Rep. Stephen Lynch Warns of National Security Risks from 23andMe Bankruptcy

23andMe Data and Regulatory Gaps

• 🧬 23andMe holds sensitive genetic and biographical data for 15 million customers, including DNA profiles, ancestry history, and health predispositions.
• ⚖️ Unlike healthcare providers bound by HIPAA, direct-to-consumer companies like 23andMe operate with minimal oversight and regulation.
• 📄 Customers typically agree to opaque terms of service that allow data to be sold during a sale or bankruptcy.

National Security Threats and Foreign Adversaries

• ⚠️ Hostile actors, including foreign adversaries like China, Russia, North Korea, and Iran, actively attempt to buy or steal American sensitive data.
• 🇨🇳 China's President Xi Jinping views dominating AI and biotechnology as critical to global geopolitical power, with vast troves of American data being a key component.
• 💥 A massive 2023 breach of 23andMe saw an attacker steal data from 7 million customers, reportedly targeting those with Ashkenazi Jewish heritage.
• 🚨 Failing to safeguard this data is not just a privacy violation but a national security catastrophe.

Government Oversight and Cybersecurity Concerns

• 🏛️ The current administration is criticized for dismantling IT and cybersecurity workforces and weakening consumer protection agencies.
• 🚫 Specific concerns are raised about the Department of Homeland Security (DHS) installing servers of unknown origin and merging Americans' data across agencies without proper oversight.
• 📉 Significant cuts to personnel at critical agencies like the Social Security Administration are also highlighted as weakening defenses.

Data Ownership and Future Protections

• 🔒 The current perfect storm of weak privacy laws, foreign threats, and a weakened federal government leaves American data vulnerable.
• 🔑 Americans, not private companies or hackers, should own their data and decide how it's used.
• 🚫 While users may opt out of 23andMe data usage, there are no comparable options to delete data held by government agencies like DHS.