Genetic testing company 23andMe is facing a joint investigation by privacy officials from Canada and the U.K. following a data breach that occurred in October 2023. The investigation, led by Canada's privacy commissioner Philippe Dufresne and U.K. Information Commissioner John Edwards, aims to determine the extent of the breach and assess whether 23andMe had sufficient safeguards in place to protect user data. The regulators will also investigate whether the company properly notified affected individuals and regulators. The Canadian portion of the investigation will involve collaboration with privacy authorities in Quebec, B.C., and Alberta. The breach compromised the data of approximately 6.9 million 23andMe customers. 23andMe has expressed its willingness to cooperate with the regulators' requests. The breach raises concerns about the potential misuse of individuals' genetic information for surveillance or discrimination [ec1bd02c].
The joint investigation by Canadian and U.K. privacy officials reflects the growing focus on protecting personal information from malicious actors, both in Canada and globally. The breach at 23andMe highlights the vulnerability of genetic data and the need for robust security measures in the genetic testing industry. It also underscores the importance of stricter regulations to safeguard consumer data and prevent unauthorized access. The investigation will shed light on the scope of the breach and assess whether 23andMe took adequate measures to protect user data. It will also determine whether the company fulfilled its obligations to notify affected individuals and regulators. The findings of the investigation may have implications for the future regulation of the genetic testing industry and the protection of personal data [ec1bd02c].
In a separate development, the trial regarding the impact of Facebook's Cambridge Analytica scandal has begun in Germany. The trial is focused on the data breach that occurred in 2018, which involved the unauthorized access of personal data from millions of Facebook users. The trial will examine whether Facebook adequately protected user data and whether it should be held responsible for the breach. If found guilty, Facebook could face significant financial penalties. The trial is expected to last several months [283cbea0].