On May 21, 2026, 23andMe updated its Privacy Statement to reflect that the policy now applies to websites owned by 23andMe Research Institute rather than 23andMe generally. The update also adds a new disclosure stating that users who receive Telehealth Services will have a separate Medical Record Privacy Notice describing how medical information is handled. Additionally, the contact address was reformatted and the last update date was changed from October 17, 2025 to May 19, 2026.
The updated Privacy Statement now clarifies that it applies to 23andMe Research Institute and explicitly discloses that users receiving Telehealth Services are subject to a separate Medical Record Privacy Notice that describes how medical information is used and maintained. This addition makes the multi-document privacy framework more transparent at the point of entry to the main privacy policy. Users who use or plan to use Telehealth Services should review the separate Medical Record Privacy Notice to understand how clinical information will be handled.
→ If you use or plan to use 23andMe Telehealth Services, review the separate Medical Record Privacy Notice to understand how your medical information will be handled.
Updated policy now explicitly discloses that users receiving Telehealth Services are subject to a separate Medical Record Privacy Notice.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
This change is primarily administrative and clarificatory. The updated language establishes that the main Privacy Statement applies to 23andMe Research Institute's operations and adds an explicit disclosure that Telehealth Services are subject to a separate …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002214.
23andMe updated its Privacy Statement on July 9, 2026 to change a single domain reference in the scope clause. The …
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do…
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.