If you opt into the Research program, 23andMe may share your de-identified genetic and health data with third-party researchers, including pharmaceutical and biotech companies, to conduct studies on disease and drug development.
This analysis describes what 23andMe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The provision establishes the operational scope of data utilization beyond individual health reporting, creating a revenue model dependent on research data licensing. This authorization distinguishes 23andMe's business model from ancestry-focused services and structures user data as a resource for pharmaceutical development pipelines.
The removal of this high-severity provision regarding pharmaceutical data sharing represents a significant change in transparency about third-party research commercialization, though content may be integrated into other provisions.
View full change record →Consumers who opt into Research may have their genetic data used in commercial pharmaceutical research, with potential financial benefits accruing to 23andMe and its partners rather than to the consumer. This consent is separate from the main service and can be withdrawn at any time through account settings.
How other platforms handle this
Where you provide consent, we share your information as described at the time of consent, such as when authorizing a third-party application or website to access your Skillshare account...
we may use, retain or share information with law enforcement or others in circumstances where a person's vital interests require protection, such as in the case of emergencies.
Any such de-identified genetic information and phenotypic information we share with third parties for research purposes is done in accordance with Part 46 (beginning with Section 46.101) of Title 45 of the Code of Federal Regulations.
The Research consent program implicates CCPA's 'sale' and 'sharing' definitions, GDPR Article 9 special category data requirements, and FTC oversight of data broker-adjacent practices; compliance teams should evaluate whether research data sharing constitutes a 'sale' …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The provision establishes the operational scope of data utilization beyond individual health reporting, creating a revenue model dependent on research data licensing. This authorization distinguishes 23andMe's business model from ancestry-focused services and structures user data as a resource for pharmaceutical development pipelines.
Consumers who opt into Research may have their genetic data used in commercial pharmaceutical research, with potential financial benefits accruing to 23andMe and its partners rather than to the consumer. This consent is separate from the main service and can be withdrawn at any time through account settings.
ConductAtlas has identified this type of provision across 288 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by 23andMe.