OLYMPIA — The Washington State Attorney General’s Office is urging Washingtonians to be aware of their genetic data privacy rights after 23andMe filed for Chapter 11 bankruptcy on March 23, 2025. The genetic testing company, which holds sensitive data on more than 15 million users, now faces an uncertain future as it searches for new ownership.
Although 23andMe has stated it will not alter its current data management practices, there are no guarantees that future owners will maintain the same standards for protecting consumer data. The Attorney General’s Office is reminding Washington residents of their rights under the My Health My Data Act to withdraw consent, request data deletion, and ensure their genetic information is not improperly used or sold.
“Genetic data is deeply personal, and it’s critical for consumers to know they have rights to control how their information is used,” the Attorney General’s Office said in a statement. “In light of 23andMe’s bankruptcy filing, now is a good time for Washingtonians to consider their privacy options.”
Know Your Rights Under Washington Law
The My Health My Data Act provides strong protections for sensitive health information, including genetic data. Under state law, consumers can:
Withdraw Consent: You can revoke consent for your data to be used, stored, or shared.
Request Data Deletion: Consumers have the right to permanently delete their genetic data.
Verify Data Usage: You may request information on whether your data has been shared or sold, and obtain a list of any third parties that received your information.
These rights apply to all Washington state residents, offering critical safeguards against misuse of genetic data.
How to Delete Your 23andMe Data
For consumers concerned about their genetic information, 23andMe provides the option to delete both their data and their physical DNA samples. Follow these steps to delete your data:
- Log into your 23andMe account using the company’s website.
- Go to the “Settings” section.
- Scroll down to the “23andMe Data” section.
- Select “View” next to “23andMe Data.”
- Download your data if you would like a personal copy for your records before proceeding.
- Select “Permanently Delete Data” and follow the prompts.
- Confirm your request via the confirmation link sent to your email.
- Once confirmed, the deletion process begins immediately, and your access to your account will be permanently revoked. Note that some data may be retained for legal or regulatory compliance.
How to Destroy Your DNA Sample
If you previously consented to having your saliva sample or DNA stored by 23andMe, you can request its destruction:
- Log into your account and navigate to Settings.
- Select “Preferences.”
- Locate the option to destroy your stored sample and follow the instructions.
How to Revoke Consent for Research Use
If you previously allowed 23andMe or third-party researchers to use your genetic data for research purposes, you can withdraw that consent:
- Go to your Settings page.
- Select “Research and Product Consents.”
- Follow the instructions to revoke consent.
Downloading Your Genetic Data
Before deleting your account, you may choose to download your genetic data for personal storage. This may include:
- Ancestry Composition Data: Detailed reports on your ancestral background.
- DNA Relatives Data: Information on genetic relatives, depending on their privacy settings.
- Raw Genetic Data: A plain text (.txt) file of your genetic information.
- Account and Consent History: Records of legal agreements and account activities.
It is recommended to download your data on a private computer to prevent unauthorized access.
Need Help?
If you encounter issues while attempting to download or delete your data, 23andMe’s Customer Care team can be reached at privacy@23andMe.com.
Additionally, Washingtonians who believe their privacy rights have been violated under the My Health My Data Act can file a complaint with the Washington State Attorney General’s Office at www.atg.wa.gov.
