If you agree to participate in 23andMe's research program, your genetic and health information (with your name and direct identifiers removed) may be combined with other users' data and shared with outside research partners, including pharmaceutical companies and academic institutions. You can withdraw this consent at any time, but research already done using your data cannot be undone.
This analysis describes what 23andMe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision defines the operational scope of 23andMe's research data sharing practices and establishes the procedural framework through which participant data may be aggregated and used for research initiatives. The opt-out structure determines how participants can control their ongoing participation in the research component of the service.
Interpretive note: The full text of the research consent terms and third-party partner agreements is not reproduced in the document excerpt reviewed; the adequacy of deidentification and specific scope of pharmaceutical partnerships may be detailed in supplemental documents.
If you opt into research, your deidentified genetic and phenotypic data may be shared with pharmaceutical and academic partners for studies you are not individually informed about; withdrawing consent stops future use but cannot reverse research already completed using your data.
How other platforms handle this
Protect us, our business, our users, and others, for example to enforce our terms of service, prevent spam or other unwanted communications, and investigate or protect against fraud
we may use, retain or share information with law enforcement or others in circumstances where a person's vital interests require protection, such as in the case of emergencies.
Any such de-identified genetic information and phenotypic information we share with third parties for research purposes is done in accordance with Part 46 (beginning with Section 46.101) of Title 45 of the Code of Federal Regulations.
"If you choose to participate in research, your deidentified data will be pooled with data from other participants. You can opt out at any time.Excerpt from 23andMe's Privacy Statement
REGULATORY LANDSCAPE: This provision implicates GDPR Article 9 (special category data including genetic data) and the explicit consent requirement under Article 9(2)(a) for EU/EEA users, as well as UK GDPR equivalents.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision defines the operational scope of 23andMe's research data sharing practices and establishes the procedural framework through which participant data may be aggregated and used for research initiatives. The opt-out structure determines how participants can control their ongoing participation in the research component of the service.
If you opt into research, your deidentified genetic and phenotypic data may be shared with pharmaceutical and academic partners for studies you are not individually informed about; withdrawing consent stops future use but cannot reverse research already completed using your data.
ConductAtlas has identified this type of provision across 288 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by 23andMe.