California Attorney General Rob Bonta has issued a consumer alert to 23andMe customers, reminding them of their right to delete genetic data amid the company's reported financial difficulties.  

23andMe, a genetic testing and information company based in California, has publicly stated in securities filings that there is "substantial doubt" about its ability to continue operating. Bonta, citing the company's large collection of sensitive consumer data, urged Californians to consider exercising their rights under the state's Genetic Information Privacy Act (GIPA) and the California Consumer Privacy Act (CCPA).  

"California has robust privacy laws that allow consumers to take control and request that a company delete their genetic data," Bonta said in a statement. "Given 23andMe's reported financial distress, I remind Californians to consider invoking their rights and directing 23andMe to delete their data and destroy any samples of genetic material held by the company."

The attorney general's office provided instructions for customers to delete their data, destroy test samples and revoke research consent through the company's website.  

To Delete Genetic Data from 23andMe:

Consumers can delete their account and personal information by taking the following steps:

  • Log into your 23andMe account on their website.
  • Go to the “Settings” section of your profile.
  • Scroll to a section labeled “23andMe Data” at the bottom of the page.
  • Click “View” next to “23andMe Data”
  • Download your data: If you want a copy of your genetic data for personal storage, choose the option to download it to your device before proceeding.
  • Scroll to the “Delete Data” section.
  • Click “Permanently Delete Data.”
  • Confirm your request: You’ll receive an email from 23andMe; follow the link in the email to confirm your deletion request.

To Destroy Your 23andMe Test Sample:

If you previously opted to have your saliva sample and DNA stored by 23andMe, but want to change that preference, you can do so from your account settings page, under “Preferences.”

To Revoke Permission for Your Genetic Data to be Used for Research:

If you previously consented to 23andMe and third-party researchers to use your genetic data and sample for research, you may withdraw consent from the account settings page, under “Research and Product Consents.”

Under GIPA, consumers can request the deletion of their account and genetic data, as well as the destruction of their biological samples. The CCPA also allows consumers to request the deletion of personal information, including genetic data.