The recent bankruptcy filing of 23andMe – a company known for home DNA kits – has raised significant concerns regarding the fate of the genetic data of its 15 million customers. As the company seeks to sell its assets, questions arise about whether personal DNA information could be transferred to new ownership and how it might be used.
23andMe's extensive database of genetic information is considered one of its most valuable assets. Legal experts indicate that during bankruptcy proceedings, such assets can be sold to satisfy creditors. This means customer data could potentially be transferred to new entities, depending on the terms set by the bankruptcy court.
According to 23andMe's privacy policy, in events like bankruptcy, personal information may be accessed, sold, or transferred as part of the transaction. This clause has heightened customer concerns about the potential misuse or unauthorized access to their sensitive genetic data.
While 23andMe has assured that customer data management and protection remain unchanged during the bankruptcy process, the future intentions of potential buyers regarding this data remain uncertain. Legal protections for genetic information vary by jurisdiction, and existing laws may not fully address the nuances of such data transfers.
In light of these developments, customers are advised to take proactive steps to manage their genetic information. This includes downloading and securely storing their data, opting out of research programs, and requesting the deletion of their biological samples.
Customers can request that their data be permanently deleted by visiting 23andme.com. Under “settings,” click “23andMe Data,” then click “view,” and download your data. After downloading, you can click “delete data” and then “permanently delete data.” You’ll have to confirm your request through an email you should receive.
However, even after such actions, some data may still be retained due to legal or technical constraints.
As the situation unfolds, customers should stay informed and take necessary measures to safeguard their personal data.