The law requires businesses to establish certain protections when using personal information. Personal information is defined to include an individual's genetic print.