The agreement states that users who opt into research participation have their deidentified genetic data combined with data from other research participants, and that opt-out from this program is available at any time.
This analysis describes what 23andMe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the mechanism by which genetic information, once deidentified by 23andMe's processes, is aggregated into research datasets. The adequacy of the deidentification standard applied and the identity of downstream research partners are not detailed in this excerpt, which are material considerations under GDPR, HIPAA, and California GIPA transparency requirements.
Interpretive note: The document does not specify the deidentification methodology applied, the identity of research partners, or the scope of permissible downstream research use, which affects assessment of compliance with GDPR, HIPAA, and California GIPA requirements.
Under this provision, users who opt into the research program have their deidentified genetic data pooled with other participants' data for research purposes. The agreement states opt-out is available at any time through account settings.
Cross-platform context
See how other platforms handle Research Participation and Genetic Data Pooling and similar clauses.
Compare across platforms →"If you choose to participate in research, your deidentified data will be pooled with data from other participants. You can opt out at any time.Excerpt from 23andMe's Privacy Statement
(1) REGULATORY LANDSCAPE: This provision implicates GDPR Article 9 (special category genetic data), the California Genetic Information Privacy Act, HIPAA deidentification standards under 45 CFR 164.514, and CCPA/CPRA disclosure requirements for data sharing.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the mechanism by which genetic information, once deidentified by 23andMe's processes, is aggregated into research datasets. The adequacy of the deidentification standard applied and the identity of downstream research partners are not detailed in this excerpt, which are material considerations under GDPR, HIPAA, and California GIPA transparency requirements.
Under this provision, users who opt into the research program have their deidentified genetic data pooled with other participants' data for research purposes. The agreement states opt-out is available at any time through account settings.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by 23andMe.