PORTLAND, Oregon (AP) — The 27 states and the District of Columbia filed a lawsuit Monday in bankruptcy court attempting to block the sale of personal genetic data by 23andMe without the consent of the client. The lawsuit is because biotech companies seek court approval to buy a company they struggle with.
Oregon Attorney General Dan Rayfield said in a news release about the lawsuit that biological samples, DNA data, health-related characteristics and medical records are too sensitive to being sold without their respective express consent. The customer said they must have the right to control such deep personal information and cannot sell it like regular property.
23AndMe customers use saliva-based DNA test kits to learn about their ancestors and find long-term relatives. Founded in 2006, the company also conducted health research and drug development. However, since its launch in 2021, it has been difficult to find a profitable business model. In March, it unleashed 40% of its staff and filed for Chapter 11 bankruptcy protection in the Eastern Missouri district, raising concerns about the safety of its customer data.
Regeneron Pharmaceuticals said last month it aimed to buy the company for $256 million. Regeneron said it complies with 23andMe’s privacy policy and applicable laws. It said it will process all customer personal data and in accordance with consent, privacy policy and statements, terms of service and notifications currently in effect, and in place security controls designed to protect such data.
The court-appointed independent consumer privacy ombudsman is to look into the proposed sale and how it will affect consumer privacy and reporting to the court by Tuesday.
Original issue: June 10th, 2025, 1:17pm EDT
