“They have a treasure trove of, I think, some 30 million people’s genetic data, and that is deeply personal. But it’s also potentially valuable genetic information of 30 million people,” information and privacy commissioner Kerry Hatfield told CBC.
Why Delete Data?
23andMe, known for DNA test kits, has filed for bankruptcy and is seeking a buyer as of March 31, 2025. This uncertainty means your genetic data, which is highly sensitive, could be sold or managed differently by a new owner. Deleting your data ensures it isn’t included in any sale, safeguarding your privacy.
How to Delete Data
Customers can log into their account, navigate to settings, and follow the steps to permanently delete their data. This process is irreversible and can also include discarding saliva samples. It’s recommended to download any data you want to keep before deletion.
Unexpected Detail: Legal Protections
While 23andMe states any new owner must comply with applicable laws, these laws vary by region and may not fully protect your data, especially outside HIPAA-covered entities like 23andMe, adding urgency to delete your information.
Comprehensive Analysis on Deleting 23andMe Data Before Sale
As of March 31, 2025, 23andMe, a prominent DNA testing company, has filed for Chapter 11 bankruptcy, initiating a process to find a buyer, which has sparked significant privacy concerns among its 15 million customers. This note explores why customers should consider deleting their genetic data before the potential sale, detailing the process, legal implications, and broader privacy risks, ensuring a thorough understanding for informed decision-making.
Background and Context
23andMe, founded in 2006, offers genetic testing for ancestry and health insights, amassing a vast database of customer DNA data. On March 22, 2025, the company announced its bankruptcy filing, aiming to sell assets through a court-supervised process, with CEO Anne Wojcicki resigning to bid independently (23andMe Initiates Voluntary Chapter 11 Process to Maximize Stakeholder Value Through Court-Supervised Sale Process | 23andMe, Inc.). This move has raised alarms, as the future management of customer data under new ownership remains uncertain, prompting calls from privacy advocates and officials like California Attorney General Rob Bonta to delete data (Attorney General Bonta Urgently Issues Consumer Alert for 23andMe Customers | State of California – Department of Justice – Office of the Attorney …).
Reasons to Delete Data
The primary reason to delete data is to prevent its transfer to a new owner, who might handle it differently. Genetic data is immutable and can reveal personal details about you and your family, increasing risks if mishandled (23andMe Just Filed for Bankruptcy. You Should Delete Your Data Now. | Reviews by Wirecutter). Potential risks include:
- Data Usage Changes: The new owner could use data for research or sell it to third parties without consent, unlike 23andMe’s current practices, which allow opting out of research (Privacy and Data Protection – 23andMe).
- Privacy and Security: Previous data breaches, like the 2023 incident affecting 5.5 million customers, highlight vulnerabilities (How to… delete your 23andMe data | MIT Technology Review). A new owner might not maintain the same security standards.
- Legal Loopholes: While 23andMe states new owners must comply with laws, protections like HIPAA don’t apply to direct-to-consumer companies, leaving gaps (23andMe is filing for bankruptcy. Here’s what it means for your genetic data – NPR).
California AG Bonta urged customers to delete data, noting, “Californians have the right to direct the company to delete their genetic data,” emphasizing urgency (Delete your DNA data from genetics company 23andMe right now – The Washington Post). This advice extends globally, given the sensitive nature of DNA data.
Process for Deleting Data
Customers can delete their data through a straightforward process, as outlined in 23andMe’s customer care resources. Below is a detailed table of steps, based on available guidance:
| Action | Steps | Additional Notes |
|---|---|---|
| Delete 23andMe Account and Data | 1. Log in to account<br>2. Navigate to “Settings” section<br>3. Click on “23andMe Data” at bottom, then “View”<br>4. Download genetic data for personal use<br>5. Scroll to “Delete Data” section, click “Permanently Delete Data” | Website may be slow or glitchy due to high traffic (noted by CA AG Rob Bonta) |
| Discard Saliva Sample | If previously opted to retain, request discard under account settings, “Preferences” | – |
| Withdraw Consent for Third-Party Research | Under “Research and Product Consents,” withdraw consent | – |
Source: How to Delete Your Data From 23andMe | WIRED. Once confirmed, the deletion is irreversible, and data is no longer used in research (Requesting 23andMe Account Closure – 23andMe Customer Care).
Legal and Regulatory Considerations
23andMe’s privacy policy states that in a sale, customer data may be transferred, but new owners must comply with applicable laws (Legal – Privacy Statement – 23andMe). However, federal protections are limited:
- HIPAA applies to healthcare providers, not 23andMe, leaving genetic data less protected (23andMe is filing for bankruptcy. Here’s what it means for your genetic data – NPR).
- State laws, like California’s CCPA, grant deletion rights, but vary by jurisdiction, with fewer protections elsewhere (What’s In Your Account Settings? – 23andMe Customer Care).
Ontario’s privacy commissioner also raised concerns about law enforcement access to genetic data, adding to the urgency of deletion (Selling 23andMe assets raises concerns for Canadians’ data: Ontario privacy commissioner).
Potential Drawbacks and Considerations
While deleting data protects privacy, customers should consider:
- Loss of Access: Once deleted, you can’t access reports or reconnect with relatives via DNA Relatives features.
- Family Implications: If relatives used 23andMe, their data could still reveal information about you due to shared genetics (23andMe Just Filed for Bankruptcy. You Should Delete Your Data Now. | Reviews by Wirecutter).
- Timing: The sale process could take 45 days, but experts suggest deleting data immediately to ensure it’s not included (23andMe Initiates Voluntary Chapter 11 Process to Maximize Stakeholder Value Through Court-Supervised Sale Process | 23andMe, Inc.).
Conclusion
Given the uncertainty surrounding 23andMe’s sale and the sensitive nature of genetic data, deleting your information before the sale is a prudent step to safeguard privacy. The process is accessible, and while there are trade-offs, the potential risks of data transfer outweigh the benefits of retention under new, unknown ownership.
Key Citations
- 23andMe Initiates Voluntary Chapter 11 Process to Maximize Stakeholder Value Through Court-Supervised Sale Process | 23andMe, Inc.
- Attorney General Bonta Urgently Issues Consumer Alert for 23andMe Customers | State of California – Department of Justice – Office of the Attorney …
- 23andMe Just Filed for Bankruptcy. You Should Delete Your Data Now. | Reviews by Wirecutter
- Privacy and Data Protection – 23andMe
- How to Delete Your Data From 23andMe | WIRED
- Requesting 23andMe Account Closure – 23andMe Customer Care
- Legal – Privacy Statement – 23andMe
- 23andMe is filing for bankruptcy. Here’s what it means for your genetic data – NPR
- What’s In Your Account Settings? – 23andMe Customer Care
- Selling 23andMe assets raises concerns for Canadians’ data: Ontario privacy commissioner
- How to… delete your 23andMe data | MIT Technology Review
- Delete your DNA data from genetics company 23andMe right now – The Washington Post
