California Attorney General Rob Bonta has warned 23andMe customers to delete their genetic data amid the company’s financial instability. Californians have the right to request data deletion under state privacy laws.
What’s Happening with 23andMe?
23andMe, a genetic testing company based in California, has filed for Chapter 11 bankruptcy protection. The company, which provides ancestry and health insights through DNA analysis, is facing financial difficulties and has expressed doubts about its ability to continue operating. This has raised concerns about the security of the sensitive genetic data it holds.
Your Rights Under California Law
California’s Genetic Information Privacy Act (GIPA) and California Consumer Privacy Act (CCPA) give consumers the right to request the deletion of their genetic data and the destruction of any stored biological samples. Attorney General Bonta emphasized these rights in his alert, urging Californians to act promptly.
How to Delete Your Data from 23andMe
To delete your genetic data from 23andMe, follow these steps:
- Log into your 23andMe account.
- Go to the “Settings” section of your profile.
- Scroll to the “23andMe Data” section at the bottom of the page.
- Click “View” next to “23andMe Data.”
- Download your data (optional).
- Scroll to the “Delete Data” section and click “Permanently Delete Data.”
- Confirm your request via the email sent by 23andMe.
Additional Steps
If you previously opted to store your saliva sample or consented to research use, you can revoke these permissions under “Preferences” and “Research and Product Consents” in your account settings.
Why This Matters
Genetic data is highly sensitive and unique to each individual. In the event of a company’s bankruptcy, this data could be sold or accessed by third parties, including hackers. A 2023 data breach at 23andMe exposed the genetic information of nearly 7 million customers, highlighting the risks.
Expert Insights
“Genetic data isn’t just a bit of personal information — it is a blueprint of your entire biological profile,” said Adrianus Warmenhoven, a cybersecurity expert at NordVPN. “When a company goes under, this personal data is an asset to be sold with potentially far-reaching consequences.”
What’s Next for 23andMe?
23andMe is seeking to sell its assets through the bankruptcy process. Former CEO Anne Wojcicki has resigned and plans to bid on the company. The firm has assured customers that their data will remain protected, but experts caution that privacy laws have limitations, especially in the absence of a federal privacy law in the U.S.
For more information on your rights under the CCPA, visit the California Attorney General’s website.