HIPAAFTC / HHS HIPAA / State Privacy / GDPRcippVerified 2026-11-12

HIPAA: GINA: Genetic Information Nondiscrimination in Health and Employment

Authoritative Rule Summary (HIPAA)

Under HIPAA (FTC / HHS HIPAA / State Privacy / GDPR), gINA: Genetic Information Nondiscrimination in Health and Employment establishes the authoritative rules tested on the IAPP CIPP/US. This lesson details the specific prohibitions and limitations imposed by GINA on the use and disclosure of genetic information by health insurers and employers, including exceptions and enforcement mechanisms. VoraPrep verifies every threshold, worked table, and practice question below against the current IAPP CIPP/US blueprint.

Core Statutory Concepts

FeatureGINA Title I (Health Insurance)GINA Title II (Employment)
Prohibited ActionsDenying coverage, adjusting premiums, imposing pre-existing condition exclusions based on genetic informationRefusing to hire, firing, demoting, or making other employment decisions based on genetic information
Information HandlingCannot request or require genetic informationCannot request, require, or purchase genetic information
ConfidentialityN/A (prohibits collection/use)Must keep genetic information confidential and separate from personnel files
ExceptionsLimited exceptions for research, public health, and certain long-term care policiesLimited exceptions for inadvertent acquisition, wellness programs, FMLA certification, and public health
EnforcementDepartment of Labor, Treasury, and Health and Human ServicesEqual Employment Opportunity Commission (EEOC)
Test Yourself on HIPAA in 30 Seconds (No Login)IAPP CIPP/US · medium

A large manufacturing company requires all job applicants to undergo a mandatory pre-employment medical examination. During this examination, a genetic test is administered to identify predispositions to certain chronic occupational diseases, with the results directly used to inform hiring decisions for positions involving manual labor.

Worked Practitioner Scenario

Practitioner Application: GINA: Genetic Information Nondiscrimination in Health and Employment

A major pharmaceutical company is considering implementing a mandatory genetic screening program for all new hires to identify predispositions to certain chronic illnesses, arguing it will reduce long-term healthcare costs and improve workforce productivity. The company also plans to use this information to adjust health insurance premiums for existing employees based on their genetic risk profiles. A privacy officer must determine if these actions comply with federal law, specifically concerning the use of genetic information in both employment and health insurance contexts.

  1. The Genetic Information Nondiscrimination Act (GINA) of 2008 (42 U.S.C. § 2000ff et seq.) is a landmark federal law designed to protect individuals from discrimination based on their genetic information in both health insurance and employment. GINA addresses concerns that genetic testing could lead to unfair practices, preventing individuals from accessing healthcare or employment opportunities.
  2. Title I (Health Insurance): Prohibits health insurers from using genetic information to make eligibility, coverage, underwriting, or premium-setting decisions. It also prevents them from requesting or requiring genetic information from individuals or their family members. Title II (Employment): Prohibits employers from using genetic information in hiring, firing, promotion, or other employment-related decisions. It also restricts employers from requesting, requiring, or purchasing genetic information about employees or job applicants. Employers are generally required to keep any genetic information they lawfully possess confidential and in separate medical files.
Genetic Information: Includes an individual's genetic tests, the genetic tests of family members, and the manifestation of a disease or disorder in family members (family medical history). It also includes any request for or receipt of genetic services, or participation in clinical research that includes genetic services, by an individual or family member. Genetic Test: An analysis of human DNA, RNA, chromosomes, proteins, or metabolites that detects genotypes, mutations, or chromosomal changes.
Exam Watchouts & Statutory Boundaries

Common IAPP CIPP/US Distractors on HIPAA

  • 1GINA Title I prohibits health insurers from using genetic information for underwriting, premium setting, or coverage decisions.
  • 2GINA Title II prohibits employers from using genetic information in hiring, firing, promotion, or other employment decisions.
  • 3Genetic information includes genetic tests, family medical history, and genetic services.
  • 4Employers must keep lawfully acquired genetic information confidential and in separate medical files.
  • 5Limited exceptions exist for employers, such as inadvertent acquisition or voluntary wellness programs, but these do not permit discriminatory use of the information.

Frequently Asked Questions: HIPAA

What is the core rule under HIPAA (GINA: Genetic Information Nondiscrimination in Health and Employment)?

Under HIPAA (FTC / HHS HIPAA / State Privacy / GDPR), gINA: Genetic Information Nondiscrimination in Health and Employment establishes the authoritative rules tested on the IAPP CIPP/US. This lesson details the specific prohibitions and limitations imposed by GINA on the use and disclosure of genetic information by health insurers and employers, including exceptions and enforcement mechanisms. VoraPrep verifies every threshold, worked table, and practice question below against the current IAPP CIPP/US blueprint.

How is HIPAA tested on the IAPP CIPP/US?

GINA Title I prohibits health insurers from using genetic information for underwriting, premium setting, or coverage decisions. GINA Title II prohibits employers from using genetic information in hiring, firing, promotion, or other employment decisions.

Where can I practice IAPP CIPP/US questions on GINA: Genetic Information Nondiscrimination in Health and Employment?

Test yourself instantly with the free playable IAPP CIPP/US question on this page, or launch VoraPrep's full IAPP CIPP/US adaptive question bank, interactive lessons, and 1:1 exam simulator at voraprep.com/cipp.

Master HIPAA Across the VoraPrep Platform

Related Statutory & Regulatory Rules

All Rules →