the HIPAA Privacy
decisions and actions that violate Title information remain subject to Rule, in the course of providing genetic
II, simply because those decisions enforcement under Title I exclusively. services as part of a voluntary wellness
involve health benefits governed by Below are a few examples of how the program.
Title I. See Comments of CGF, firewall is intended to operate: Several commenters requested that
Congressional Committee on Education • If an employer contracts with a the final regulation make clear that
and Labor (CCEL) (offering specific health insurance issuer to request genetic information obtained by a health
model language), Genetic Alliance, and genetic information, the employer has care provider covered by the HIPAA
GPPC. CCEL argued that the proposed committed a Title II violation. In Privacy Rule may not be used in making
regulation failed to make clear that addition, the plan and issuer may have employment decisions and must be kept
liability under GINA is based on the violated Title I of GINA. separate from employment files. See
actor who discriminates (i.e., employers • If an employer directs its employees Comments of CGF, Genetic Alliance and
or health plans/insurers) and not the act to undergo mandatory genetic testing in GPPC. Another commenter was
of discrimination. See Comment of order to be eligible for health benefits, concerned that the language in the
CCEL. Commenters also requested that the employer has committed a Title II proposed preamble suggested that an
the final regulation include additional violation. entity covered by both the HIPAA
examples illustrating how the firewall • If an employer or union amends a Privacy Rule and GINA can use genetic
will work, with one commenter health plan to require an individual to information to discriminate against
providing specific examples for this undergo a genetic test, then the applicants and employees because the
purpose. See Comments of CCEL employer or union is liable for a requirements of GINA do not apply to
(providing specific examples and model violation of Title II. In addition, the it. See Comment of World Privacy
language), Navigenics and SBA. We health plan’s implementation of the Forum. In response to these comments,
agree that further clarification of the requirement may violate Title I. we clarify that all entities covered by
firewall is required and, after careful Title II of GINA, whether or not they are
review of the comments received, have Section 1635.11(c) Relationship to
also covered by the HIPAA Privacy
made the necessary changes to the Authorities Under GINA Title I
Rule, must follow the requirements of
wwoods2 on DSK1DXX6B1PROD with RULES3

preamble and the final regulation. The final subsection in GINA section GINA when they are acting as
Section 209(a)(1)(B) eliminates 209 provides that nothing in GINA Title employers.
‘‘double liability’’ for health plans and II prohibits a group health plan or group
insurers by preventing Title II causes of health insurance issuer from engaging in Section 1635.12 Medical Information
action from being asserted regarding any activity that is authorized under the That Is Not Genetic Information
matters subject to enforcement under GINA Title I provisions identified in The final regulation states that a
Title I or the other genetics provisions GINA section 209(a)(2)(B)(i)–(iv), covered entity does not violate GINA by

VerDate Mar<15>2010 18:10 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00020 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68931

acquiring, using, or disclosing medical Management and Budget under the GINA will require that covered
information about a manifested disease Paperwork Reduction Act (44 U.S.C. entities obtain and post revised notices
or disorder that is not genetic chapter 35). informing covered individuals of their
information, even if the disease or rights under the law. Employers will not
Regulatory Flexibility Act
disorder may have a genetic basis or incur any costs related to obtaining or
component. It further notes, however, Title II of GINA applies to all posting these notices because the
that the ADA, and the applicable employers with fifteen or more Commission provides employers, at no
regulations issued in support of the Act, employees, approximately 822,000 of cost, a poster explaining the EEO laws
would limit the disclosure of genetic which are small firms (entities with that will be updated to include
information that also is medical 15–500 employees) according to data information about GINA.
information and covered by the ADA. In provided by the Small Business
To the extent that employers will
response to a comment, we clarify that Administration Office of Advocacy. See
need to expend resources to train
GINA prohibits discrimination based on Firm Size Data at http://sba.gov/advo/
human resources staff and others on the
genetic information and not on the basis research/data.html#us.
The Commission certifies under 5 requirements of GINA, we note that the
of a manifested condition, while the EEOC conducts extensive outreach and
ADA prohibits discrimination on the U.S.C. 605(b) that this final rule will not
have a significant economic impact on technical assistance programs, many of
basis of manifested conditions that meet them at no cost to employers, to assist
the definition of disability. See a substantial number of small entities
because it imposes no reporting burdens in the training of relevant personnel on
Comment of ICC. Although another EEO-related issues. In FY 2008, for
commenter expressed concern that and only minimal costs on such firms.
GINA is intended to prevent example, EEOC’s outreach efforts
neither GINA nor the ADA protects included 5,360 education, training, and
discrimination based on concerns that
individuals with a manifested genetic outreach events reaching over 270,000
genetic information about an individual
disease that is not yet substantially people. EEOC District offices conducted
suggests an increased risk of, or
limiting, we note that we have no 530 no-fee outreach events directed
predisposition to, acquiring a condition
authority under these regulations to toward small businesses, including
in the future. Because individuals
expand the coverage of GINA. See many events in partnership with
protected under GINA do not have
Comment of Burton Blatt Institute. employer associations, such as the
currently manifested conditions that
Moreover, given the broader definition Society for Human Resource
would result in any workplace barriers,
of disability that now exists under the Management, and the Industry Liaison
the law imposes no costs related to
Americans with Disabilities Act Groups and other federal agencies, such
making workplace modifications. To the
Amendments Act (ADAAA), it is less extent GINA requires businesses that as the National Labor Relations Board
likely that a significant number of obtain genetic information about and the Office of Federal Contract
individuals will fall within this gap. applicants or employees to maintain it Compliance Programs. Events included
Perhaps most notably, the revised in confidential files, GINA permits them oral presentations, training and
definition of the ‘‘regarded as’’ definition to do so using the same confidential stakeholder input meetings involving
of ‘‘disability’’ would apply to anyone files they are already required to 28,525 small business representatives.
against whom an employer or other maintain under Title I of the Americans We expect to include information about
covered entity takes a prohibited action with Disabilities Act. GINA in our outreach programs in
(e.g., failure to hire or termination) The Act may require some general and to offer numerous GINA-
based on an actual or perceived physical modification to the post offer/pre- specific outreach programs once the
or mental impairment that is not employment medical examination regulation implementing Title II of
transitory (lasting or expected to last for process of some employers, to remove GINA becomes final. We will also post
six months or less) and minor. See 42 from the process questions pertaining to technical assistance documents on our
U.S.C. 12102(3)(A). family medical history. We do not have Web site explaining the basics of the
Regulatory Procedures data on the number and size of new regulation, as we do with all of our
businesses that obtain family medical new regulations and policy documents.
Executive Order 12866 history as part of a post-offer medical We estimate that typical human
Pursuant to Executive Order 12866, examination. However, our experience resources professionals will need to
EEOC has coordinated this final rule with enforcing the ADA, which required dedicate, at most, three hours to gain a
with the Office of Management and all employers with fifteen or more satisfactory understanding of the new
Budget. Under section 3(f)(1) of employees to remove medical inquiries requirements, either by attending an
Executive Order 12866, EEOC has from their application forms, suggests EEOC-sponsored event or reviewing the
determined that the regulation will not that revising post-offer medical relevant materials on their own. We
have an annual effect on the economy questionnaires to eliminate questions further estimate that the median hourly
of $100 million or more or adversely about family medical history would not pay rate of an HR professional is
affect in a material way the economy, a impose significant costs. We recognize approximately $46.40. See Bureau of
sector of the economy, productivity, that some employers who currently Labor Statistics, Occupational
competition, jobs, the environment, request medical information from Employment and Wages, May 2009 at
public health or safety, or state, local or employees verbally may decide to make http://www.bls.gov/oes/current/
tribal governments or communities. such requests in writing and may create oes113049.htm#5#5. Assuming that
Therefore, a detailed cost-benefit a form for this purpose, in response to small entities have between one and five
wwoods2 on DSK1DXX6B1PROD with RULES3

