23andMe, a personal genetic testing company, has recently filed for Chapter 11 bankruptcy, raising concerns about the privacy and security of its customers’ genetic data.
Data Breach History
In October 2023, 23andMe experienced a significant data breach due to a credential stuffing attack, compromising the personal and genetic data of approximately 5.5 million users.
Current Data Protection Policies
Despite the bankruptcy, 23andMe asserts that its data protection policies remain unchanged. The company maintains that it will not share users’ genetic information with employers, insurance companies, or law enforcement without explicit consent, unless required by law. Additionally, 23andMe complies with the General Data Protection Regulation (GDPR) for its European users, ensuring robust data privacy and security measures.
Recommendations for Customers
Given the company’s financial instability and the potential for data to be accessed or sold during bankruptcy proceedings or a merger, experts recommend that customers take proactive steps to protect their data.
This includes deleting their 23andMe accounts and requesting the destruction of their genetic samples. For California residents, the Attorney General has highlighted the right to delete genetic data under state privacy laws.
How to Delete Your 23andMe Account and Data
- Log into your 23andMe account.
- Navigate to the “Settings” section.
- Scroll to the “23andMe Data” section.
- Click “View” next to “23andMe Data.”
- To download your data, select the option to download it to your device.
- In the “Delete Data” section, click “Permanently Delete Data.”
- Confirm your request via the email sent by 23andMe.
Conclusion
While 23andMe has historically implemented measures to protect customer data, the recent bankruptcy and past data breaches have heightened concerns about data privacy. Customers are advised to review the company’s current data protection policies and consider actions such as account deletion and sample destruction to safeguard their genetic information.