A direct-to-consumer genetic testing company that analyzes saliva samples to provide users with ancestry information and health-related genetic reports. The company collects highly sensitive genetic and personal health data, making their privacy policies particularly important for understanding how this irreversible biometric information is stored, shared, and potentially used for research purposes. Their terms of service govern user rights regarding genetic data ownership and deletion, which have significant long-term implications for consumers.

2 Documents
48 All provisions 19 High severity 28 Medium severity 1 Low severity
8 Changes · 12 mo 2 high
May 21, 2026 Last change

High — provisions that significantly limit your legal rights, authorize broad data collection, or create material financial exposure. Medium — provisions worth knowing about but with partial protections or limited scope. Low — standard terms with minimal consumer impact.

Governance Coverage
Privacy Rights
18 provisions · 5 high · 12 med
Data Sharing
11 provisions · 8 high · 3 med
Acceptable Use
5 provisions · 1 high · 4 med
Liability Limitation
4 provisions · 3 high · 1 med
Arbitration
4 provisions · 4 high
Account Control
3 provisions · 3 med
Data Usage
3 provisions · 1 high · 2 med
Payment Fees
2 provisions · 2 med
Data Retention
2 provisions · 1 high · 1 med
Legal Jurisdiction
2 provisions · 1 med
Quick Facts
Arbitration: Mandatory
Data Retention: Specified
Class Action: Waived
Key Governance Provisions
High Genetic Data De-Identification and Third-Party Research Sharing

The policy authorizes sharing of genetic data with external research partners, and the practical protection depends entirely on the robustness of the de-identification method used, which the summary …

High Research Participation Opt-In and Irreversible Data Sharing

The policy discloses that Research consent, once acted upon and data shared, creates an irreversible commitment; withdrawal from Research stops future sharing but does not remove already-contributed …

High Business Transfer and Bankruptcy Data Transfer

This provision is particularly significant given that 23andMe has publicly reported financial difficulties; it means your most sensitive personal data, your DNA, could be acquired and controlled by a…

High Limitation of Liability

This provision limits the monetary recovery available to users who experience harm from genetic testing errors, data incidents, or service failures, which may result in recoverable amounts being mate…

High Mandatory Individual Arbitration and Class Action Waiver

This provision removes the ability to participate in a class action lawsuit or demand a jury trial, which are typical mechanisms for consumers to collectively challenge widespread company practices o…

Document Coverage
Privacypolicy Termsofservice
Last change detected: May 21, 2026 Changes (12 months): 8 (2 high) Documents monitored: 2 Provisions tracked: 48
Compare With Similar Platforms
Calm CVS Health Fitbit Garmin GoodRx Headspace MyFitnessPal Noom

Documents

23andMe Privacy Statement

High

This document establishes 23andMe's data collection, use, and sharing practices for genetic testing services, including DNA information, health data, and personal identifiers. The policy authorizes sharing genetic and health data …

Last updated May 5, 2026 · Privacy policy
8 provisions 5 versions captured 2 significant changes Version history →

23andMe Terms of Service

High

This document establishes the terms governing 23andMe's DNA testing and health reporting services, including the scope of service usage, handling of genetic samples, and dispute resolution procedures. The agreement requires …

Last updated May 5, 2026 · Terms of service
8 provisions 4 versions captured 4 significant changes Version history →

Recent Changes

May 5, 2026 · 23andMe Privacy Statement Medium

23andMe removed a sentence that described separate privacy protections for telehealth services and updated references to the company name in the scope statement and contact section. The removed language previously …

View change record →
May 5, 2026 · 23andMe Terms of Service Medium

23andMe restructured the opening section of its Terms of Service on May 5, 2026, making three operational changes: (1) The mandatory arbitration notice that previously appeared at the very top …

View change record →
April 19, 2026 · 23andMe Terms of Service High

23andMe restructured its Terms of Service on April 19, 2026, making several material changes to scope and dispute resolution. The updated terms now apply only to users in the United …

View change record →
March 23, 2026 · 23andMe Privacy Statement Medium

23andMe removed a reference to its Research Institute from the opening scope statement, changing 'websites owned and operated by 23andMe Research Institute' to 'websites owned and operated by 23andMe'. The …

View change record →
March 23, 2026 · 23andMe Terms of Service Medium

On March 23, 2026, 23andMe revised its Terms of Service to narrow the geographic scope of applicability and clarify how conflicting terms are resolved. The updated terms now apply only …

View change record →
📈 Policy Drift Analysis View all changes →

High Severity Provisions (7)

View all high severity provisions → Compare 23andMe with other platforms →

Applicable Regulations

BIPA
Illinois, USA
View official text ↗
CCPA/CPRA
California, USA
View official text ↗
CFAA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FAA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
HIPAA
United States Federal
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗

Related Analysis

Privacy · April 16, 2026
23andMe Is Bankrupt. What Happens to Your DNA Now?

Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do…

Compare with Similar Platforms

Calm
health
CVS Health
health
Fitbit
health
Garmin
health
GoodRx
health
Headspace
health
MyFitnessPal
health
Noom
health

Frequently Asked Questions

What 23andMe documents does ConductAtlas track?

ConductAtlas tracks 2 23andMe documents including terms of service, privacy policy, and other governance documents. Every document is captured daily with cryptographic verification.

How many policy changes has 23andMe made in the past year?

23andMe has made 8 policy changes in the past 12 months across the documents ConductAtlas tracks, including 2 classified as high severity.

How many provisions has ConductAtlas classified for 23andMe?

ConductAtlas has classified 48 provisions across 23andMe's tracked documents. 19 are rated high severity, 28 medium, and 1 low.

Can I get alerts when 23andMe changes their policies?

Yes. Monitor subscribers ($19/month) can add 23andMe to their watchlist and receive same-day email alerts whenever any tracked document changes.