assessment of the regulation is not the safe harbor described in HR professionals/managers, we estimate
required. 1635.8(b)(1)(i). We have no data that that the cost per entity of getting
would enable us to determine how appropriate training will be between
Paperwork Reduction Act many businesses will change their approximately $139.00 and $696.00, at
This rule contains no new practices, but do not believe the cost of the high end. EEOC does not believe
information collection requirements creating a form for those businesses who that this cost will be significant for the
subject to review by the Office of choose to do so would be significant. impacted small entities.

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00021 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
68932 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

Although several commenters requesting, requiring, or purchasing U.S.C. 1301, any employee of the House
requested that EEOC provide training genetic information; of Representatives, the Senate, the
and technical assistance specifically (3) Requires that genetic information Capitol Guide Service, the Capitol
geared towards small businesses, we be maintained as a confidential medical Police, the Congressional Budget Office,
received no comments disputing our record, and places strict limits on the Office of the Architect of the
estimates of the number of small entities disclosure of genetic information; and Capitol, the Office of the Attending
impacted or the cost to those entities. (4) Provides remedies for individuals Physician, the Office of Compliance, or
See Comments of NFIB, NSBA and SBA. whose genetic information is acquired, the Office of Technology Assessment;
As noted above, EEOC will offer training used, or disclosed in violation of its (4) As defined by, and subject to the
on Title II of GINA in various formats, protections. limitations in, section 2(a) of the
as well as issuing the necessary (b) This part does not apply to actions Presidential and Executive Office
technical assistance guidance. of covered entities that do not pertain to Accountability Act, 3 U.S.C. 411(c), any
an individual’s status as an employee, employee of the executive branch not
Unfunded Mandates Reform Act of 1995 member of a labor organization, or otherwise covered by section 717 of the
This final rule will not result in the participant in an apprenticeship Civil Rights Act of 1964, 42 U.S.C.
expenditure by state, local, or tribal program. For example, this part would 2000e–16, section 15 of the Age
governments, in the aggregate, or by the not apply to: Discrimination in Employment Act of
private sector, of $100 million or more (1) A medical examination of an 1967, 29 U.S.C. 633a, or section 501 of
in any one year, and it will not individual for the purpose of diagnosis the Rehabilitation Act of 1973, 29 U.S.C.
significantly or uniquely affect small and treatment unrelated to employment, 791, whether appointed by the President
governments. Therefore, no actions were which is conducted by a health care or any other appointing authority in the
deemed necessary under the provisions professional at the hospital or other executive branch, including an
of the Unfunded Mandates Reform Act health care facility where the individual employee of the Executive Office of the
of 1995. is an employee; or President;
(2) Activities of a covered entity (5) As defined by, and subject to the
Dated: October 29, 2010.
carried on in its capacity as a law limitations in, section 717 of the Civil
For the Commission. Rights Act of 1964, 42 U.S.C. 2000e–16,
enforcement agency investigating
Jacqueline A. Berrien, criminal conduct, even where the and regulations of the Equal
Chair. subject of the investigation is an Employment Opportunity Commission
List of Subjects in 29 CFR Part 1635 employee of the covered entity. at 29 CFR 1614.103, an employee of a
federal executive agency, the United
Administrative practice and § 1635.2 Definitions—general. States Postal Service and the Postal Rate
procedure, Equal employment (a) Commission means the Equal Commission, the Tennessee Valley
opportunity. Employment Opportunity Commission, Authority, the National Oceanic and
■ For the reasons set forth in the as established by section 705 of the Civil Atmospheric Administration
preamble, the EEOC amends 29 CFR Rights Act of 1964, 42 U.S.C. 2000e–4. Commissioned Corps, the Government
chapter XIV by adding part 1635 to read (b) Covered Entity means an Printing Office, and the Smithsonian
as follows: employer, employing office, Institution; an employee of the federal
employment agency, labor organization, judicial branch having a position in the
PART 1635—GENETIC INFORMATION or joint labor-management committee. competitive service; and an employee of
NONDISCRIMINATION ACT OF 2008 (c) Employee means an individual the Library of Congress.
Sec.
employed by a covered entity, as well as (d) Employer means any person that
1635.1 Purpose. an applicant for employment and a employs an employee defined in
1635.2 Definitions—general. former employee. An employee, § 1635.2(c) of this part, and any agent of
1635.3 Definitions specific to GINA. including an applicant for employment such person, except that, as limited by
1635.4 Prohibited practices—in general. and a former employee, is: section 701(b)(1) and (2) of the Civil
1635.5 Limiting, segregating, and (1) As defined by section 701 of the Rights Act of 1964, 42 U.S.C.
classifying. Civil Rights Act of 1964, 42 U.S.C. 2000e(b)(1) and (2), an employer does
1635.6 Causing a covered entity to 2000e, an individual employed by a not include an Indian tribe, or a bona
discriminate. person engaged in an industry affecting fide private club (other than a labor
1635.7 Retaliation. organization) that is exempt from
commerce who has fifteen or more
1635.8 Acquisition of genetic information.
1635.9 Confidentiality. employees for each working day in each taxation under section 501(c) of the
1635.10 Enforcement and remedies. of twenty or more calendar weeks in the Internal Revenue Code of 1986.
1635.11 Construction. current or preceding calendar year and (e) Employing office is defined in the
1635.12 Medical information that is not any agent of such a person; Congressional Accountability Act, 2
genetic information. (2) As defined by section 304(a) of the U.S.C. 1301(9), to mean the personal
Authority: 110 Stat. 233; 42 U.S.C. 2000ff. Government Employee Rights Act, 42 office of a Member of the House of
U.S.C. 2000e–16c(a), a person chosen or Representatives or of a Senator; a
§ 1635.1 Purpose. appointed by an individual elected to committee of the House of
(a) The purpose of this part is to public office by a State or political Representatives or the Senate or a joint
implement Title II of the Genetic subdivision of a State to serve as part of committee; any other office headed by a
Information Nondiscrimination Act of the personal staff of the elected official, person with the final authority to
wwoods2 on DSK1DXX6B1PROD with RULES3

