The Department of Commerce and Consumer Affairs (DCCA) of Hawai‘i has issued a consumer alert following the bankruptcy filing by 23andMe, a company offering direct-to-consumer genetic testing. This alert, issued on March 27, 2025, aims to inform consumers about the importance of managing their sensitive genetic information and outlines steps to control or delete this data from the company’s database.
23andMe announced its bankruptcy on March 23, 2025, and expressed its intention to “commence a process to sell substantially all of its assets,” while stating it plans to continue operations “in the ordinary course throughout the sale process." The company assured customers that there are currently no changes planned in how it stores, manages, or protects customer data. Despite these assurances, the DCCA has highlighted potential risks associated with the bankruptcy proceedings, including the possibility that customer genetic data might be sold as part of the asset sale.
The Office of Consumer Protection (OCP) advises Hawaiian consumers on the necessity of knowing the procedures to delete or withdraw consent for the use of their genetic data. Consumers wishing to have their genetic data removed or to revoke permission for research use can do so through their account settings on 23andMe's website.
For those looking to remove their genetic data, they should update their preferences on their account page under the “Preferences” section if they had previously allowed 23andMe to store their saliva samples and DNA. To withdraw consent for research purposes, consumers can navigate to the “Research and Product Consents” section.
OCP Executive Director Mana Moriarty stated, “Consumers can demand the removal and destruction of their genetic data from 23andMe.” Moriarty emphasized that safeguarding sensitive data is crucial to prevent misuse or unauthorized exposure, which could lead to serious issues such as identity theft and compromised privacy.