In a significant development, genetic testing company 23andMe has filed for Chapter 11 bankruptcy protection, leading to heightened concerns over the security of sensitive customer data. California Attorney General Rob Bonta has issued a consumer alert urging the company’s 15 million users to delete their genetic information to prevent potential misuse.
Founded in 2006, 23andMe gained prominence by offering direct-to-consumer DNA testing kits, enabling individuals to explore their ancestry and health predispositions. However, the company has faced mounting challenges, including a substantial data breach in 2023 that compromised the personal information of nearly 7 million customers. This breach, coupled with declining demand for genetic testing services, has culminated in the company’s recent bankruptcy filing.
Attorney General Bonta emphasized the urgency for consumers to exercise their rights under California’s privacy laws, such as the Genetic Information Privacy Act (GIPA) and the California Consumer Privacy Act (CCPA). These statutes empower individuals to request the deletion of their genetic data and the destruction of any stored biological samples. Bonta stated, “California has robust privacy laws that allow consumers to take control and request that a company delete their genetic data.”
Steps to Delete Your Genetic Data from 23andMe:
- Log into Your Account: Access your 23andMe account through the company’s website.ABC7 Los Angeles
- Navigate to Settings: Click on your profile and select the “Settings” option.
- Manage Your Data: Scroll to the “23andMe Data” section and choose “View.”
- Download and Delete: If desired, download your data for personal records, then proceed to delete your genetic information and request the destruction of your biological sample.
Despite assurances from 23andMe that customer data privacy will be maintained during the bankruptcy proceedings, concerns persist about the potential sale of assets, including genetic data, to third parties. Legal experts highlight that while privacy policies and state laws offer some protection, the bankruptcy process may introduce uncertainties regarding data handling.
Customers are advised to act promptly to safeguard their personal information. Deleting genetic data not only protects individual privacy but also mitigates risks associated with potential data transfers during the company’s restructuring.
