Shontel Brown Warns of 23andMe Data Risks Amidst Bankruptcy Sale

Risks of 23andMe Data Sale

• 💡 When 23andMe launched, it offered unprecedented access to ancestry and health information, but customers often unknowingly consented to share their DNA data with third parties.
• ⚠️ Unlike passwords, DNA cannot be changed or truly anonymized, and one person's genetic data can reveal information about their entire family.
• 📌 With 23andMe's future uncertain due to bankruptcy, the safety and security of customer data are at risk.

Security Measures and CEO's Response

• 🔐 Since a massive data breach exposing 7 million users' genetic data, 23andMe has implemented enhanced security measures.
• 🔑 These include forcing password resets, implementing two-factor authentication, and adding extra verification steps with a 48-hour delay for accessing sensitive genomic data.
• 👨‍💼 A new Chief Information Security Officer has been hired, and additional security controls are in place.
• 🤝 During the bankruptcy process, any bidder for the company is required to adhere to existing privacy policies and consents.

Foreign Adversaries and Data Exploitation

• 🌍 Foreign adversaries, particularly China and Russia, are actively seeking to exploit Americans' personal data, including genetic information.
• 🔬 China has targeted genetic data for AI training, advanced medicine development, and military research.
• 📉 The Trump administration's cuts to cybersecurity funding and staffing have weakened the nation's defenses against these threats.

Need for Federal Privacy Laws

• ⚖️ There is currently no federal framework for how private companies handle consumer biological data.
• 📜 Existing laws like HIPAA do not cover new biotech services, wearables, and apps generating novel health data.
• 🌐 State-level privacy laws are emerging to fill the gap left by Congress, but a comprehensive federal approach is needed.
• 🚀 With AI warfare on the horizon, strong cybersecurity protections and federal privacy laws are critical to safeguarding Americans' sensitive data.