Will 23andMe Sell Millions of People’s Genetic Data?

Genetic Testing Giant 23andMe Files for Bankruptcy – What Happens to User Data?

Genetic testing and biotechnology company 23andMe has filed for bankruptcy, raising concerns about the future of the genetic data of over 15 million users. Founded in 2006, the company has faced multiple challenges over the years, including lawsuits over data breaches and the resignation of independent board directors. The shutdown of its drug development division further escalated its troubles, leading to the current search for potential buyers.

With millions of people’s personal and genetic data in its possession, the big question now is: What will happen to this sensitive data if the company is sold or liquidated?

23andMe and Its Genetic Data Collection

23andMe specializes in collecting genetic data from customers to provide insights into ancestry, health risks, and potential future diseases. This information is highly sensitive, as it contains a complete genetic blueprint of individuals. The company’s potential sale has sparked concerns regarding how this genetic data will be handled.

According to Anya Prince, a professor at the University of Iowa College of Law, the company’s privacy policy states that in the event of bankruptcy, user data may be transferred to a new entity or even sold.

Will the New Owner Have to Follow 23andMe’s Privacy Policy?

Prince points out that while 23andMe’s privacy policy states that a new company must adhere to existing policies, there is a critical loophole: the new company can change the policy at any time. This means that even if users initially agreed to strict privacy terms, a new owner might alter them without consent.

Security concerns around genetic data are not new. In 2023, 23andMe suffered a major data breach that leaked data from approximately 7 million users, some of which ended up for sale on the dark web.

Potential Risks of Selling Genetic Data

If 23andMe’s assets, including genetic data, are sold, potential risks include:

• Privacy violations: Customers may not have control over how their genetic data is used.
• Insurance and employment discrimination: Companies or governments could potentially use this data to assess health risks unfairly.
• Government surveillance: Law enforcement agencies might gain access to genetic data without user consent.
• Data exploitation by third parties: Marketing firms or pharmaceutical companies may use this data for commercial gain.

What Can Users Do to Protect Their Data?

If you are a 23andMe customer, here are some steps to consider:

• Delete Your Data: Some companies allow you to request data deletion. You can check 23andMe’s policies for more details.
• Monitor Data Breaches: Keep track of whether your data has been leaked using services like Have I Been Pwned?
• Advocate for Stronger Regulations: Support stronger genetic privacy laws to prevent misuse of your data.

The Future of 23andMe and Genetic Privacy

The case of 23andMe serves as a wake-up call for the biotech industry and users alike. With genetic data becoming an increasingly valuable commodity, users need to be aware of where their data goes and how it’s used. Governments worldwide must implement stringent data protection laws to prevent misuse.

As the company looks for buyers, all eyes are on what happens next—will genetic privacy be safeguarded, or will it be another case of big tech monetizing personal information? Only time will tell.