What 23andMe's Bankruptcy Means for Genetic Data Privacy
In March 2025, direct-to-consumer DNA testing giant 23andMe filed for Chapter 11 bankruptcy protection. The once-celebrated biotech firm had reshaped the personal genomics landscape with promises of ancestral revelations and health predisposition insights. But as financial strains mounted, so too did privacy concerns—especially with sensitive genetic data hanging in the balance.
A Brief History of 23andMe
Launched in 2006, 23andMe became a household name by pioneering affordable DNA testing kits. Users could spit into a vial, send it off, and receive insights into everything from their Neanderthal ancestry to genetic risks for diseases like Parkinson’s and breast cancer. With celebrity endorsements and early funding from Google, the company rocketed to fame.
In 2021, 23andMe went public via a SPAC merger, valuing it at $3.5 billion. However, as demand dwindled and the cost of managing genetic databases soared, the business model faltered. Security breaches in 2023 further undermined consumer trust, and by 2025, bankruptcy became unavoidable.
Why This Bankruptcy Is Different
When most companies file for bankruptcy, the key assets up for sale are tangible—real estate, inventory, equipment. But 23andMe’s crown jewel is intangible: its vast database of genetic information from over 12 million customers.
This raises enormous privacy concerns:
- Who might buy this data?
- Will it be sold or licensed without consent?
- What safeguards are in place to prevent misuse?
Unlike passwords or financial data, your DNA is immutable—you can't change it, and it reveals deeply personal information about you and your relatives.
Data Privacy Risks in the Genetic Testing Industry
23andMe isn’t the only player in the consumer DNA space. But the bankruptcy highlights broader issues within the entire industry:
1. Data Reselling
Many genetic testing companies monetize by sharing anonymized data with research firms or pharmaceutical companies. While legal (with user consent), this practice becomes murkier when the company is insolvent.
2. Breaches and Hacks
In October 2023, 23andMe confirmed a massive data breach that exposed the personal data—including ancestry and genetic markers—of nearly 7 million users. The breach happened via a credential-stuffing attack, where hackers reused leaked passwords from other sites.
3. Re-identification Risks
Even anonymized genetic data can potentially be re-identified using AI and cross-referencing with public databases (like GEDmatch or social networks).
4. Law Enforcement Access
While 23andMe claims it doesn’t share data with law enforcement without a court order, once the data changes hands, new owners might not maintain that policy.
Regulations and Legal Safeguards (Or Lack Thereof)
Genetic data is protected to varying degrees depending on where you live. In the U.S., it's governed by a patchwork of laws:
- HIPAA: Protects health-related data but doesn’t cover all genetic testing services.
- GINA (Genetic Information Nondiscrimination Act): Prevents employers or insurers from discriminating based on genetic data—but has limitations.
- California Consumer Privacy Act (CCPA): Grants rights to delete personal data, including genetic information.
After 23andMe’s bankruptcy announcement, California Attorney General Rob Bonta reminded users of their right to request data deletion and sample destruction under the CCPA and the Genetic Information Privacy Act (GIPA).
What You Can Do Now to Protect Your DNA
If you’re a 23andMe customer, here are proactive steps you can take to protect your privacy:
1. Delete Your Genetic Data
Log into your account:
- Go to “Settings”
- Choose “Delete Your Data”
- Confirm permanent deletion
You can also request to download your data before deletion for personal records.
2. Request Sample Destruction
23andMe gives you the option to request your saliva sample be destroyed. This prevents future testing or data extraction.
3. Withdraw Research Consent
If you agreed to let 23andMe use your data for research, you can withdraw that consent in the account settings.
4. Monitor for Identity Theft
Genetic information can’t be used to open credit lines, but it can be exploited in health scams or phishing attacks. Be vigilant.
5. Stay Informed
Sign up for alerts from the California AG's office or privacy watchdogs to stay updated on any sale or transfer of 23andMe's data.
What This Means for the Industry
The collapse of 23andMe could be a turning point for consumer genetic testing. Here’s what to expect:
- Greater Regulatory Scrutiny: Legislators may push for stricter laws protecting genetic data, including during bankruptcy.
- Transparency Demands: Consumers will demand clearer terms about how their data is stored, used, and deleted.
- Decentralized Alternatives: Blockchain-based, decentralized genomics platforms may gain traction as safer options.
Other DNA testing companies like Ancestry.com and MyHeritage may also face increased pressure to clarify their privacy policies.
Should You Still Use DNA Testing Services?
It depends on your privacy comfort level. While DNA testing offers valuable health and ancestry insights, the tradeoff is entrusting sensitive data to a for-profit company.
Before using any service, ask yourself:
- What is their data retention policy?
- Who do they share data with?
- Can I delete my data later?
Also, check if the company allows you to remain anonymous or pseudonymous—a growing trend among privacy-conscious users.
Conclusion
The bankruptcy of 23andMe isn't just a corporate story—it’s a wake-up call for anyone who has shared their genetic information online. It underscores the urgent need for robust privacy protections and highlights the vulnerabilities in handing over something as personal and permanent as your DNA.
As consumers, we must demand transparency, stronger laws, and above all, control over our data.
FAQs
Q1: Why did 23andMe file for bankruptcy?
23andMe filed for Chapter 11 due to financial losses, declining user demand, and increased scrutiny following a major data breach.
Q2: Will my genetic data be sold during the bankruptcy?
While the outcome is unclear, there is concern that 23andMe’s data could be considered a saleable asset. Customers should act now to delete their data.
Q3: Is it safe to use other DNA testing services?
It can be, but do your research. Choose companies with transparent privacy policies and strong data protection measures.
Q4: How do I delete my 23andMe data?
Log into your account, navigate to Settings → Delete Data, and confirm. You can also request destruction of your saliva sample.
Q5: Can I withdraw from research studies I agreed to?
Yes. Go to your account settings and withdraw your research consent to ensure your data is not used further.
Disclaimer
This article is for informational purposes only and does not constitute legal or medical advice. Readers should consult appropriate professionals for personalized guidance regarding data privacy or health decisions.
Next Keir Starmer: Biography, Political Career & Latest Developments
Community Rules & Guidelines
1: Do not post email-id or any kind of personal information.
2: Do not post your own blog/website links.
3: For Help & Support use the Contact Us form.