23andMe, the widely recognized DNA testing company, has officially filed for Chapter 11 bankruptcy and is actively seeking a buyer, the company announced Sunday. Despite assurances that customer data will remain protected during the potential sale, California’s Attorney General Rob Bonta is urging users to take matters into their own hands by deleting their information.
The Fallout from a Major Data Breach
The bankruptcy announcement follows a tumultuous period for 23andMe, particularly after a 2023 data breach compromised nearly 7 million customer profiles. The security incident significantly impacted the company’s financial standing, sending its stock price into a nosedive and ultimately leading to a $30 million class-action lawsuit settlement.
Amid these developments, co-founder and CEO Anne Wojcicki has stepped down from her leadership role. In a statement on social media, she expressed gratitude to 23andMe’s 15 million customers and disclosed her intent to make a bid for the company.
What Happens to Genetic Data?
Users who have submitted their DNA samples to 23andMe have done so primarily to explore their ancestry and potential health risks. Additionally, an estimated 85% of customers have consented to allow their genetic data to be used in medical research. However, consumer advocates warn that protections for this type of sensitive information remain weak, as most home DNA testing companies are not subject to the stringent privacy regulations outlined in the Health Insurance Portability and Accountability Act (HIPAA).
In light of the bankruptcy proceedings, there is uncertainty surrounding how a new buyer might handle existing genetic data. Mark Jensen, chair of 23andMe’s board, issued a statement emphasizing the company’s commitment to safeguarding user data and maintaining transparency. However, privacy experts and officials are advising customers to take proactive measures to secure their personal information.
Steps to Delete Your 23andMe Data
For those who wish to remove their genetic information from 23andMe’s records, the following steps can be taken:
- Log into your account and navigate to Settings.
- Scroll to the bottom of the page and select “23andMe Data,” then click “View.”
- Download a copy of your genetic information if desired.
- Select “Delete Data” and then confirm with “Permanently Delete Data.”
- Request the destruction of your genetic material through the Settings menu.
- Revoke permission for your genetic material to be used in future research under the “Research and Product Consents” section.
It’s important to note that 23andMe requires additional verification before processing a deletion request, and users must confirm their request via an email from the company. Customers encountering difficulties can reach out to customercare@23andme.com for assistance.
While 23andMe has stated that some minimal information—such as a record of the deletion request—will be retained even after account removal, consumer advocates stress the importance of taking action now. With uncertainty surrounding the company’s future, privacy-conscious users may want to err on the side of caution and remove their genetic data as soon as possible.
