NPR Online News

Dozens of states sue to block the sale of 23andMe personal genetic data

Twenty-seven states and the District of Columbia on Monday filed a lawsuit in bankruptcy court seeking to block 23andMe from selling personal genetic data without customer consent as the company undergoes Chapter 11 bankruptcy proceedings.

ConsumerAffairs

Twenty-seven states and the District of Columbia on Monday filed a lawsuit in bankruptcy court seeking to block 23andMe from selling personal genetic data without customer consent as the company undergoes Chapter 11 bankruptcy proceedings.

Regeneron Pharmaceuticals in <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.improvethenews.org/story/2025/regeneron-acquires-andme-for-m-amid-privacy-concerns">May announced plans to acquire 23andMe for $256 million</a>, with the deal requiring court approval and facing scrutiny from a court-appointed consumer privacy ombudsman who must report findings by Tuesday.

Regeneron Pharmaceuticals in May announced plans to acquire 23andMe for $256 million, with the deal requiring court approval and facing scrutiny from a court-appointed consumer privacy ombudsman who must report findings by Tuesday.

The lawsuit argues that biological samples, DNA data, health-related traits and medical records are too sensitive to be sold without each person's express, informed consent, with Oregon Attorney General Dan Rayfield stating the data "cannot be sold like ordinary property.".</span

Oregon Department of Justice

The lawsuit argues that biological samples, DNA data, health-related traits and medical records are too sensitive to be sold without each person's express, informed consent, with Oregon Attorney General Dan Rayfield stating the data "cannot be sold like ordinary property.".

23andMe <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.improvethenews.org/story/2025/andme-files-bankruptcy-as-ceo-exits-amid-takeover-drama">filed for Chapter 11 bankruptcy protection in March</a> after struggling financially since going public in 2021, laying off 40% of its staff and raising concerns about the safety of customer data from more than 15 million users.

Ibtimes

23andMe filed for Chapter 11 bankruptcy protection in March after struggling financially since going public in 2021, laying off 40% of its staff and raising concerns about the safety of customer data from more than 15 million users.

The company previously suffered a major data breach in 2023 that affected nearly 7 million customers. Hackers leaked personal data, including origin estimation, phenotype, health information, photos, and identification data on online forums.

Quartz

The company previously suffered a major data breach in 2023 that affected nearly 7 million customers. Hackers leaked personal data, including origin estimation, phenotype, health information, photos, and identification data on online forums.

NPR Online News #1

NPR Online News #1804

23andMe filed for Chapter 11 bankruptcy protection in March after struggling financially since going public in 2021, laying off 40% of its staff and raising concerns about the safety of customer data from more than 15 million users.</span

The company previously suffered a major data breach in 2023 that affected nearly 7 million customers, with hackers leaking personal data including origin estimation, phenotype, health information, photos and identification data on online forums.</span

Quartz #

The company previously suffered a major data breach in 2023 that affected nearly 7 million customers, with hackers leaking personal data including origin estimation, phenotype, health information, photos and identification data on online forums.

Regeneron has stated it will comply with 23andMe's existing privacy policies and applicable law, processing customer data in accordance with current consents, privacy policies, terms of service and notices while maintaining security controls to protect the information.</span

Regeneron has stated it will comply with 23andMe's existing privacy policies and applicable law, processing customer data in accordance with current consents, privacy policies, terms of service and notices while maintaining security controls to protect the information.

This lawsuit represents a crucial stand for consumer privacy rights in the digital age. DNA data is fundamentally different from ordinary commercial information - it's permanent, immutable, and affects not just current customers but their relatives and future generations. The states are right to demand explicit consent before any transfer.

This lawsuit represents a crucial stand for consumer privacy rights in the digital age. DNA data is fundamentally different from ordinary commercial information - it's permanent, immutable, and affects not just current customers but their relatives and future generations. The states are right to demand explicit consent before any transfer.

Multi-State Lawsuit Aims to Block Sale of 23andMe Personal Genetic Data

States file suit to block the sale of 23andMe data

Regeneron has committed to honoring all existing privacy agreements and maintaining robust security protections for customer data. The acquisition could actually strengthen data security by placing genetic information under the control of an established pharmaceutical company with proven compliance capabilities.

Regeneron has committed to honoring all existing privacy agreements and maintaining robust security protections for customer data. The acquisition could actually strengthen data security by placing genetic information under the control of an established pharmaceutical company with proven compliance capabilities.

27 states seek to block 23andMe from selling DNA info, citing privacy concerns

27 States Sue to Block 23andMe DNA Data Sale Without Consent

Genetics & heredity

Privacy

United States of America

These states are making a crucial stand for consumer privacy rights in the digital age. DNA data is fundamentally different from ordinary commercial information — it's permanent, immutable, and affects current customers and their relatives for future generations. It's right to demand explicit consent before any transfer.

These states are making a crucial stand for consumer privacy rights in the digital age. DNA data is fundamentally different from ordinary commercial information — it's permanent, immutable, and affects current customers and their relatives for future generations. It's right to demand explicit consent before any transfer.

27 States Sue to Block 23andMe DNA Data Sale Without Consent

27 States Sue to Block 23andMe DNA Data Sale Without Consent

The Spin

Articles on this story

Sign Up for Our Free Newsletters
Sign Up for Our Free Newsletters

27 States Sue to Block 23andMe DNA Data Sale Without Consent

27 States Sue to Block 23andMe DNA Data Sale Without Consent

The Spin

Articles on this story

Sign Up for Our Free NewslettersSign Up for Our Free Newsletters

Sign Up for Our Free Newsletters
Sign Up for Our Free Newsletters