Features like DNA Relatives, which match you with genetic relatives in 23andMe's database, are opt-in, meaning you control whether your data is used to identify and connect you with biological relatives.
This analysis describes what 23andMe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision operationalizes user control over a specific category of data processing—the matching and display of genetic information across the service's user base. The mechanism distinguishes between passive data collection and active matching/sharing functionality, with the latter contingent on affirmative user election.
Interpretive note: The full scope of what information is visible to matched relatives and the specific consent language presented at opt-in is not detailed in the document excerpt reviewed.
Enabling DNA Relatives allows 23andMe to match your genetic data against its full user database to identify biological relatives; this can reveal sensitive family information that cannot be unknown once discovered, and also makes your partial genetic profile visible to matched relatives.
How other platforms handle this
to withdraw your consent to our processing of your data (where such processing is based on consent)
By providing your mobile phone number, you consent to receive automated text (SMS) messages from Instacart...To opt out, reply STOP. For help, reply HELP or contact us directly...
If you registered to use Notion's Services with such an email address, but you do not use the Services in connection with your organization...you may transfer your account to a different email address.
"You decide whether you want to participate in our sharing features, like DNA Relatives and Your Connections.Excerpt from 23andMe's Privacy Statement
REGULATORY LANDSCAPE: The DNA Relatives feature involves sharing partial genetic profile information with third-party users (matched relatives), which may constitute a data disclosure under GDPR and CCPA.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision operationalizes user control over a specific category of data processing—the matching and display of genetic information across the service's user base. The mechanism distinguishes between passive data collection and active matching/sharing functionality, with the latter contingent on affirmative user election.
Enabling DNA Relatives allows 23andMe to match your genetic data against its full user database to identify biological relatives; this can reveal sensitive family information that cannot be unknown once discovered, and also makes your partial genetic profile visible to matched relatives.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by 23andMe.