California AG says 23andMe sale ‘does not comply’ with state law

A federal judge has approved 23andMe's $305 million bankruptcy sale of genetic data assets to TTAM Research Institute, despite strong objections from the California Attorney General. California argues the transaction violates its Genetic Information Privacy Act (GIPA) by transferring data without explicit opt-in consent, a claim the judge dismissed by ruling GIPA's third-party opt-in requirements are not applicable as customer privacy safeguards remain. However, California's AG is evaluating "next steps," signaling potential continued legal and regulatory challenges for 23andMe and broader scrutiny for the genetic data industry regarding privacy compliance.

Analysis

A federal bankruptcy judge has approved 23andMe's $305 million asset sale to TTAM Research Institute, an entity led by the company's founder, despite significant legal objections from California and four other states. The core of the conflict lies in the California Attorney General's assertion that the sale violates the state's Genetic Information Privacy Act (GIPA) by transferring sensitive genetic data without explicit customer opt-in consent. The court, however, dismissed this concern, with Judge Brian C. Walsh arguing that GIPA's third-party consent requirements are not applicable because the transaction preserves continuity in business operations and privacy policies. This ruling creates a precarious situation, as the California AG's office is actively 'evaluating next steps' and has pledged to continue opposing any actions inconsistent with state law. This ongoing legal threat introduces a material uncertainty for the acquiring entity, TTAM, and sets a contentious precedent for the treatment of consumer data assets in bankruptcy proceedings, highlighting a growing tension between federal court authority and stringent state-level privacy regulations.

Key Decisions for Investors

• Investors in the data-centric biotech and technology sectors should closely monitor the outcome of California's potential legal challenges, as this case will set a key precedent for the valuation and transferability of data assets during corporate restructuring.
• Potential creditors or partners of the new entity, TTAM Research Institute, must factor in the significant legal and reputational risk stemming from the unresolved conflict with state regulators, which could result in future litigation, fines, or operational constraints.
• This situation underscores the critical need for enhanced due diligence on data privacy compliance and regulatory exposure for any company holding significant personal data, as federal bankruptcy approvals may not provide complete insulation from state-level legal action.