Staff Reporter

If you’re among the 15 million individuals who shared your DNA with 23andMe, it’s time to take action. Experts are urging users to delete their data immediately.

The genetic testing company filed for bankruptcy on March 23 and is actively seeking to sell its assets. California Attorney General Rob Bonta issued a “consumer alert” on March 21, according to a report by The Washington Post.

“I remind Californians to consider invoking their rights and directing 23andMe to delete their data and destroy any genetic material samples held by the company,” Bonta stated.

While 23andMe claims that its data protections will remain intact during the bankruptcy process, privacy advocates express concern. If you don’t act now, your personal information could end up in the hands of new owners or be used in ways you didn’t anticipate.

The company’s website states, “If ownership changes in the future, your data will remain protected under the current 23andMe Privacy Policy unless you are presented with materially new terms, with appropriate advance notice to review those changes as required by law.”

Founded in 2006, 23andMe gained recognition for its saliva-based tests that provide insights into ancestry and health traits. However, the company has faced significant challenges in recent years, with its valuation plummeting from $6 billion in 2021 to just $50 million today.

Additionally, a massive data breach in 2023 compromised information from approximately 7 million users, revealing names, birth years, and family trees.

Last September, the board of directors resigned following CEO Anne Wojcicki’s attempt to take the company private. On Sunday, Wojcicki stepped down as CEO but will remain on the board while announcing her plans to purchase the company.

In a recent filing, 23andMe stated it “intends to continue operating its business in the ordinary course throughout the sale process.”

Meanwhile, experts are stressing the importance of protecting your DNA data.

“The DNA data can reveal your relatives and ancestry, uncover family secrets, and provide insights into diseases you may have or be predisposed to.

If this data falls into the hands of certain insurers, they might deny you coverage or charge higher rates for life, disability, or long-term care insurance based on your genetics,” said Ginny Fahs, director at Consumer Reports’ Innovation Lab.

“This is some of the most sensitive information about you; it’s understandable to be concerned that it may be vulnerable.”

The company’s privacy statement notes, “if we are involved in a bankruptcy, merger, acquisition, reorganization, or sale of assets, your Personal Information may be accessed, sold, or transferred as part of that transaction.”

Thanks to California privacy laws, including the Genetic Information Privacy Act, individuals can request that 23andMe delete their genetic data and destroy their samples. Many other states have similar regulations.

Here’s how to delete your 23andMe data, according to The Washington Post:

1. Log into your 23andMe account.
2. Go to your Profile, then tap Settings.
3. Scroll down to the “23andMe Data” section and click View.
4. Choose to download your data if desired.
5. Scroll to “Delete Data” and click Permanently Delete Data.
6. Confirm your request by clicking the link in the email you receive.

After deletion, 23andMe states it will discard your sample and unenroll you from any research programs.