Congress Is Investigating 23andMe’s Dealing with of Private Knowledge

Republican lawmakers related to the Home Committee on Power and Commerce are probing the 23andMe chapter out of concern for Individuals’ DNA data.

The troubled genomics firm has been in a downward spiral ever because it suffered an unlucky information breach in 2023. The corporate has since endured a maelstrom of battle and controversy, together with layoffs, litigation, and a plummeting monetary valuation. In March, it filed for Chapter 11 chapter and has been in search of a purchaser for its genetic information enterprise ever since.

On Friday, Congressmen Brett Guthrie (R-KY), Gus Bilirakis (R-FL), Gary Palmer (R-AL), sent a letter to 23andMe making a number of inquiries in regards to the firm’s dealing with of Individuals’ information. The letter notes {that a} choose “just lately dominated 23andMe has the proper to promote the delicate medical and genetic data of its 15 million prospects, which is taken into account to be the corporate’s most precious asset” and states that, with “the dearth of a federal complete information privateness and safety regulation, we write to precise our nice concern in regards to the security of Individuals’ most delicate private data.”

The letter notes that some prospects have reported difficulties in deleting their accounts and knowledge, and asks the corporate to clarify what number of of these deletion requests have been fulfilled. It additionally asks whether or not the corporate has a “vetting course of” in place to find out whether or not its potential purchaser has a “historical past of implementing information safety protections and compliance with sectoral, state, or every other information privateness and safety legal guidelines.”

It must be famous that whereas the Republican letter complains of an absence of a “federal complete information privateness” regulation, lawmakers have solely themselves accountable for this, given the truth that there have been a number of (failed) makes an attempt to cross such a regulation.

Gizmodo reached out to 23andMe for remark.

Concern for 23andMe person information could also be excessive, though the corporate has repeatedly promised to proceed defending prospects’ data. A press release from March notes that to “represent a certified bid, potential patrons should, amongst different necessities, conform to adjust to 23andMe’s client privateness coverage and all relevant legal guidelines with respect to the therapy of buyer information.” In different phrases, the info privateness assurances that the corporate at the moment guarantees can be carried over to no matter firm buys the enterprise.

You might really feel that doesn’t quantity to a lot, given the truth that the corporate has already allowed person data to be compromised through its earlier information leak. In that case, you possibly can nonetheless ask the corporate to delete your data through the method described here, courtesy of the Digital Frontier Basis.