2008, 42 U.S.C. 2000ff, et seq. Title II of to serve the elected official on a policy- appoint, hire, discharge, and set the
GINA: making level, or to serve the elected terms, conditions, or privileges of the
(1) Prohibits use of genetic official as the immediate advisor on the employment of an employee of the
information in employment decision- exercise of the elected official’s House of Representatives or the Senate;
making; constitutional or legal powers. or the Capitol Guide Board, the Capitol
(2) Restricts employers and other (3) As defined by section 101 of the Police Board, the Congressional Budget
entities subject to Title II of GINA from Congressional Accountability Act, 2 Office, the Office of the Architect of the

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00022 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68933

Capitol, the Office of the Attending (iii) Third-degree relatives include an (i) A test to determine whether
Physician, the Office of Compliance, individual’s great-grandparents, great someone has the BRCA1 or BRCA2
and the Office of Technology grandchildren, great uncles/aunts, and variant evidencing a predisposition to
Assessment. first cousins. breast cancer, a test to determine
(f) Employment agency is defined in (iv) Fourth-degree relatives include an whether someone has a genetic variant
42 U.S.C. 2000e(c) to mean any person individual’s great-great-grandparents, associated with hereditary nonpolyposis
regularly undertaking with or without great-great-grandchildren, and first colon cancer, and a test for a genetic
compensation to procure employees for cousins once-removed (i.e., the children variant for Huntington’s Disease;
an employer or to procure for employees of the individual’s first cousins). (ii) Carrier screening for adults using
opportunities to work for an employer (b) Family medical history. Family genetic analysis to determine the risk of
and includes an agent of such a person. medical history means information conditions such as cystic fibrosis, sickle
(g) Joint labor-management committee about the manifestation of disease or cell anemia, spinal muscular atrophy, or
is defined as an entity that controls disorder in family members of the fragile X syndrome in future offspring;
apprenticeship or other training or individual. (iii) Amniocentesis and other
retraining programs, including on-the- (c) Genetic information. (1) Genetic evaluations used to determine the
job training programs. information means information about: presence of genetic abnormalities in a
(h) Labor organization is defined at 42 (i) An individual’s genetic tests; fetus during pregnancy;
U.S.C. 2000e(d) to mean an organization (ii) The genetic tests of that (iv) Newborn screening analysis that
with fifteen or more members engaged individual’s family members; uses DNA, RNA, protein, or metabolite
in an industry affecting commerce, and (iii) The manifestation of disease or analysis to detect or indicate genotypes,
any agent of such an organization in disorder in family members of the mutations, or chromosomal changes,
which employees participate and which individual (family medical history); such as a test for PKU performed so that
exists for the purpose, in whole or in (iv) An individual’s request for, or treatment can begin before a disease
part, of dealing with employers receipt of, genetic services, or the manifests;
concerning grievances, labor disputes, participation in clinical research that (v) Preimplantation genetic diagnosis
wages, rates of pay, hours, or other includes genetic services by the performed on embryos created using
terms or conditions of employment. individual or a family member of the invitro fertilization;
(i) Member includes, with respect to individual; or (vi) Pharmacogenetic tests that detect
a labor organization, an applicant for (v) The genetic information of a fetus genotypes, mutations, or chromosomal
membership. carried by an individual or by a changes that indicate how an individual
pregnant woman who is a family will react to a drug or a particular
(j) Person is defined at 42 U.S.C.
member of the individual and the dosage of a drug;
2000e(a) to mean one or more
(vii) DNA testing to detect genetic
individuals, governments, governmental genetic information of any embryo
markers that are associated with
agencies, political subdivisions, labor legally held by the individual or family
information about ancestry; and
unions, partnerships, associations, member using an assisted reproductive
(viii) DNA testing that reveals family
corporations, legal representatives, technology.
relationships, such as paternity.
mutual companies, joint-stock (2) Genetic information does not (3) The following are examples of
companies, trusts, unincorporated include information about the sex or age tests or procedures that are not genetic
organizations, trustees, trustees in cases of the individual, the sex or age of tests:
under title 11, or receivers. family members, or information about (i) An analysis of proteins or
(k) State is defined at 42 U.S.C. the race or ethnicity of the individual or metabolites that does not detect
2000e(i) and includes a State of the family members that is not derived from genotypes, mutations, or chromosomal
United States, the District of Columbia, a genetic test. changes;
Puerto Rico, the Virgin Islands, (d) Genetic monitoring means the (ii) A medical examination that tests
American Samoa, Guam, Wake Island, periodic examination of employees to for the presence of a virus that is not
the Canal Zone, and Outer Continental evaluate acquired modifications to their composed of human DNA, RNA,
Shelf lands defined in the Outer genetic material, such as chromosomal chromosomes, proteins, or metabolites;
Continental Shelf Lands Act (43 U.S.C. damage or evidence of increased (iii) A test for infectious and
1331 et seq.). occurrence of mutations, caused by the communicable diseases that may be
toxic substances they use or are exposed transmitted through food handling;
§ 1635.3 Definitions specific to GINA. to in performing their jobs, in order to (iv) Complete blood counts,
(a) Family member means with identify, evaluate, and respond to the cholesterol tests, and liver-function
respect to any individual: effects of, or to control adverse tests.
(1) A person who is a dependent of environmental exposures in the (4) Alcohol and Drug Testing—
that individual as the result of marriage, workplace. (i) A test for the presence of alcohol
birth, adoption, or placement for (e) Genetic services. Genetic services or illegal drugs is not a genetic test.
adoption; or means a genetic test, genetic counseling (ii) A test to determine whether an
(2) A first-degree, second-degree, (including obtaining, interpreting, or individual has a genetic predisposition
third-degree, or fourth-degree relative of assessing genetic information), or for alcoholism or drug use is a genetic
the individual, or of a dependent of the genetic education. test.
individual as defined in § 1635.3(a)(1). (f) Genetic test—(1) In general. (g) Manifestation or manifested
wwoods2 on DSK1DXX6B1PROD with RULES3

