Co-founder Anne Wojcicki reacquired control of 23andMe for $305 million via her nonprofit TTAM Research Institute last Friday, a move that follows months of financial instability and has prompted 1.9 million users to demand the immediate deletion of their genetic records to prevent unauthorized data transfers. This surge in deletion requests represents roughly 15% of the company’s 15-million-person database, signaling a massive shift in consumer trust following the firm’s March filing for Chapter 11 bankruptcy protection.
Legal Battles and the Fight for Genetic Privacy
The transition of ownership occurs against a backdrop of intense legal scrutiny. Dozens of states recently filed lawsuits to block the potential sale of customer information without explicit consent. These legal challenges argue that 23andMe must secure proactive permission before transferring sensitive biological data to any new corporate entity or third party. While Wojcicki’s acquisition stabilizes the company’s leadership, privacy advocates and security experts continue to urge customers to exercise their right to data erasure to minimize future exposure.
Step-by-Step Protocol for Data Deletion
Users seeking to remove their biological information from the 23andMe ecosystem must navigate a specific sequence within their account architecture. While the company provides a mechanism for deletion, it is not instantaneous and requires external verification. Follow these steps to initiate the process:
- Access your account and navigate to the Settings menu.
- Locate the section titled 23andMe Data.
- Select View and scroll to the Delete Data module.
- Execute the request by clicking Permanently Delete Data.
Upon completing these steps, the system triggers a mandatory confirmation email. You must click the link within that email to finalize the deletion. Experts recommend downloading a personal copy of your raw genetic data before executing this final step, as the action is irreversible.
The Retention Caveat: Why Total Deletion Is Impossible
Despite a “permanent” deletion request, 23andMe’s internal policies dictate that certain data points remain on file to satisfy regulatory and legal frameworks. The company’s privacy policy explicitly states that labs will retain genetic information, date of birth, and sex to comply with health and safety laws.
Furthermore, 23andMe maintains a record of the deletion request itself, including email addresses, communication logs, and legal agreements. These records are held for audit purposes, the defense of legal claims, and general compliance. Users should also realize that any data previously shared with third-party research partners or stored in legacy backup systems may remain beyond the company’s immediate reach for deletion.
Revoking Research Consent and Sample Destruction
Beyond digital data, customers often leave behind physical biological materials. If you previously authorized the company to store your saliva sample, you must manually update your Preferences within the account settings to request sample destruction.
Similarly, for those who opted into scientific studies, consent must be withdrawn via the Research and Product Consents section. While revoking consent prevents future use of your DNA in new studies, it does not retroactively remove your information from research projects that are already underway or completed.
The Ripple Effect: Genetic Privacy as a Family Concern
Genetic data is unique because it is inherently shared. When one individual uploads their DNA, they inadvertently expose the genetic blueprints of their biological relatives. Security analysts suggest that users who delete their accounts should encourage family members to do the same. Because DNA can identify siblings, parents, and cousins, the security of one person’s data is inextricably linked to the privacy choices of their entire family tree.
