I mean do it, but don’t believe that they do anything other with your data as flagging it as that it should show up for you as deleted while it’s still unaltered in the database.
That data has already been sold.
GDPR might want a word about that
They’re headquartered in the US. GDPR being an EU statute, won’t hold much weight with the current administration; and since they’re filing for bankruptcy the data will be sold to the highest bidder. Likely as not they were selling access to their db when they were in operation.
HIPAA may have a claim on the data that could give some privacy protections, however since people’s insurance wasn’t involved and the process didn’t go through a doctor’s office I doubt it.
https://en.m.wikipedia.org/wiki/23andMe
https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html#who
Don’t forget to also delete their backups and derivations sold to partners.
Is there a way to request my info to be deleted even if I never sent them anything? Like, maybe my relatives did and then linked my personal info or something?
Or is that being too paranoid?
That would be an interesting legal case. If the data is able to identify you, is it not your data?
The data is based on a sample, so unless your relatives collected a phial of spit from you and didn’t tell you why, there’s not a lot they would really have. Maybe name and DOB based on a family member adding it to a family tree, but you can likely just ask your family of they did that. IIRC, that’s a premium feature anyway.
It’s not just a problem if you got a test done, your data is exposed if family members got tests too. So you might need to bug them too. But I don’t know if the company will actually delete the info if you ask them them too.
What incentive do they even have?
Theoretically legal repercussions, but if they’ll be bankrupt, they don’t really care.
Exactly.
Joke’s on you, I never gave it to them in the first place.