23andMe can hand over your DNA and personal information to police or government agencies in response to legal demands, and in some cases may do so without a court order if the company believes it's necessary to prevent harm or fraud.
Your genetic data, which uniquely identifies you and reveals information about your biological family, can be shared with law enforcement agencies, and 23andMe retains discretion to do so without a warrant in certain circumstances, creating a significant surveillance risk for users and their relatives. This is particularly significant given the use of consumer genetic databases in law enforcement investigations.
Cross-platform context
See how other platforms handle Law Enforcement Disclosure Without Notice and similar clauses.
Compare across platforms →Law enforcement access to genetic data is especially sensitive because your DNA can implicate not just you but your biological relatives — a single disclosure can have consequences for family members who never used 23andMe.
REGULATORY FRAMEWORK: This provision engages the Electronic Communications Privacy Act (ECPA, 18 U.S.C. §§2701-2712), the Stored Communications Act (SCA), the Fourth Amendment (government requests), GDPR Art. 6(1)(c) (legal obligation) and Art. 49(1)(d) (transfers for important public interest) for EU users, and CCPA's law enforcement exemption. The primary enforcement authority for government access issues is the DOJ; GDPR compliance is overseen by EU supervisory authorities.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.