The leaders of the House Committee on Energy and Commerce have launched an investigation into how 23andMe’s bankruptcy could impact the privacy of its customers’ data.
On Thursday, Representatives Brett Guthrie, Gus Bilirakis, and Gary Palmer (all Republicans) sent a letter to Joe Selsavage, the company’s interim CEO, posing several questions about how 23andMe plans to manage customer data if the company is sold.
The letter highlights concerns raised by some customers who have faced difficulties deleting their personal data from 23andMe’s website. It also points out that companies like 23andMe, which offer direct-to-consumer services, are generally not protected under the Health Insurance Portability and Accountability Act (HIPAA).
“Due to the absence of HIPAA protections, inconsistent state laws regarding genetic privacy, and the uncertainty around what happens to customer data in the event of a sale or transfer of ownership, we are deeply concerned that this sensitive information may be vulnerable to compromise,” the representatives state.
In March, 23andMe filed for Chapter 11 bankruptcy. The company also announced that co-founder and CEO Anne Wojcicki would step down to pursue a private bid to purchase the company. Last year, 23andMe settled a lawsuit over a data breach for $30 million.