(i) First-degree relatives include an ‘‘Genetic test’’ means an analysis of means, with respect to a disease,
individual’s parents, siblings, and human DNA, RNA, chromosomes, disorder, or pathological condition, that
children. proteins, or metabolites that detects an individual has been or could
(ii) Second-degree relatives include an genotypes, mutations, or chromosomal reasonably be diagnosed with the
individual’s grandparents, changes. disease, disorder, or pathological
grandchildren, uncles, aunts, nephews, (2) Genetic tests include, but are not condition by a health care professional
nieces, and half-siblings. limited to: with appropriate training and expertise

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00023 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
68934 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

in the field of medicine involved. For or its agent, to discriminate against an other entities covered by GINA Title II
purposes of this part, a disease, individual in violation of this part, from requesting or requiring genetic
disorder, or pathological condition is including with respect to the information of an individual or family
not manifested if the diagnosis is based individual’s participation in an member of the individual, except as
principally on genetic information. apprenticeship or other training or specifically allowed by this law. To
retraining program, or with respect to a comply with this law, we are asking that
§ 1635.4 Prohibited practices—in general. you not provide any genetic information
member’s participation in a labor
(a) It is unlawful for an employer to organization. when responding to this request for
discriminate against an individual on medical information. ‘Genetic
the basis of the genetic information of § 1635.7 Retaliation. information’ as defined by GINA,
the individual in regard to hiring, A covered entity may not discriminate includes an individual’s family medical
discharge, compensation, terms, against any individual because such history, the results of an individual’s or
conditions, or privileges of employment. individual has opposed any act or family member’s genetic tests, the fact
(b) It is unlawful for an employment practice made unlawful by this title or that an individual or an individual’s
agency to fail or refuse to refer any because such individual made a charge, family member sought or received
individual for employment or otherwise testified, assisted, or participated in any genetic services, and genetic
discriminate against any individual manner in an investigation, proceeding, information of a fetus carried by an
because of genetic information of the or hearing under this title. individual or an individual’s family
individual. member or an embryo lawfully held by
(c) It is unlawful for a labor § 1635.8 Acquisition of genetic
an individual or family member
organization to exclude or to expel from information.
receiving assistive reproductive
the membership of the organization, or (a) General prohibition. A covered services.’’
otherwise to discriminate against, any entity may not request, require, or (C) A covered entity’s failure to give
member because of genetic information purchase genetic information of an such a notice or to use this or similar
with respect to the member. individual or family member of the language will not prevent it from
(d) It is an unlawful employment individual, except as specifically establishing that a particular receipt of
practice for any employer, labor provided in paragraph (b) of this genetic information was inadvertent if
organization, or joint labor-management section. ‘‘Request’’ includes conducting its request for medical information was
committee controlling apprenticeship or an Internet search on an individual in not ‘‘likely to result in a covered entity
other training or retraining programs, a way that is likely to result in a covered obtaining genetic information’’ (for
including on-the-job training programs entity obtaining genetic information; example, where an overly broad
to discriminate against any individual actively listening to third-party response is received in response to a
because of the individual’s genetic conversations or searching an tailored request for medical
information in admission to, or individual’s personal effects for the information).
employment in, any program purpose of obtaining genetic (D) Situations to which the
established to provide apprenticeship or information; and making requests for requirements of subsection (b)(1)(i)
other training or retraining. information about an individual’s apply include, but are not limited to the
§ 1635.5 Limiting, segregating, and current health status in a way that is following:
classifying. likely to result in a covered entity (1) Where a covered entity requests
(a) A covered entity may not limit, obtaining genetic information. documentation to support a request for
segregate, or classify an individual, or (b) Exceptions. The general reasonable accommodation under
fail or refuse to refer for employment prohibition against requesting, Federal, State, or local law, as long as
any individual, in any way that would requiring, or purchasing genetic the covered entity’s request for such
deprive or tend to deprive the information does not apply: documentation is lawful. A request for
individual of employment opportunities (1) Where a covered entity documentation supporting a request for
or otherwise affect the status of the inadvertently requests or requires reasonable accommodation is lawful
individual as an employee, because of genetic information of the individual or only when the disability and/or the
genetic information with respect to the family member of the individual. need for accommodation is not obvious;
individual. A covered entity will not be (i) Requests for Medical Information: the documentation is no more than is
deemed to have violated this section if (A) If a covered entity acquires genetic sufficient to establish that an individual
it limits or restricts an employee’s job information in response to a lawful has a disability and needs a reasonable
duties based on genetic information request for medical information, the accommodation; and the documentation
because it was required to do so by a acquisition of genetic information will relates only to the impairment that the
law or regulation mandating genetic not generally be considered inadvertent individual claims to be a disability that
monitoring, such as regulations unless the covered entity directs the requires reasonable accommodation;
administered by the Occupational and individual and/or health care provider (2) Where an employer requests
Safety Health Administration (OSHA). from whom it requested medical medical information from an individual
See 1635.8(b)(5) and 1635.11(a). information (in writing, or verbally, as required, authorized, or permitted by
(b) Notwithstanding any language in where the covered entity does not Federal, State, or local law, such as
this part, a cause of action for disparate typically make requests for medical where an employee requests leave under
impact within the meaning of section information in writing) not to provide the Family and Medical Leave Act
703(k) of the Civil Rights Act of 1964, genetic information. (FMLA) to attend to the employee’s own
wwoods2 on DSK1DXX6B1PROD with RULES3

