23andNotme: Attorney general urges consumers delete accounts with genetic testing company

MONTGOMERY – Alabama Attorney General Steve Marshall is urging 23andMe account holders to consider taking steps to protect their personal data after the genetic testing company filed for Chapter 11 bankruptcy.

And, with the company seeking bidders, that means the DNA data of millions of users is up for sale.

“Folks have absolutely no say in where their data is going to go,” said Tazin Khan, CEO of the nonprofit Cyber Collective, which advocates for privacy rights and cybersecurity for marginalized people.

Marshall is urging 23andMe clients to protect their personal information by deleting personal accounts. The direct-to-consumer genetic testing company collects and analyzes an individual’s genetic code. It filed for bankruptcy Sunday.

“Given the uncertainty surrounding 23andMe’s bankruptcy, consumers should seriously consider deleting their accounts to protect their personal genetic data,” said Marshall. “Without clear assurances to protect consumer privacy or the future handling of accounts, deleting your account may be the safest way to ensure sensitive information isn’t obtained by those looking to do harm.

“Our office is closely watching the bankruptcy proceedings and plans to be actively engaged to ensure private information is protected according to Alabama law.”

Marshall has been monitoring 23andMe as part of the investigation into a data breach there in October 2023 that led to the exposure of the personal information of nearly 7 million Americans.

Consumers wishing to delete their accounts can file a request at this link: Requesting 23andMe Account Closure – 23andMe Customer Care.

Marshall’s office has provided these tips on protecting and deleting information from 23andMe:

To delete genetic data from 23andMe

1. Log into your 23andMe account on their website.
2. Go to the “Settings” section of your profile.
3. Scroll to a section labeled “23andMe Data” at the bottom of the page.
4. Click “View” next to “23andMe Data”
5. Download your data: If you want a copy of your genetic data for personal storage, choose the option to download it to your device before proceeding.
6. Scroll to the “Delete Data” section.
7. Click “Permanently Delete Data.”
8. Confirm your request: You’ll receive an email from 23andMe; follow the link in the email to confirm your deletion request.

To destroy your 23andMe test sample

• If you previously opted to have your saliva sample and DNA stored by 23andMe, but want to change that preference, you can do so from your account settings page, under “Preferences.”

To revoke permission for your genetic data to be used for research

• If you previously consented to 23andMe and third-party researchers to use your genetic data and sample for research, you may withdraw consent from the account settings page, under “Research and Product Consents.”