Summary

In recent news, genetics testing giant, 23andMe, has informed several of its users about a security breach concerning its "DNA Relatives" feature. This feature, which enables users globally to compare and share ancestry data, was infiltrated, potentially exposing sensitive information like relationship labels, ancestry reports, matching DNA segments, and more.

Main information :

  • The breach was discovered after a hacker boasted about stealing millions of data pieces from 23andMe on an online platform.
  • 23andMe has been actively collaborating with federal law enforcement and forensic experts to delve deeper into the matter.
  • The company has communicated to its users that unauthorized access was gained to certain accounts linked via the "DNA Relatives" feature.
  • Post the revelation of this breach, there's been a surge in concerns among users about the potential misuse of their ethnicity and other sensitive data.
  • 23andMe has temporarily disabled certain features in the "DNA Relatives" section to prioritize user privacy during this investigation.

Click here to read more

Seamus Larroque

CDPO / CPIM / ISO 27005 Certified

Home

Discover our latest articles

View All Blog Posts
March 12, 2025
Clinical Trials
Biotech & Healthtech
Data Transfers
Regulations & Guidelines
Clinical Trial Sponsor

Navigating Privacy Requirements for Clinical Trials Across Jurisdictions: Focus on China

China’s data protection regulations play a crucial role in clinical trials, requiring sponsors and researchers to comply with multiple laws, including the PIPL, GCP-2020, and cross-border data transfer rules. Unlike other jurisdictions, China imposes strict consent requirements, risk assessments, and regulatory filings, making compliance a key factor when selecting trial locations and managing participant data.

October 14, 2024
Clinical Trials
Guideline

Analyzing the Similarities and Differences Between ICH-GCP and GDPR in Clinical Trials

ICH-GCP and GDPR are vital for clinical trials, setting standards for participant protection and data integrity, with distinct focuses and enforcement approaches.