Office of the Colorado Attorney General
07/10/2025 | Press release | Distributed by Public on 07/10/2025 12:50
Attorney General Phil Weiser alerts consumers on deleting data shared with 23andMe
A banner with mountains with the attorney general logo and text that reads News from Attorney General Phil Weiser
Attorney General Phil Weiser alerts consumers on deleting data shared with 23andMe
July 10, 2025 - In the wake of a bankruptcy court approving the sale of DNA testing company 23andMe to a new owner, Attorney General Phil Weiser issued a consumer alert to tell Coloradans that they have the right to delete any genetic and other personal data shared with the company.
"I am committed to protecting Coloradans' data privacy and fought to ensure anyone who shared their data with 23andMe can delete it at any time," said Attorney General Weiser. "If you shared sensitive data with 23andMe, thinking only the company would ever have access to it, you need to know that the company no longer exists. If you are concerned about your genetic data being transferred to a new company through this bankruptcy sale, you should know you have the right to delete your data that the company is holding onto. That's why I encourage anyone who wishes to delete their 23andMe account and any personal data, including their DNA sample, to do so now."
23andMe and its associated companies filed for bankruptcy on March 23. On June 27, a bankruptcy court approved the sale of 23andMe to TTAM-a nonprofit created by 23andMe founder and CEO Anne Wojcicki.
During bankruptcy proceedings, state attorneys general, including Attorney General Weiser, secured several meaningful consumer protections. Those include that the acquiring entity (TTAM) agreed to allow consumers to permanently delete their 23andMe account and any genetic and other personal data from the 23andMe system at any time. To ensure deletion requests are honored, state regulators will have access to the company's records for verification purposes.
23andMe was also involved in a 2023 data breach that resulted in hackers stealing personal data from nearly 7 million users. Those who believe the company may owe them money related to that data breach must file a special proof of claim form with the bankruptcy court by July 14, 2025 (opens new tab).
The Colorado Privacy Act also gives consumers several rights over their personal data, including the right to delete their data. The law applies to nonprofits and so will apply to TTAM even after the sale proceeds. An update to the law passed in 2024 that went into effect on July 1 of this year gives consumers even greater rights over their sensitive biometric and genetic data. More information on the Colorado Privacy Act is available at coag.gov/cpa (opens new tab).
Read a one-page handout with specific instructions on how to delete a 23andMe account and any personal data (PDF).
Read the one-page handout with deletion instructions in Spanish (PDF).
###
Media Contact:
Elliot Goldbaum
Community Education and Communications Manager
(720) 508-6769 office
elliot.goldbaum@coag.gov
Office of the Colorado Attorney General published this content on July 10, 2025, and is solely responsible for the information contained herein. Distributed via Public Technologies (PUBT), unedited and unaltered, on July 10, 2025 at 18:50 UTC. If you believe the information included in the content is inaccurate or outdated and requires editing or removal, please contact us at support@pubt.io