In the EU and the UK, 23andMe users are covered by versions ofthe GDPR.
However, the ICO has previously ruled that 23andMe may have violated its privacy rules.
In the US, meanwhile, the legal protections vary.

Yet with 23andMes track record, neither the companys assurances nor legal protections may quell customers fears.
During bankruptcy proceedings, the company may also have fewer resources at its disposal to fight off hackers.
And under new ownership, things look even more uncertain.

Use the code TNWXMEDIA2025 at the check-out to get 30% off the price tag.
Story bySion Geschwindt
Sion is a freelance science and technology reporter, specialising in climate and energy.