Congress Is Investigating 23andMe’s Dealing with of Private Knowledge

Republican lawmakers related to the Home Committee on Power and Commerce are probing the 23andMe chapter out of concern for People’ DNA data.

The troubled genomics firm has been in a downward spiral ever because it suffered an unlucky knowledge breach in 2023. The corporate has since endured a maelstrom of battle and controversy, together with layoffs, litigation, and a plummeting monetary valuation. In March, it filed for Chapter 11 chapter and has been in search of a purchaser for its genetic knowledge enterprise ever since.

On Friday, Congressmen Brett Guthrie (R-KY), Gus Bilirakis (R-FL), Gary Palmer (R-AL), sent a letter to 23andMe making a number of inquiries concerning the firm’s dealing with of People’ knowledge. The letter notes {that a} choose “just lately dominated 23andMe has the proper to promote the delicate medical and genetic data of its 15 million prospects, which is taken into account to be the corporate’s most precious asset” and states that, with “the dearth of a federal complete knowledge privateness and safety regulation, we write to precise our nice concern concerning the security of People’ most delicate private data.”

The letter notes that some prospects have reported difficulties in deleting their accounts and data, and asks the corporate to clarify what number of of these deletion requests have been fulfilled. It additionally asks whether or not the corporate has a “vetting course of” in place to find out whether or not its potential purchaser has a “historical past of implementing knowledge safety protections and compliance with sectoral, state, or another knowledge privateness and safety legal guidelines.”

It ought to be famous that whereas the Republican letter complains of an absence of a “federal complete knowledge privateness” regulation, lawmakers have solely themselves responsible for this, given the truth that there have been a number of (failed) makes an attempt to cross such a regulation.

Gizmodo reached out to 23andMe for remark.

Concern for 23andMe person knowledge could also be excessive, though the corporate has repeatedly promised to proceed defending prospects’ data. A press release from March notes that to “represent a certified bid, potential consumers should, amongst different necessities, comply with adjust to 23andMe’s client privateness coverage and all relevant legal guidelines with respect to the therapy of buyer knowledge.” In different phrases, the info privateness assurances that the corporate at the moment guarantees will probably be carried over to no matter firm buys the enterprise.

It’s possible you’ll really feel that doesn’t quantity to a lot, given the truth that the corporate has already allowed person data to be compromised through its earlier knowledge leak. If that’s the case, you possibly can nonetheless ask the corporate to delete your data through the method described here, courtesy of the Digital Frontier Basis.