Attorney General Charity Clark issued a consumer alert to help Vermonters protect their personal data in the wake of 23andMe’s bankruptcy recent filing on March 26.
On Monday, March 24, 23andMe announced that they had filed for bankruptcy. 23andMe is a direct-to-consumer genetic testing company that collects and analyzes genetic information and health data for consumers.
The company announced that it “intends to continue operating its business in the ordinary course through the sale process” and that “[t]here are no changes to the way [it] stores, manages, or protects customer data.”
However, the bankruptcy and 23andMe’s plan to “sell substantially all of [its] assets” raises the risk that 23andMe may attempt to sell Vermonters’ personal data and other private information in the bankruptcy process.
Attorney General Clark is notifying Vermonters of actions they can take to make sure that 23andMe deletes their personal data rather than selling it. “I urge all Vermonters to take these steps immediately to protect their personal data,” said Attorney General Clark. “This latest development is yet another reminder of how underprotected our sensitive data is without a comprehensive data privacy law.”
Vermonters can demand that 23andMe delete their data, destroy any test samples they provided to the company, and revoke permissions for the use of their genetic data using the following steps:
To delete data from 23andMe
Log into your 23andMe account, go to the “Settings”
Scroll to a section labeled “23andMe Data” at the bottom of the page, click “View”
Download your data: If you want a copy of your genetic data for personal storage.
Scroll to the “Delete Data” section.
Click “Permanently Delete Data.”
Confirm your request: You’ll receive an email from 23andMe; follow the link in the email to confirm.
To destroy your 23andMe test sample
If you previously opted to have your saliva sample and DNA stored by 23andMe, but want to change that preference, you can do so from settings, under “Preferences.”
To revoke permission for your genetic data to be used for research
If you previously consented to 23andMe and third-party researchers to use your genetic data and sample for research, you may withdraw consent from the account settings page, under “Research and Product Consents.”
Any Vermonters who have trouble attempting to request the deletion of their data by 23andMe should contact the Attorney General’s Consumer Assistance Program at 1-800-649-2424 or by email at [email protected].