42 U.S.C. 2000e–2(k), is not available (B) If a covered entity uses language serious health condition or where an
under this part. such as the following, any receipt of employee complies with the FMLA’s
genetic information in response to the employee return to work certification
§ 1635.6 Causing a covered entity to request for medical information will be requirements; or
discriminate. deemed inadvertent: ‘‘The Genetic (3) Where a covered entity requests
A covered entity may not cause or Information Nondiscrimination Act of documentation to support a request for
attempt to cause another covered entity, 2008 (GINA) prohibits employers and leave that is not governed by Federal,

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00024 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68935

State, or local laws requiring leave, as genetic information from a social media genetic information, but may offer
long as the documentation required to platform which he or she was given financial inducements for completion of
support the request otherwise complies permission to access by the creator of health risk assessments that include
with the requirements of the Americans the profile at issue (e.g., a supervisor questions about family medical history
with Disabilities Act and other laws and employee are connected on a social or other genetic information, provided
limiting a covered entity’s access to networking site and the employee the covered entity makes clear, in
medical information. provides family medical history on his language reasonably likely to be
(ii) The exception for inadvertent page). understood by those completing the
acquisition of genetic information also (2) Where a covered entity offers health risk assessment, that the
applies in, but is not necessarily limited health or genetic services, including inducement will be made available
to, situations where— such services offered as part of a whether or not the participant answers
(A) A manager, supervisor, union voluntary wellness program. questions regarding genetic information.
representative, or employment agency (i) This exception applies only For example:
representative learns genetic where— (A) A covered entity offers $150 to
information about an individual by (A) The provision of genetic employees who complete a health risk
overhearing a conversation between the information by the individual is assessment with 100 questions, the last
individual and others; voluntary, meaning the covered entity 20 of them concerning family medical
(B) A manager, supervisor, union neither requires the individual to history and other genetic information.
representative, or employment agency provide genetic information nor The instructions for completing the
representative learns genetic penalizes those who choose not to health risk assessment make clear that
information about an individual by provide it; the inducement will be provided to all
receiving it from the individual or third- (B) The individual provides prior employees who respond to the first 80
parties during a casual conversation, knowing, voluntary, and written questions, whether or not the remaining
including in response to an ordinary authorization, which may include 20 questions concerning family medical
expression of concern that is the subject authorization in electronic format. This history and other genetic information
of the conversation. For example, the requirement is only met if the covered are answered. This health risk
exception applies when the covered entity uses an authorization form that: assessment does not violate Title II of
entity, acting through a supervisor or (1) Is written so that the individual GINA.
other official, receives family medical from whom the genetic information is (B) Same facts as the previous
history directly from an individual being obtained is reasonably likely to example, except that the instructions do
following a general health inquiry (e.g., understand it; not indicate which questions request
‘‘How are you?’’ or ‘‘Did they catch it (2) Describes the type of genetic genetic information; nor does the
early?’’ asked of an employee who was information that will be obtained and assessment otherwise make clear which
just diagnosed with cancer) or a the general purposes for which it will be questions must be answered in order to
question as to whether the individual used; and obtain the inducement. This health risk
has a manifested condition. Similarly, a (3) Describes the restrictions on assessment violates Title II of GINA.
casual question between colleagues, or disclosure of genetic information; (iii) A covered entity may offer
between a supervisor and subordinate, (C) Individually identifiable genetic financial inducements to encourage
concerning the general well-being of a information is provided only to the individuals who have voluntarily
parent or child would not violate GINA individual (or family member if the provided genetic information (e.g.,
(e.g., ‘‘How’s your son feeling today?’’, family member is receiving genetic family medical history) that indicates
‘‘Did they catch it early?’’ asked of an services) and the licensed health care that they are at increased risk of
employee whose family member was professionals or board certified genetic acquiring a health condition in the
just diagnosed with cancer, or ‘‘Will counselors involved in providing such future to participate in disease
your daughter be OK?’’). However, this services, and is not accessible to management programs or other
exception does not apply where an managers, supervisors, or others who programs that promote healthy
employer follows up a question make employment decisions, or to lifestyles, and/or to meet particular
concerning a family member’s general anyone else in the workplace; and health goals as part of a health or
health with questions that are probing (D) Any individually identifiable genetic service. However, to comply
in nature, such as whether other family genetic information provided under with Title II of GINA, these programs
members have the condition, or whether paragraph (b)(2) of this section is only must also be offered to individuals with
the individual has been tested for the available for purposes of such services current health conditions and/or to
condition, because the covered entity and is not disclosed to the covered individuals whose lifestyle choices put
should know that these questions are entity except in aggregate terms that do them at increased risk of developing a
likely to result in the acquisition of not disclose the identity of specific condition. For example:
genetic information; individuals (a covered entity will not (A) Employees who voluntarily
(C) A manager, supervisor, union violate the requirement that it receive disclose a family medical history of
representative, or employment agency information only in aggregate terms if it diabetes, heart disease, or high blood
representative learns genetic receives information that, for reasons pressure on a health risk assessment
information from the individual or a outside the control of the provider or that meets the requirements of (b)(2)(ii)
third-party without having solicited or the covered entity (such as the small of this section and employees who have
sought the information (e.g., where a number of participants), makes the a current diagnosis of one or more of
wwoods2 on DSK1DXX6B1PROD with RULES3

manager or supervisor receives an genetic information of a particular these conditions are offered $150 to
unsolicited email about the health of an individual readily identifiable with no participate in a wellness program
employee’s family member from a co- effort on the covered entity’s part). designed to encourage weight loss and
worker); or (ii) Consistent with the requirements a healthy lifestyle. This does not violate
(D) A manager, supervisor, union of paragraph (b)(2)(i) of this section, a Title II of GINA.
representative, or employment agency covered entity may not offer a financial (B) The program in the previous
representative inadvertently learns inducement for individuals to provide example offers an additional

