UK user data must be protected during 23andMe bankruptcy, watchdog says

1 May 2025, 15:54

The 23andMe Holding Co logo is displayed on smartphone
23andMe Holding Co logo is displayed on smartphone. Picture: PA

The Information Commissioner’s Office has said it will take action if it believe UK data protection law is not followed.

The UK’s data protection watchdog has called for the personal data of UK customers of genetic firm 23andMe to be properly protected during and after its bankruptcy proceedings in the US.

The Information Commissioner’s Office (ICO) has joined with its Canadian counterpart, the Office of the Privacy Commissioner of Canada (OPC), to warn that they will take action against 23andMe if they believe user data is not protected properly during the case.

The DNA testing kit firm filed for bankruptcy protection in the US in March, after struggling with heavy losses and facing the aftermath of a data hack, and as it searches for a buyer.

23andMe holds some of the most personal and highly sensitive information possible about its customers, including genetic data, health reports and self-reported health conditions. We have this week written to the US Trustee to call for the protection of this sensitive data during and after the company’s bankruptcy

John Edwards, Information Commissioner

Privacy experts have since raised concerns about what could happen to the vast amounts of genetic and other personal data the company holds if it is sold to a third-party, with many urging users to log in and request their data be deleted.

Now the UK and Canadian data protection regulators have written to the US Trustee, which oversees bankruptcy cases, to highlight that any potential buyer of 23andMe must adhere to both UK and Canadian data protection law.

Information Commissioner John Edwards said: “23andMe holds some of the most personal and highly sensitive information possible about its customers, including genetic data, health reports and self-reported health conditions.

“We have this week written to the US Trustee to call for the protection of this sensitive data during and after the company’s bankruptcy.

“The UK public need to trust that the bankruptcy proceedings, and any potential sale of the company or its assets, will safeguard their personal data from unauthorised use or misuse.

“We are here to advocate on their behalf and we will not hesitate to take action against 23andMe or any potential purchaser should data protection legislation not be adhered to.”

Philippe Dufresne, privacy commissioner of Canada, said: “23andMe holds the highly sensitive personal information, including DNA, of millions of customers.

My office is closely following the sale of 23andMe to ensure that any personal information relating to individuals located in Canada is handled in compliance with our federal private-sector privacy law.

“This is of the utmost importance given the significant concerns that Canadians may have about the protection of their personal information going forward, especially given that some of the data has previously been subject to a breach.”

By Press Association

More Technology News

See more More Technology News

People ride an upward escalator next to the Dior store at the Icon Siam shopping mall on June 12, 2024 in Bangkok, Thailand.

Luxury fashion giant Dior latest high-profile retailer to be hit by cyber attack as customer data accessed

A plane spotter with binoculars from behind watching a British Airways plane landing

‘Flying taxis’ could appear in UK skies as early as 2028, minister says

Apple App Store

Take on Apple and Google to boost UK economy, think tank says

A survey of more than 1,000 employers found that around one in eight thought AI would give them a competitive edge and would lead to fewer staff.

One in three employers believe AI will boost productivity, research finds

Hands on a laptop showing an AI search

One in three employers believe AI will boost productivity, research finds

Music creators and politicians take part in a protest calling on the Government to ditch plans to allow AI tech firms to steal their work without payment or permission opposite the Houses of Parliament in London.

Creatives face a 'kind-of apocalyptic moment’ over AI concerns, minister says

Ngamba Island Chimpanzee Sanctuary on Lake Victoria, Uganda

Chimps use medicinal plants to treat each other's wounds and practice 'self-care' as scientists hail fascinating discovery

Close up of a person's hands on the laptop keyboard

Ofcom investigating pornography site over alleged Online Safety Act breaches

The Monzo app on a smartphone

Monzo customers can cancel bank transfers if they quickly spot an error

Co-op sign

Co-op to re-stock empty shelves as it recovers from major hack

The study said that it was often too easy for adult strangers to pick out girls online and send them unsolicited messages.

Social media platforms are failing to protect women and girls from harm, new research reveals

Peter Kyle leaves 10 Downing Street, London

Government-built AI tool used to cut admin work for human staff

In its last reported annual headcount in June 2024, Microsoft employed 228,000 full-time workers

Microsoft axes 6,000 jobs despite strong profits in recent quarters

Airbnb logo

Airbnb unveils revamp as it expands ‘beyond stays’ to challenge hotel sector

A car key on top of a Certificate of Motor Insurance and Policy Schedule

Drivers losing thousands to ghost broker scams – the red flags to watch out for

Marks and Spencer cyber attack

M&S customers urged to ‘stay vigilant’ for fraud after data breach confirmed