New York AG sues 23andMe to protect customers' private data

New York and 26 other states are suing 23andMe in bankruptcy court to block the sale of customer genetic data without consent, following the company's Chapter 11 filing and plans to auction its business after a data breach and declining demand. The states argue the sale violates privacy rights, while 23andMe contends the sale aligns with its policies and applicable law, ensuring continued customer protections under new ownership. 23andMe is currently considering a $305 million offer from co-founder Anne Wojcicki after initially selecting a $256 million bid from Regeneron Pharmaceuticals.

Analysis

Genetic testing company 23andMe, currently undergoing Chapter 11 bankruptcy proceedings, faces a significant legal challenge from 27 U.S. states and the District of Columbia aimed at preventing the sale of its customers' genetic data without explicit consent. This lawsuit, filed in 23andMe's Missouri bankruptcy case, arises from the company's plan to auction its business, which includes over 15 million DNA profiles, following a notable dip in consumer demand and a significant 2023 data breach that exposed genetic and other information of millions of customers. State attorneys general, including those from New York and California, contend that such a sale would infringe upon customer privacy rights, with California specifically citing state laws restricting the transfer of sensitive genetic material. Conversely, 23andMe asserts that the proposed sale is permissible under its existing privacy policies and applicable law, and that customer rights and protections would be maintained under new ownership. The situation is further complicated by a competitive bidding process for 23andMe's assets; the company is seeking to re-open bidding after co-founder Anne Wojcicki submitted a $305 million offer, surpassing a previous $256 million lead offer from Regeneron Pharmaceuticals (REGN). This entire scenario, underscored by a moderately negative sentiment signal, highlights the escalating legal, ethical, and financial complexities surrounding the commercialization and protection of personal genetic information, particularly within bankruptcy contexts where asset monetization is a primary objective.

Key Decisions for Investors

• Investors holding or considering positions in Regeneron Pharmaceuticals (REGN) should closely monitor the developments in 23andMe's asset auction and the associated multi-state lawsuit, as the outcome directly impacts the viability and terms of Regeneron's bid for 23andMe's data assets and associated strategic implications.
• Evaluate current and potential investments in companies within the direct-to-consumer genetics, biotech, and data-heavy technology sectors for heightened legal and reputational risks associated with the handling and sale of sensitive customer data, especially in distressed situations or mergers and acquisitions.
• Anticipate that the resolution of this lawsuit could set important legal precedents concerning data privacy, customer consent, and the transferability of personal genetic information, potentially influencing future regulatory landscapes and due diligence requirements for transactions involving such assets.