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00025 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
68936 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

inducement to individuals who achieve pursuant to a policy (even in the the covered entity uses an authorization
certain health outcomes. Participants absence of requirements of Federal, form that:
may earn points toward ‘‘prizes’’ totaling State, or local leave laws) that permits (A) Is written so that the individual
$150 in a single year for lowering their the use of leave to care for a sick family from whom the genetic information is
blood pressure, glucose, and cholesterol member and that requires all employees being obtained is reasonably likely to
levels, or for losing weight. This to provide information about the health understand the form;
inducement would not violate Title II of condition of the family member to (B) Describes the genetic information
GINA. substantiate the need for leave. that will be obtained; and
(iv) Nothing contained in (4) Where the covered entity acquires (C) Describes the restrictions on
§ 1635.8(b)(2)(iii) limits the rights or genetic information from documents disclosure of genetic information;
protections of an individual under the that are commercially and publicly (ii) Is conducted in compliance with
Americans with Disabilities Act (ADA), available for review or purchase, any Federal genetic monitoring
as amended, or other applicable civil including newspapers, magazines, regulations, including any regulations
rights laws, or under the Health periodicals, or books, or through that may be promulgated by the
Insurance Portability and Secretary of Labor pursuant to the
electronic media, such as information
Accountability Act (HIPAA), as Occupational Safety and Health Act of
communicated through television,
amended by GINA. For example, if an 1970 (29 U.S.C. 651 et seq.), the Federal
movies, or the Internet, except that this
employer offers a financial inducement Mine Safety and Health Act of 1977 (30
exception does not apply—
for participation in disease management U.S.C. 801 et seq.), or the Atomic Energy
(i) To medical databases, court
programs or other programs that Act of 1954 (42 U.S.C. 2011 et seq.); or
records, or research databases available
promote healthy lifestyles and/or State genetic monitoring regulations, in
to scientists on a restricted basis;
require individuals to meet particular the case of a State that is implementing
(ii) To genetic information acquired genetic monitoring regulations under
health goals, the employer must make through sources with limited access,
reasonable accommodations to the the authority of the Occupational Safety
such as social networking sites and and Health Act of 1970 (29 U.S.C. 651
extent required by the ADA, that is, the other media sources which require
employer must make ‘‘modifications or et seq.); and
permission to access from a specific (iii) Provides for reporting of the
adjustments that enable a covered individual or where access is
entity’s employee with a disability to results of the monitoring to the covered
conditioned on membership in a entity, excluding any licensed health
enjoy equal benefits and privileges of particular group, unless the covered
employment as are enjoyed by its other care professional or board certified
entity can show that access is routinely genetic counselor involved in the
similarly situated employees without
granted to all who request it; genetic monitoring program, only in
disabilities’’ unless ‘‘such covered entity
(iii) To genetic information obtained aggregate terms that do not disclose the
can demonstrate that the
through commercially and publicly identity of specific individuals.
accommodation would impose an
available sources if the covered entity (6) Where an employer conducts DNA
undue hardship on the operation of its
sought access to those sources with the analysis for law enforcement purposes
business.’’ 29 CFR 1630.2(o)(1)(iii); 29
intent of obtaining genetic information; as a forensic laboratory or for purposes
CFR 1630.9(a). In addition, if the
employer’s wellness program provides or of human remains identification and
(directly, through reimbursement, or (iv) To genetic information obtained requests or requires genetic information
otherwise) medical care (including through media sources, whether or not of its employees, apprentices, or
genetic counseling), the program may commercially and publicly available, if trainees, but only to the extent that the
constitute a group health plan and must the covered entity is likely to acquire genetic information is used for analysis
comply with the special requirements genetic information by accessing those of DNA identification markers for
for wellness programs that condition sources, such as Web sites and on-line quality control to detect sample
rewards on an individual satisfying a discussion groups that focus on issues contamination and is maintained and
standard related to a health factor, such as genetic testing of individuals disclosed in a manner consistent with
including the requirement to provide an and genetic discrimination. such use.
individual with a ‘‘reasonable (5) Where the covered entity acquires (c) Inquiries Made of Family Members
alternative (or waiver of the otherwise genetic information for use in the Concerning a Manifested Disease,
applicable standard)’’ under HIPAA, genetic monitoring of the biological Disorder, or Pathological Condition. (1)
when ‘‘it is unreasonably difficult due to effects of toxic substances in the A covered entity does not violate this
a medical condition to satisfy’’ or workplace. In order for this exception to section when it requests, requires, or
‘‘medically inadvisable to attempt to apply, the covered entity must provide purchases information about a
satisfy’’ the otherwise applicable written notice of the monitoring to the manifested disease, disorder, or
standard. See section 9802 of the individual and the individual must be pathological condition of an employee,
Internal Revenue Code (26 U.S.C. 9802, informed of the individual monitoring member, or apprenticeship program
26 CFR 54.9802–1 and 54.9802–3T), results. The covered entity may not participant whose family member is an
section 702 of the Employee Retirement retaliate or otherwise discriminate employee for the same employer, a
Income Security Act of 1974 (ERISA) against an individual due to his or her member of the same labor organization,
(29 U.S.C. 1182, 29 CFR 2590.702 and refusal to participate in genetic or a participant in the same
2590.702–1), and section 2705 of the monitoring that is not required by apprenticeship program. For example,
Public Health Service Act (45 CFR federal or state law. This exception an employer will not violate this section
wwoods2 on DSK1DXX6B1PROD with RULES3

146.121 and 146.122). further provides that such monitoring: by asking someone whose sister also
(3) Where the covered entity requests (i) Is either required by federal or state works for the employer to take a post-
family medical history to comply with law or regulation, or is conducted only offer medical examination that does not
the certification provisions of the where the individual gives prior include requests for genetic information.
Family and Medical Leave Act of 1993 knowing, voluntary and written (2) A covered entity does not violate
(29 U.S.C. 2601 et seq.) or State or local authorization. The requirement for this section when it requests, requires,
family and medical leave laws, or individual authorization is only met if or purchases genetic information or

