Canada’s privacy commissioner is collaborating with the U.K. Information Commissioner to investigate a data breach that occurred at 23andMe in October 2023.
Philippe Dufresne’s office announced that the joint investigation will focus on determining the extent of the breach at the direct-to-consumer genetic testing company.
The investigation will also assess whether 23andMe had appropriate safeguards in place to protect the sensitive information it managed and if the company adequately informed regulators and affected individuals about the breach.
Mr. Dufresne’s office stated that they will work closely with counterparts in Quebec, B.C., and Alberta to conduct the Canadian portion of the investigation and will refrain from further comments.
23andMe is well-known for selling testing kits that provide genetic information about customers, including details about their health, ethnicity, and biological relationships.
Last December, the company disclosed to the media that approximately 6.9 million 23andMe customers had their data compromised in the breach.
Related Stories
“In the wrong hands, an individual’s genetic information could be misused for surveillance or discrimination,” stated Mr. Dufresne in a news release.
“Ensuring that personal information is adequately protected against attacks by malicious actors is an important focus for privacy authorities in Canada and around the world.”
