Privacy concerns have been at the forefront as Missouri Attorney General Andrew Bailey joined forces with a multistate coalition to secure notable privacy protections amid the sale of DNA testing company 23andMe. Facing a financial downfall and a cybersecurity breach that contributed to its bankruptcy filing in 2023, 23andMe has found a buyer in TTAM Research Institute, a nonprofit entity spearheaded by the company’s founder, Anne Wojcicki.
Following its June 27 approval by the Eastern District of Missouri Bankruptcy Court, this $305 million sale comes with strings attached, thanks to the concerted efforts of Bailey and his colleagues. In a statement, Bailey expressed his pride in protecting Missourians' genetic data, saying, "Thanks to our efforts, this sale is now subject to strong privacy protections that will safeguard consumer information and ensure accountability going forward." The agreement laid down by the coalition subjects TTAM to rigorous conditions before letting the sale proceed, according to the Missouri Attorney General's Office press release.
Among the protections, consumers will maintain control over their genetic information, retaining the right to obliterate their data permanently, with mechanisms in place to enforce this action as confirmed by Bailey’s office. A noteworthy condition of the sale stipulates that DNA data cannot be gabbed and transferred away flippantly; it must abide by stout current privacy policies and enhanced cyber protection protocols. Furthermore, no transactions involving the genetic data trove can occur without adhering to TTAM's comprehensive privacy commitments, and all future sales must toe the line with pertinent state and federal laws.
An additional safeguard includes TTAM's explicit prohibition in associating data with any individual or entity tied to nations or persons of concern, in line with federal stipulations. Adding to the shopper’s privacy assurance is the announcement of a Consumer Privacy Advisory Board, a team of experts in the fields of consumer privacy, bioethics, and cybersecurity established by TTAM. Plus, TTAM is required to dole out reports keyed to privacy practices upon request by the Missouri Attorney General's Office. This level of ongoing oversight aims, in every aspect, to keep the handling of sensitive data transparent and under close watch.
Beyond privacy, Missouri residents also stand to gain from this transition. A portion of the acquisition funds will underwrite compensation for those impacted by the previous data breach. Bailey has also underscored the role of TTAM's nonprofit nature in forging partnerships for advancing health research, potentially benefiting participants who agree. Customers of 23andMe were assured of service continuity under the existing leadership, alleviating worries of potential disruptions.
