23Andme, a biotechnology company which offers genetic analyzes to individuals, goes bankrupt and now is looking for a buyer. Doubt is hanging on the risk of resale or leakage of genetic data from its 15 million customers.
In recent years, DNA kits, which can be bought on the Internet, have been wind in the sail in the United States and Europe-even if the practice is very controversial. The principle is simple: just send samples of DNA to have them analyzed. The company can then provide its customers detailed information on their ancestry, by allowing them to explore their genetic heritage, to obtain an overview of the risk and genetic characteristics in terms of health, and even to come into contact with distant parents. But what about the confidentiality of such data? This is the question that the 15 million users of 23 and the company are currently asking today.
23andme bankruptcy: a hacking that will have been fatal
The so -called recreational genetic tests are legal in several European countries. However, France has prohibited them. It authorizes genetic tests only at the request of the court, in the context of a search for paternity, or for medical purposes or scientific research. It is therefore prohibited to buy a DNA test directly from a company or via an online platform. But that does not actually prevent the French from getting them without too much difficulty – advertisements for DNA kits are even recurrent on the Internet and social networks. Remember, however, that those who decide to submit a DNA sample outside the legal framework run a fine of 3,750 euros. Companies that offer this service risk a year of imprisonment or € 15,000 fine.
While some have already allowed themselves to be tempted by the adventure, they would be good to pay attention to what happens to their precious genetic data. Indeed, one of the American giants in the sector, 23andme, is in very bad posture. Founded in 2006, it experienced a dizzying fall on the stock market. The fault of a market that runs out of steam – it is difficult to retain customers, who generally only need a single test during their lifetime – but, above all, piracy having taken place in December 2023, which seriously tainted the reputation of the company (see our article). As a reminder, DNA data of nearly 7 million individuals had been compromised and then sold on the Dark Web. The company will now be subject to a call for tenders to be bought.
Bankruptcy of 23andme: the confidentiality of compromised data?
But then, what will happen to the precious data of its customers? In A blog post23andme ensures that the bankruptcy process will not affect how customer data is stored, managed or protected. According to her, any potential buyer must comply with the applicable laws concerning the processing of customer data. But, given that its privacy policies allow the sale of data to other firms and given the business of the company, it is completely legitimate to be somewhat worried.
However, there is a solution. By requesting the analysis of his DNA, the customer transmits sensitive information protected by law because it makes it possible to identify a person. As the European Consumer Center explainsthe General Data Protection Regulation (GDPR) guarantees European consumers rights such as access, modification, erasure and the right to information concerning their data. It also applies to laboratories located outside the EU which offer tests to European consumers. Also, to avoid the risks of marketing or hacking of the genetic database, it is better to request the erasure of its data in the laboratory, directly on the 23andme site, from the Settings tab. The game is well worth the candle!