This week, a data breach was disclosed by 23andMe, affecting 6.9 million users and compromising their genetic data information.

The incident raises significant concerns about data privacy and security. It's important to note that while some perceive this as a violation of HIPAA, it typically doesn't apply to direct-to-consumer genetic testing services like 23andMe, as they don't involve covered entities such as physicians. This leaves a gap in privacy protection, and alternative legal frameworks, such as those enforced by the Federal Trade Commission, may come into play. However, actions against direct-to-consumer genetic testing companies by the FTC have been rare. The breach highlights the need for increased awareness and potentially new laws and regulations to safeguard sensitive genetic data in the rapidly evolving digital landscape.

Support the show