23andMe successor settles with California for $6 million over cybersecurity failings
California's $6M settlement with the 23andMe successor entity signals that cybersecurity liabilities survive corporate restructuring — a precedent European acquirers should note when evaluating M&A targets.
Summary written by editorial AI · Source link below
California Attorney General Rob Bonta announced a settlement under which 23andMe's successor will pay $6 million to resolve allegations that the company did not properly protect customers' data before a 2023 breach.
Editorial Analysis
Framed for the Compliance & GRC desk
The settlement demonstrates that state regulators will pursue successor entities for prior-era security deficiencies, reinforcing that data-protection obligations survive corporate restructuring.
Review your organisation's data-protection compliance posture for any acquired entities and ensure contractual indemnities cover inherited breach liabilities.
A $6M settlement proves cybersecurity liabilities transfer to successor companies — factor this into acquisition decisions.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at The Record in a new tab.
More from the Compliance Desk
- Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads2d
- WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators6d
- Provable Compliance: A Protocol for Runtime Compliance Evidence and Transaction-Specific Decisioning19 Oct
- SoK: Failure Modes in Common Criteria Product Evaluation - A Taxonomy and Design-for-Evaluability Guidance9 Oct
- Lawmakers warn Google could expose Spirit Airlines data in $10 million AI training deal8 Oct