SACRAMENTO, CALIFORNIA – California Attorney General Rob Bonta has issued an urgent call to action for the more than 15 million customers of 23andMe, a prominent genetic testing company, as it files for Chapter 11 bankruptcy protection. In a consumer alert released on March 21, 2025, Bonta encouraged users to exercise their rights under California’s robust privacy laws to request the deletion of their genetic data and the destruction of any stored biological samples, citing the company’s deepening financial troubles.
Join our WhatsApp groupSubscribe to our Daily Roundup Email
“California has robust privacy laws that allow consumers to take control and request that a company delete their genetic data,” Bonta said in a statement. “Given 23andMe’s reported financial distress, I remind Californians to consider invoking their rights and directing 23andMe to delete their data and destroy any samples of genetic material held by the company.”
The South San Francisco-based company, known for its saliva-based DNA testing kits that provide personalized ancestry and health reports, announced its bankruptcy filing on March 23, 2025, in the U.S. Bankruptcy Court for the Eastern District of Missouri. The move is intended to facilitate a court-supervised sale process to maximize the value of its business. While 23andMe has assured customers it will continue operations as usual during this period and that its data protection practices remain unchanged, the uncertainty surrounding the fate of its vast trove of sensitive genetic information has raised significant privacy concerns.
Bonta’s alert highlights California’s Genetic Information Privacy Act (GIPA) and the California Consumer Privacy Act (CCPA), which grant residents the right to demand the deletion of their personal data, including genetic information, from companies like 23andMe. Customers can initiate this process by logging into their accounts on the 23andMe website, navigating to the “Settings” section, and selecting the “Permanently Delete Data” option under “23andMe Data.” After submitting a request, users receive an email with a confirmation link to finalize the deletion.
The call to action comes amid growing unease about the security and future handling of genetic data held by 23andMe, which has faced challenges beyond its current financial woes. In 2023, the company suffered a major data breach that exposed the personal information of nearly 7 million customers, prompting a $30 million settlement and heightened scrutiny of its privacy practices. With the bankruptcy filing, questions linger about whether customer data could be sold or transferred to a new owner, potentially for uses not originally consented to by users.
Privacy concerns surrounding 23andMe are not new. During the 2022 Aspen Security Forum, Colorado Congressman Jason Crow voiced apprehensions about the implications of such genetic databases, warning that they could be exploited for surveillance or other purposes if not adequately safeguarded. The company’s current predicament amplifies these worries, as its 15 million customers—many of whom submitted saliva samples for testing—now face uncertainty about the long-term protection of their most intimate data.
23andMe has stated that any potential buyer will be required to comply with applicable laws regarding customer data. However, Bonta and privacy advocates argue that proactive steps by consumers are essential given the stakes. For Californians, the process to revoke consent for research use or destroy stored samples is also accessible through account settings, offering an additional layer of control.
As 23andMe navigates its financial restructuring, the situation serves as a stark reminder of the vulnerabilities tied to sharing genetic information with private entities. For now, Bonta’s message is clear: Californians should act swiftly to safeguard their privacy in the face of an uncertain future for the once-celebrated genomics firm.
