Also interesting is the language they used in the email they sent me after I requested account/data deletion:

We received your request to permanently delete your 23andMe account and Personal Information. The following apply when you submit your deletion request:

• If you chose to consent to 23andMe Research by agreeing to an applicable 23andMe Research consent document, any Research involving your Genetic Information or Self-Reported Information that has already been performed or published prior to our receipt of your request will not be reversed, undone, or withdrawn.
• Any samples for which you gave consent to be stored (biobanked) will be discarded.
• 23andMe and the contracted genotyping laboratory will retain your Genetic Information, date of birth, and sex as required for compliance with legal obligations, pursuant to the federal Clinical Laboratory Improvement Amendments of 1988 and California laboratory regulations.
• 23andMe will retain limited information related to your deletion request, such as your email address and Account Deletion Request Identifier, as necessary to fulfill your request, for the establishment, exercise or defense of legal claims, and as otherwise permitted or required by applicable law.

The first bullet point makes sense - you agreed and they already published something, so too bad. The second bullet is doing the right thing. But those third and fourth bullets sound like they don’t really have to delete anything, and they’ll keep a bunch of data even if you ask them to trash it. I asked them to trash it anyway.

Thanks for posting this.

While my first point may have been flawed, by second still stands.

People were presented with that in the contract but I think it’s fair to argue they didn’t comprehend that their genetic data could be used punitively to deny them preferntial health insurance, a job or a loan… once this data is in the hands of slimey people it’ll be used like everything else that’s illegal to use for those purposes but “public knowledge” so the fucks use it anyways.

This data is dangerous to public well being forever in extremely scary ways as it could be leveraged on future generations that did not consent to this contract as well with statistics.

I think you’re correct about people being more careful with what they sign but I think you’re underestimating how much in the public interest this is.

That’s speculation, not fact, and I also don’t agree that owning a thing necessarily means you can sell it in an unrestricted/unregulated manner (guns, tobacco, as well as other sensitive medical info can’t just be sold willy-nilly)— especially when the “it” is sensitive biometric data whose originators never agreed to share it. That’s the problem when you and the greedy corporations you’re defending assume implicit consent rather than to ask for it: it’s damaging to the public and invades these people’s medical privacy in the name of profit.

And whether 23andMe should be subject to HIPAA laws is debatable at best.