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00026 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68937

information about the manifestation of a (4) Genetic information that a covered imminent hazard of death or life-
disease, disorder, or pathological entity acquires through sources that are threatening illness, provided that the
condition of an individual’s family commercially and publicly available, as individual whose family member is the
member who is receiving health or provided by, and subject to the subject of the disclosure is notified of
genetic services on a voluntary basis. limitations in, 1635.8(b)(4) of this part, such disclosure.
For example, an employer does not is not considered confidential genetic (c) Relationship to HIPAA Privacy
unlawfully acquire genetic information information, but may not be used to Regulations. Pursuant to § 1635.11(d) of
about an employee when it asks the discriminate against an individual as this part, nothing in this section shall be
employee’s family member who is described in §§ 1635.4, 1635.5, or construed as applying to the use or
receiving health services from the 1635.6 of this part. disclosure of genetic information that is
employer if her diabetes is under (5) Genetic information placed in protected health information subject to
control. personnel files prior to November 21, the regulations issued pursuant to
(d) Medical examinations related to 2009 need not be removed and a section 264(c) of the Health Insurance
employment. The prohibition on covered entity will not be liable under Portability and Accountability Act of
acquisition of genetic information, this part for the mere existence of the 1996.
including family medical history, information in the file. However, the
applies to medical examinations related prohibitions on use and disclosure of § 1635.10 Enforcement and remedies.
to employment. A covered entity must genetic information apply to all genetic (a) Powers and procedures: The
tell health care providers not to collect information that meets the statutory following powers and procedures shall
genetic information, including family definition, including genetic apply to allegations that Title II of GINA
medical history, as part of a medical information requested, required, or has been violated:
examination intended to determine the purchased prior to November 21, 2009. (1) The powers and procedures
ability to perform a job, and must take (b) Exceptions to limitations on provided to the Commission, the
additional reasonable measures within disclosure. A covered entity that Attorney General, or any person by
its control if it learns that genetic possesses any genetic information, sections 705 through 707 and 709
information is being requested or regardless of how the entity obtained through 711 of the Civil Rights Act of
required. Such reasonable measures the information (except for genetic 1964, 42 U.S.C. 2000e–4 through 2000e–
may depend on the facts and information acquired through 6 and 2000e–8 through 2000e–10, where
circumstances under which a request for commercially and publicly available the alleged discrimination is against an
genetic information was made, and may sources), may not disclose it except: employee defined in 1635.2(c)(1) of this
include no longer using the services of (1) To the employee or member (or part or against a member of a labor
a health care professional who family member if the family member is organization;
continues to request or require genetic receiving the genetic services) about (2) The powers and procedures
information during medical whom the information pertains upon provided to the Commission and any
examinations after being informed not receipt of the employee’s or member’s person by sections 302 and 304 of the
to do so. written request; Government Employees Rights Act, 42
(e) A covered entity may not use (2) To an occupational or other health U.S.C. 2000e–16b and 2000e–16c, and
genetic information obtained pursuant researcher if the research is conducted in regulations at 29 CFR part 1603,
to subparagraphs (b) or (c) of this in compliance with the regulations and where the alleged discrimination is
section to discriminate, as defined by protections provided for under 45 CFR against an employee as defined in
§§ 1635.4, 1635.5, or 1635.6, and must part 46; § 1635.2(c)(2) of this part;
keep such information confidential as (3) In response to an order of a court, (3) The powers and procedures
required by § 1635.9. except that the covered entity may provided to the Board of Directors of the
disclose only the genetic information Office of Compliance and to any person
§ 1635.9 Confidentiality. expressly authorized by such order; and under the Congressional Accountability
(a) Treatment of genetic information. if the court order was secured without Act, 2 U.S.C. 1301 et seq. (including the
(1) A covered entity that possesses the knowledge of the employee or provisions of Title 3 of that act, 2 U.S.C.
genetic information in writing about an member to whom the information refers, 1381 et seq.), where the alleged
employee or member must maintain the covered entity shall inform the discrimination is against an employee
such information on forms and in employee or member of the court order defined in § 1635.2(c)(3) of this part;
medical files (including where the and any genetic information that was (4) The powers and procedures
information exists in electronic forms disclosed pursuant to such order; provided in 3 U.S.C. 451 et seq., to the
and files) that are separate from (4) To government officials President, the Commission, or any
personnel files and treat such investigating compliance with this title person in connection with an alleged
information as a confidential medical if the information is relevant to the violation of section 3 U.S.C. 411(a)(1),
record. investigation; where the alleged discrimination is
(2) A covered entity may maintain (5) To the extent that such disclosure against an employee defined in
genetic information about an employee is made in support of an employee’s § 1635.2(c)(4) of this part;
or member in the same file in which it compliance with the certification (5) The powers and procedures
maintains confidential medical provisions of section 103 of the Family provided to the Commission, the
information subject to section and Medical Leave Act of 1993 (29 Librarian of Congress, and any person
102(d)(3)(B) of the Americans with U.S.C. 2613) or such requirements by section 717 of the Civil Rights Act,
wwoods2 on DSK1DXX6B1PROD with RULES3

Disabilities Act, 42 U.S.C. under State family and medical leave 42 U.S.C. 2000e–16, where the alleged
12112(d)(3)(B). laws; or discrimination is against an employee
(3) Genetic information that a covered (6) To a Federal, State, or local public defined in § 1635.2(c)(5) of this part.
entity receives orally need not be health agency only with regard to (b) Remedies. The following remedies
reduced to writing, but may not be information about the manifestation of a are available for violations of GINA
disclosed, except as permitted by this disease or disorder that concerns a sections 202, 203, 204, 205, 206, and
part. contagious disease that presents an 207(f):

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00027 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
68938 Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations

