Version History

• May 21, 2026 v1 low
  On May 21, 2026, 23andMe updated its Privacy Statement to reflect that the policy now applies to websites owned by 23andMe Research Institute rather than 23andMe generally. The update also adds a new disclosure stating that users who receive Telehealth Services will have a separate Medical Record Privacy Notice describing how medical information is handled. Additionally, the contact address was reformatted and the last update date was changed from October 17, 2025 to May 19, 2026.
  +1 added · 2 modified
  9f05d028e687…
• May 5, 2026 v1 medium
  23andMe removed a sentence that described separate privacy protections for telehealth services and updated references to the company name in the scope statement and contact section. The removed language previously directed users to a separate Medical Record Privacy Notice for telehealth-related medical information. The updated privacy statement no longer explicitly references this separate notice or explains how medical information collected through telehealth services is handled under different privacy rules.
  · -1 removed · 2 modified
  63c2151dde46…
• April 19, 2026 v1 low
  23andMe updated its Privacy Statement on April 19, 2026 to clarify that the policy applies to websites owned and operated by 23andMe Research Institute rather than 23andMe broadly. The update also adds disclosure that users who receive Telehealth Services through licensed healthcare providers are subject to a separate Medical Record Privacy Notice describing how medical information is handled. A minor address formatting change was also made.
  +1 added · 2 modified
  4851ad5bc288…
• March 23, 2026 v1 medium
  23andMe removed a reference to its Research Institute from the opening scope statement, changing 'websites owned and operated by 23andMe Research Institute' to 'websites owned and operated by 23andMe'. The company also removed an entire sentence describing a separate Medical Record Privacy Notice for telehealth services and made minor formatting corrections to the contact address. These changes narrow the explicit organizational scope and remove disclosure of a parallel privacy notice that previously applied to certain healthcare-related services.
  · -1 removed · 2 modified
  be863c02dd34…
• March 19, 2026 v1
  Initial snapshot — monitoring begins
  b37a75530a5e…