New York AG Urges 23andMe Customers to Delete Genetic Data Amid Bankruptcy

New York Attorney General Letitia James is urging users of genetic testing company 23andMe to delete their personal data and request the destruction of any retained DNA samples. The call comes in response to the company’s Chapter 11 bankruptcy filing, announced on March 24th. 23andMe revealed plans to sell substantially all of its assets as part of the reorganization, raising concerns over the future ownership and potential misuse of sensitive genetic information stored by the firm.

In her statement released on March 25th, James said, “New Yorkers’ genetic data is sensitive information that must be protected at all costs. 23andMe’s bankruptcy announcement is concerning and I am urging New Yorkers to take action to safeguard their data.” The company, once known for its ancestry and health risk DNA reports, faces over $214 million in debt. James has advised consumers to follow official procedures to delete their 23andMe data and destroy any stored saliva samples.

The San Francisco-based company had previously gained prominence for allowing millions of customers to explore their genetic makeup. However, as reported by The Globe and Mail, industry experts have warned that genetic data, once collected, can be difficult to fully erase and might be viewed as a valuable asset in bankruptcy proceedings. Concerns have been raised about potential sales of this information to biotech and pharmaceutical firms despite legal obligations to maintain privacy protections.

James’ alert included detailed instructions for users, including accessing account settings to request data deletion, withdrawing research consents, and requesting the disposal of physical DNA samples. 23andMe’s business model has previously included partnerships with drug developers and other researchers. Cybersecurity analysts have cautioned that a transfer of data ownership during a bankruptcy sale could pose serious privacy risks. Experts at Columbia University emphasized that DNA data, unlike passwords or credit cards, cannot be changed if compromised.

Despite 23andMe’s assurances that the bankruptcy will not affect how it manages or stores user data, officials remain skeptical. The company had previously faced lawsuits and settlements related to data breaches. The attorney general’s office has advised that users who experience issues deleting their data should contact her office directly. Consumer privacy organizations have also echoed the importance of proactive action by users.