(1) Compensatory and punitive health plan or health insurance issuer employers and other GINA Title II
damages as provided for, and limited offering group health insurance covered entities are remedied through
by, 42 U.S.C. 1981a(a)(1) and (b); coverage in connection with a group GINA Title II. Employers and other
(2) Reasonable attorney’s fees, health plan. GINA Title II covered entities would
including expert fees, as provided for, (b) Relation to certain Federal laws remain liable for any of their actions
and limited by, 42 U.S.C. 1988(b) and governing health coverage. (1) General: that violate Title II, even where those
(c); and Nothing in GINA Title II provides for actions involve access to health benefits,
(3) Injunctive relief, including enforcement of, or penalties for, because such benefits are within the
reinstatement and hiring, back pay, and violation of any requirement or definition of compensation, terms,
other equitable remedies as provided prohibition of a covered entity subject to conditions, or privileges of employment.
for, and limited by, 42 U.S.C. 2000e– enforcement under:
For example, an employer that fires an
5(g). (i) Amendments made by Title I of
GINA. employee because of anticipated high
(c) Posting of Notices. (1) Every
(ii) Section 701(a) of the Employee health claims based on genetic
covered entity shall post and keep
posted in conspicuous places upon its Retirement Income Security Act (29 information remains subject to liability
premises where notices to employees, U.S.C. 1181) (ERISA), section 2704(a) of under Title II. On the other hand, health
applicants for employment, and the Public Health Service Act, and plan or issuer provisions or actions
members are customarily posted a section 9801(a) of the Internal Revenue related to the imposition of a preexisting
notice to be prepared or approved by the Code (26 U.S.C. 9801(a)), as such condition exclusion; a health plan’s or
Commission setting forth excerpts from sections apply with respect to genetic issuer’s discrimination in health plan
or, summaries of, the pertinent information pursuant to section eligibility, benefits, or premiums based
provisions of this regulation and 701(b)(1)(B) of ERISA, section on genetic information; a health plan’s
information pertinent to the filing of a 2704(b)(1)(B) of the Public Health or issuer’s request that an individual
complaint. Service Act, and section 9801(b)(1)(B) of undergo a genetic test; and/or a health
(2) A willful violation of this the Internal Revenue Code, respectively, plan’s or issuer’s collection of genetic
requirement shall be punishable by a of such sections, which prohibit a group information remain subject to
fine of not more than $100 for each health plan or a health insurance issuer enforcement under Title I exclusively.
separate offense. in the group market from imposing a For example:
preexisting condition exclusion based
§ 1635.11 Construction. solely on genetic information, in the (i) If an employer contracts with a
(a) Relationship to other laws, absence of a diagnosis of a condition; health insurance issuer to request
generally. This part does not— (iii) Section 702(a)(1)(F) of ERISA (29 genetic information, the employer has
(1) Limit the rights or protections of U.S.C. 1182(a)(1)(F)), section 2705(a)(6) committed a Title II violation. In
an individual under any other Federal, of the Public Health Service Act, and addition, the issuer may have violated
State, or local law that provides equal or section 9802(a)(1)(F) of the Internal Title I of GINA.
greater protection to an individual than Revenue Code (26 U.S.C. 9802(a)(1)(F)), (ii) If an employer directs his
the rights or protections provided for which prohibit a group health plan or a employees to undergo mandatory
under this part, including the health insurance issuer in the group genetic testing in order to be eligible for
Americans with Disabilities Act of 1990 market from discriminating against health benefits, the employer has
(42 U.S.C. 12101 et seq.), the individuals in eligibility and continued committed a Title II violation.
Rehabilitation Act of 1973 (29 U.S.C. eligibility for benefits based on genetic
information; or (iii) If an employer or union amends
701 et seq.), and State and local laws
prohibiting genetic discrimination or (iv) Section 702(b)(1) of ERISA (29 a health plan to require an individual to
discrimination on the basis of disability; U.S.C. 1182(b)(1)), section 2705(b)(1) of undergo a genetic test, then the
(2) Apply to the Armed Forces the Public Health Service Act, and employer or union is liable for a
Repository of Specimen Samples for the section 9802(b)(1) of the Internal violation of Title II. In addition, the
Identification of Remains; Revenue Code (26 U.S.C. 9802(b)(1)), as health plan’s implementation of the
(3) Limit or expand the protections, such sections apply with respect to requirement may subject the health plan
rights, or obligations of employees or genetic information as a health status- to liability under Title I.
employers under applicable workers’ related factor, which prohibit a group (c) Relationship to authorities under
compensation laws; health plan or a health insurance issuer GINA Title I. GINA Title II does not
(4) Limit the authority of a Federal in the group market from discriminating prohibit any group health plan or health
department or agency to conduct or against individuals in premium or insurance issuer offering group health
sponsor occupational or other health contribution rates under the plan or insurance coverage in connection with a
research in compliance with the coverage based on genetic information. group health plan from engaging in any
regulations and protections provided for (2) Application. The application of action that is authorized under any
under 45 CFR part 46; paragraph (b)(1) of this section is
provision of law noted in § 1635.11(b) of
(5) Limit the statutory or regulatory intended to prevent Title II causes of
this part, including any implementing
authority of the Occupational Safety and action from being asserted regarding
regulations noted in § 1635.11(b).
Health Administration or the Mine matters subject to enforcement under
Safety and Health Administration to Title I or the other genetics provisions (d) Relationship to HIPAA Privacy
promulgate or enforce workplace safety for group coverage in ERISA, the Public Regulations. This part does not apply to
wwoods2 on DSK1DXX6B1PROD with RULES3

and health laws and regulations; or Health Service Act, and the Internal genetic information that is protected
(6) Require any specific benefit for an Revenue Code. The firewall seeks to health information subject to the
employee or member or a family ensure that health plan or issuer regulations issued by the Secretary of
member of an employee or member provisions or actions are addressed and Health and Human Services pursuant to
(such as additional coverage for a remedied through ERISA, the Public section 264(c) of the Health Insurance
particular health condition that may Health Service Act, or the Internal Portability and Accountability Act of
have a genetic basis) under any group Revenue Code, while actions taken by 1996.

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00028 Fmt 4701 Sfmt 4700 E:\FR\FM\09NOR3.SGM 09NOR3
Federal Register / Vol. 75, No. 216 / Tuesday, November 9, 2010 / Rules and Regulations 68939

§ 1635.12 Medical information that is not condition has or may have a genetic (b) Genetic information related to a
genetic information. basis or component. manifested disease, disorder, or
(a) Medical information about a (2) Notwithstanding paragraph (a)(1) pathological condition.
manifested disease, disorder, or of this section, the acquisition, use, and Notwithstanding paragraph (a) of this
pathological condition. (1) A covered disclosure of medical information that is section, genetic information about a
entity shall not be considered to be in not genetic information about a manifested disease, disorder, or
violation of this part based on the use, manifested disease, disorder, or pathological condition is subject to the
acquisition, or disclosure of medical pathological condition is subject to requirements and prohibitions in
information that is not genetic applicable limitations under sections
sections 202 through 206 of GINA and
information about a manifested disease, 103(d)(1)–(4) of the Americans with
§§ 1635.4 through 1635.9 of this part.
disorder, or pathological condition of an Disabilities Act (42 U.S.C. 12112(d)(1)–
employee or member, even if the (4)), and regulations at 29 CFR 1630.13, [FR Doc. 2010–28011 Filed 11–8–10; 8:45 am]
disease, disorder, or pathological 1630.14, and 1630.16. BILLING CODE 6570–01–P
wwoods2 on DSK1DXX6B1PROD with RULES3

VerDate Mar<15>2010 15:36 Nov 08, 2010 Jkt 223001 PO 00000 Frm 00029 Fmt 4701 Sfmt 9990 E:\FR\FM\09NOR3.SGM 09NOR3

You might also like