PHOENIX, Ariz. — Attorney General Kris Mayes announced Tuesday that Arizona is joining a multistate legal challenge against 23andMe’s plan to sell personal genetic information as part of its bankruptcy proceedings.
Mayes and 27 other state attorneys general filed a lawsuit and a formal objection in federal bankruptcy court this week. The legal actions aim to stop the company from auctioning off the genetic and health data of approximately 15 million consumers without their explicit permission.
“Arizonans trusted 23andMe with some of the most sensitive and personal data they possess—their genetic information,” Mayes said. “They didn’t sign up to have that information sold off in a bankruptcy auction.”
Concerns Over Privacy and Consent
The direct-to-consumer DNA testing company filed for bankruptcy earlier this year and is now attempting to liquidate its assets, including vast stores of genetic profiles, health data, and medical information collected from users.
According to the lawsuit, the sale of this data violates basic consumer rights, as 23andMe customers never gave informed consent for their genetic data to be treated like commercial property.
States involved in the case argue that allowing the sale of such sensitive information could open the door to privacy violations, data breaches, and unintended use of personal medical information. The coalition insists that any sale must require each customer’s clear and informed agreement.
Widespread Bipartisan Action
The objection, filed on June 9, includes attorneys general from 28 jurisdictions, including Arizona, New York, Florida, Illinois, and Washington, spanning both political parties. The group maintains that genetic data must be held to higher standards than typical business assets like equipment or software.
Mayes emphasized that protecting genetic privacy is not just a matter of consumer protection—it’s about basic human dignity.
The case now heads to federal bankruptcy court, where the coalition will argue that deeply personal genetic data cannot be commodified without explicit customer consent.
