The DNA and 23Adme genetic testing company is in turmoil after 2023 data breach and its ongoing economic decline. The giant, who has now been dense now, is facing an uncertain future as bankruptcy develops over the company, intensifying concerns about what can happen to the genetic data of about 15 million customers of the 23ndme.
The most well -known for saliva -based test kits that offer a look at a person’s genetic origin, 23andme has seen its value fall over 99% from the top of $ 6 billion since it published in early 2021 after failing to make a profit.
This lack of profit was attributed to the reduced consumer interest in the use of use use during the use of 23AndME and the lack of development of its subscription services. The company was also in the context of a huge breach of data that saw hackers steal the data of approximately 7 million users throughout 2023. The company Agreed in September pay $ 30 million to settle a violation -related lawsuit.
Less than a week later, the founder and chief executive of the 23ndMe Anne Wojcicki said he “examines the acquisition proposals” for the company. Wojcicki quickly turned the statement instead of saying that was planning to take the company private. But the damage was done and all independent members of the Board of Directors of the company resigned with immediate effect.
Following the deposit for the protection of bankruptcy in March 2024, the company’s assets-including huge DNA data banks-will be sold through sale supervised by the court. Wojcicki also resigned from the company.
Where does it leave the genetic data of millions of people?
23andme is largely bound by his own rules
As evidenced by the breach of 2023 data, which saw hackers steal information such as the genetic predisposition of users and the reports of origin, the 23andme collects a ton of information about its users.
If you are one of the many millions that have sent your saliva to 23 and to find out about your origin, you may have assumed that this data will remain private by law, such as the law on portability and accountability of health insurance. Hipaa, as is well known, sets standards for the protection of sensitive health information from being disclosed without a person’s knowledge or consent.
However, 23andme is not a company covered by Hipaa. Therefore, 23andme is largely linked only to its own privacy policies, which can be changed at any time.
Andy Kill, a 23ndme spokesman, told TechCrunch that the company believes this is a “more appropriate and transparent model for the data we handle rather than the Hipaa model used by the traditional healthcare industry”.
The lack of federal regulation and a full chaos of privacy laws ultimately means that if 23andme faces a sale, millions of Americans are also on the table. The company’s privacy policy states that the personal information of its customers “can access, be sold or transferred” in the context of bankruptcy, merger, redemption, reorganization or sale.
The fact that customers’ data is a salespeople also was also shared by Wojcicki, who According to information, he told investors That 23AndME will no longer pursue the drug development programs it causes in relation to costs and will focus on marketing the huge customer data database of pharmaceutical companies and researchers.
23andme argues that data privacy policies would not change in the event of sale. These policies state that the company will never share the information of users with insurance companies or by law enforcement. The latter have increasingly turned into third -party DNA companies for genetic information, but 23andme has so far resisted all US law enforcement requests for such data, according to In the report of long transparency.
Potential buyers of the 23ndme can have completely different ideas on how to use the potentially valuable TROVE DATA DATA DNA of the company. Privacy Supporters at the Electronic Frontier Foundation of the Digital Rights Group have has already prompted 23 and resist a sale In any company with law enforcement, warning that customer genetic data could be used by the police to seek outrageous evidence of crimes.
“Our commitment to implement the terms of our Privacy Policy to our customers’ personal information in the event of sale or transfer is clear: The 23ndME terms of service and personal data protection will remain in place and until customers are presented and agreeing on new terms and statements – Kill, TechCrunch said.
Delete your account preventively
Now, as 23andme faces bankruptcy, there are calls for customers 23 and take action to protect their data from sale.
California’s Attorney General Rob Bonta require deleting their genetic data In accordance with state law.
Meredith Whittaker, president of the implementation signal of end to end messages, told a post on x: “It’s not just you. If someone in your family gave your DNA [23andMe]For all your grace, close your account now. ”
Eva Galperin, director of cyberspace at EFF, also warned users to take action. “If you have a 23andme account, today is a good day to log in and request deletion of your data,” Galperin told a Post in x.
The application for deletion of your data at 23AndME is relatively easy.
Log in to your 23AndMe account and go to the Arrangements > Account information > Delete your account. 23andme will ask you to confirm your decision, warning that deleting your account is permanent and irreversible.
There is an important warning. As noted in the 23ndMe Privacy Policy, the deletion of an account “is subject to maintenance requirements and some exceptions”, which means that the company can maintain some of your data for an unspecified period of time.
For example, 23AndME will maintain your genetic information, date of birth and gender “as required for compliance” and will maintain limited data on your deletion request “including, indicative of your email address, your account deletion request, communications related to investigations or lawsuits”.
Similarly, if you have already agreed with the 23AndME sharing your data for research purposes, you can reverse this consent, but there is no way to delete this information. Kill tells TechCrunch that about 80% of 23 and customers – about 12 million people – agrees to participate in his research program.
It was first published on October 19, 2024 and has been informed since.