this post was submitted on 14 Oct 2024

107 points (92.8% liked)

Ask Lemmy

27229 readers

2210 users here now

A Fediverse community for open-ended, thought provoking questions

Rules: (interactive)

1) Be nice and; have fun

Doxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them

2) All posts must end with a '?'

This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?

3) No spam

Please do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.

4) NSFW is okay, within reason

Just remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either [email protected] or [email protected]. NSFW comments should be restricted to posts tagged [NSFW].

5) This is not a support community.

It is not a place for 'how do I?', type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email [email protected]. For other questions check our partnered communities list, or use the search function.

6) No US Politics.

Please don't post about current US Politics. If you need to do this, try [email protected] or [email protected]

Reminder: The terms of service apply here too.

Partnered Communities:

Logo design credit goes to: tubbadu

founded 2 years ago

MODERATORS

107

Why can't a public trust buy 23andMe? (self.asklemmy)

submitted 2 months ago by gedaliyah to c/asklemmy

49 comments fedilink hide all child comments

If 23 and Me goes bankrupt, they will sell all of the biometric data they've collected over decades to the highest bidder. Why can't the US government step in to purchase the company and establish a public trust?

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 11 points 2 months ago (3 children)

Unfortunately, everyone who used their service did agree to it. Directly from their Privacy Policy:

Commonly owned entities, affiliates and change of ownership

If we are involved in a bankruptcy, merger, acquisition, reorganization, or sale of assets, your Personal Information may be accessed, sold or transferred as part of that transaction and this Privacy Statement will apply to your Personal Information as transferred to the new entity. We may also disclose Personal Information about you to our corporate affiliates to help operate our services and our affiliates’ services.

https://www.23andme.com/legal/privacy/#data-sharing

Whether this will hold up in court is a bit murky. But without a large, laborious court battle, they can and will sell the data and they are "legally" allowed to

[–] [email protected] 6 points 2 months ago

Also interesting is the language they used in the email they sent me after I requested account/data deletion:

We received your request to permanently delete your 23andMe account and Personal Information. The following apply when you submit your deletion request:

If you chose to consent to 23andMe Research by agreeing to an applicable 23andMe Research consent document, any Research involving your Genetic Information or Self-Reported Information that has already been performed or published prior to our receipt of your request will not be reversed, undone, or withdrawn.

Any samples for which you gave consent to be stored (biobanked) will be discarded.

23andMe and the contracted genotyping laboratory will retain your Genetic Information, date of birth, and sex as required for compliance with legal obligations, pursuant to the federal Clinical Laboratory Improvement Amendments of 1988 and California laboratory regulations.

23andMe will retain limited information related to your deletion request, such as your email address and Account Deletion Request Identifier, as necessary to fulfill your request, for the establishment, exercise or defense of legal claims, and as otherwise permitted or required by applicable law.

The first bullet point makes sense - you agreed and they already published something, so too bad. The second bullet is doing the right thing. But those third and fourth bullets sound like they don’t really have to delete anything, and they’ll keep a bunch of data even if you ask them to trash it. I asked them to trash it anyway.

[–] EleventhHour 4 points 2 months ago* (last edited 2 months ago) (1 children)

Thanks for posting this.

While my first point may have been flawed, by second still stands.

[–] [email protected] 6 points 2 months ago

I definitely agree with your second point. And I find it ridiculous that a company can ever claim to "own" your genetic information. It's why I've never dared sign up for any kind of genetic ancestry sites. I can't give that personal of information away for free, let alone pay for it to be taken

[–] [email protected] 2 points 2 months ago

People were presented with that in the contract but I think it's fair to argue they didn't comprehend that their genetic data could be used punitively to deny them preferntial health insurance, a job or a loan... once this data is in the hands of slimey people it'll be used like everything else that's illegal to use for those purposes but "public knowledge" so the fucks use it anyways.

This data is dangerous to public well being forever in extremely scary ways as it could be leveraged on future generations that did not consent to this contract as well with statistics.

I think you're correct about people being more careful with what they sign but I think you're underestimating how much in the public interest this is.