Missouri Attorney General Andrew Bailey announced July 2 that his office, in coordination with a multistate coalition, has secured significant consumer privacy protections as part of the approved sale of genetic testing company 23andMe to a nonprofit research entity.
Following 23andMe’s bankruptcy filing in 2023 after a major cybersecurity breach, the $305 million sale to the TTAM Research Institute—founded by 23andMe’s original CEO Anne Wojcicki—was approved by a Missouri bankruptcy court on June 27. Bailey and other attorneys general had raised concerns over the potential sale or misuse of sensitive genetic data, prompting court objections.
“This sale is now subject to strong privacy protections that will safeguard consumer information and ensure accountability going forward,” said Bailey.
Under the terms of the agreement:
- Consumer DNA data will not be transferred and will remain under existing privacy protections.
- Consumers retain the right to permanently delete their data, with new enforcement and oversight measures in place.
- Any future data sale must meet current privacy and legal standards.
- Customer data cannot be shared with foreign entities considered national security risks.
- A Consumer Privacy Advisory Board will be established to monitor privacy, ethics, and cybersecurity.
- TTAM must provide privacy reports to the Missouri Attorney General upon request.
The agreement also benefits Missouri residents by supporting claims related to the 2023 data breach, promoting continued scientific research, and maintaining uninterrupted service for current users.
Consumers will receive notice of the ownership change and instructions on how to delete their data if desired.
For more information, visit the Missouri Attorney General’s consumer alert page.
