23andMe · 23andMe Privacy Statement · View original document ↗

Account Deletion and Irreversible Sample Discard

Medium severity Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity 23andMe recorded 2 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for 23andMe Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

You can delete your 23andMe account at any time, which will also discard your physical DNA sample — but once you make these choices, they cannot be undone.

This analysis describes what 23andMe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision defines the operational mechanism for data subject rights under privacy regulations, specifying that account deletion triggers both account termination and permanent sample destruction rather than retention or archival.

Recent Activity

This document changed recently

Medium May 5, 2026

The updated privacy statement no longer explicitly directs users to a separate Medical Record Privacy Notice for telehealth services or explains that medical information collected through telehealth is governed by different privacy rules. Previously, the policy stated that users choosing telehealth services coordinated through 23andMe would find healthcare privacy protections described in a separate notice. That reference is now absent from the main privacy statement. Users seeking privacy information specific to telehealth services will need to determine independently whether a separate notice exists or contact 23andMe directly using the provided contact information.

View change record →
Medium Mar 23, 2026

The updated privacy statement no longer explicitly discloses a separate Medical Record Privacy Notice that previously described how medical information is used, disclosed, and maintained for telehealth services. Users who receive telehealth services coordinated through 23andMe may now lack clear notice of which privacy framework governs their medical records, since the reference to that parallel notice has been removed. The organizational scope change from '23andMe Research Institute' to '23andMe' narrows the explicitly named entities responsible for the policy, though operational impact depends on how these entities actually function.

View change record →

Consumer impact (what this means for users)

Consumers who delete their accounts lose all access to their genetic data and reports permanently, and previously discarded samples cannot be recovered. This all-or-nothing structure limits partial data management options for users who want to remove some but not all data.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Close Your Account
    Log into your 23andMe account, go to Settings, and select the account deletion option. Confirm your choice — this will opt you out of Research and permanently discard your sample and cannot be reversed.

How other platforms handle this

OpenAI Medium

We may suspend or terminate your access to the Services at any time for any reason, including if we determine you have violated these Terms. You may stop using our Services at any time. Upon termination, your right to use the Services will immediately cease.

Google Gemini Medium

Google may suspend or terminate your access to our generative AI services if you violate these policies. In cases of severe or repeated violations, we may also suspend or terminate your Google Account.

Snapchat Medium

Snap reserves the right to modify, suspend, or terminate your access to the Services at any time, with or without notice to you, for any reason, including if Snap determines that you have violated these Terms or the law. We will try to give you prior notice if we terminate your account, but we're no...

See all platforms with this clause type →

Monitoring

23andMe has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

The irreversibility of deletion and sample discard aligns with GDPR Article 17 right to erasure requirements, but compliance teams should verify whether all derived research data and de-identified records are also purged or whether retention exceptions apply.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC oversees whether companies honor consumer deletion rights and whether data deletion practices match published privacy policy representations.
    File a complaint →

Applicable regulations

CFAA
United States Federal

Provision details

Document information
Document
23andMe Privacy Statement
Entity
23andMe
Document last updated
May 5, 2026
Tracking information
First tracked
March 20, 2026
Last verified
March 20, 2026
Record ID
CA-P-000902
Document ID
CA-D-00148
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
844495d7dee785114a99561b45c570c06ec624efeede6528fc52ced0ba522f1b
Analysis generated
March 20, 2026 10:27 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: 23andMe
Document: 23andMe Privacy Statement
Record ID: CA-P-000902
Captured: 2026-03-20 10:27:43 UTC
SHA-256: 844495d7dee78511…
URL: https://conductatlas.com/platform/23andme/23andme-privacy-statement/account-deletion-and-irreversible-sample-discard/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does 23andMe's Account Deletion and Irreversible Sample Discard clause do?

This provision defines the operational mechanism for data subject rights under privacy regulations, specifying that account deletion triggers both account termination and permanent sample destruction rather than retention or archival.

How does this clause affect you?

Consumers who delete their accounts lose all access to their genetic data and reports permanently, and previously discarded samples cannot be recovered. This all-or-nothing structure limits partial data management options for users who want to remove some but not all data.

Is ConductAtlas affiliated with 23andMe?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by 23andMe.