23andMe · 23andMe Privacy Statement

DNA Sample Storage Choice

Medium severity
Share 𝕏 Share in Share 🔒 PDF

What it is

You can decide whether 23andMe keeps your physical DNA sample after testing or destroys it — but once you choose destruction, that decision is permanent and cannot be undone.

Consumer impact (what this means for users)

If you allow 23andMe to store your physical DNA sample, it can be used for future re-genotyping, additional research, and potentially disclosed to third parties or law enforcement; requesting destruction eliminates this future exposure but is irreversible. This choice should be made deliberately, as sample retention creates an open-ended biological data asset.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Log into your account and navigate to Settings to find the sample storage preference. Request sample discard if you do not want your physical DNA retained — 23andMe will process the destruction within 30 days. Note this action is irreversible.

Cross-platform context

See how other platforms handle DNA Sample Storage Choice and similar clauses.

Compare across platforms →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Stored DNA samples could potentially be re-analyzed in the future as testing technology advances, used for new research purposes, or disclosed in response to legal demands — making the storage choice a long-term privacy decision.

View original clause language
You can choose to have your sample stored. If not, no problem. It will be securely destroyed after the laboratory completes its work. Note that a discard choice cannot be reversed. If you have previously provided a saliva sample but request that we discard it, we will discard the sample within 30 days of receiving your request.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: Physical DNA sample storage implicates GDPR Art. 9 (genetic data as special category), CCPA/CPRA sensitive personal information provisions, and potentially state biometric privacy laws including Illinois BIPA (740 ILCS 14/1 et seq.) depending on whether DNA samples qualify as biometric identifiers. The FDA may have jurisdiction over laboratory practices. CLIA (Clinical Laboratory Improvement Amendments, 42 U.S.C. §263a) governs laboratory sample handling.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    The FTC has consumer protection jurisdiction over DNA sample storage and handling practices, including whether retention and future use disclosures are adequate under FTC Act Section 5.
    File a complaint →

Provision details

Document information
Document
23andMe Privacy Statement
Entity
23andMe
Document last updated
April 29, 2026
Tracking information
First tracked
April 27, 2026
Last verified
April 27, 2026
Record ID
CA-P-003465
Document ID
CA-D-00148
Evidence Provenance
Source URL
Wayback Machine
SHA-256
dc3df5a6c7d5e8a0428d5086d3cf2f15f5072911b18402048166183c31b60dd4
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: 23andMe | Document: 23andMe Privacy Statement | Record: CA-P-003465
Captured: 2026-04-27 13:30:15 UTC | SHA-256: dc3df5a6c7d5e8a0…
URL: https://conductatlas.com/platform/23andme/23andme-privacy-statement/dna-sample-storage-choice/
Accessed: May 2, 2026
Classification
Severity
Medium
Categories

Other provisions in this document