23andMe to pay $18 million in new genetics data breach settlement
23andMe's $18M settlement with 43 U.S. state attorneys general for genetic data mishandling signals intensifying enforcement around sensitive personal data—a warning for EU enterprises processing health or biometric data under GDPR.
Summary written by editorial AI · Source link below
Genetic testing company 23andMe has agreed to pay $18 million to settle claims from a coalition of 43 attorneys general that it failed to protect customers' genetic data. [...]
Editorial Analysis
Rising enforcement severity for sensitive personal data breaches in the U.S. foreshadows parallel GDPR action in Europe, where health and genetic data enjoy special-category protection.
Audit controls over special-category personal data (health, biometric, genetic) and confirm breach response plans satisfy GDPR Article 9 and 33 requirements.
An $18 million data breach settlement reinforces the financial risk of inadequate protection for sensitive personal data—directly relevant to GDPR-exposed enterprises.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at BleepingComputer in a new tab.
More from the Compliance Desk
- X-rated Compliance Theater: An Empirical Evaluation of European Age Verification Systems in Adult Websites17 Jul
- Designing a GDPR-Compliant Security Architecture for Remote Elderly Care Systems: A Privacy-by-Design Approach16 Jul
- Manage Vendor Risk in a Few Practical Steps14 Jul
- Reverse Engineering Compliance: A Dual-Graph Verification Framework for Auditing Legacy IT Security Concepts10 Jul
- From Legacy Documentation to OSCAL: An MCP-Based Agent Pipeline for Threat-Informed Continuous Compliance in Critical Infrastructure10 Jul