Attorney General Dan Rayfield has issued a consumer alert concerning the recent bankruptcy filing by 23andMe, a company known for its direct-to-consumer genetic testing services. The company collects and analyzes sensitive genetic information from individuals.
"23andMe must work to safeguard this incredibly sensitive genetic information, regardless of their bankruptcy filing," stated Attorney General Rayfield. "Oregonians need to know that they still have full control over their own data – they can delete their genetic information and test samples on the website and pull the plug on any permission for 23andMe to share it with researchers."
On March 23rd, 23andMe filed for Chapter 11 bankruptcy. Despite this development, the company announced its intention to continue operations during the sale process without altering how customer data is stored, managed, or protected.
In response to these events, Attorney General Rayfield reminded Oregon residents of their rights under the Oregon Consumer Privacy Act (OCPA). These rights include deleting personal information and revoking consent for data processing.
To remove their genetic data from 23andMe, consumers can log into their account, navigate to settings, download their data if desired, and proceed with permanent deletion following email confirmation. Those who wish to destroy their test sample or revoke research permissions can adjust preferences within account settings.
The OCPA grants Oregonians access to correct and delete personal data under specific conditions. Consumers may opt out of data sales and processing related to targeted advertising or automated decision-making. They also have the right to withdraw previously granted consent for personal information processing. More details are available in the DOJ’s Privacy toolkits.