If you use 23andMe's telehealth service, a completely separate privacy document — not this one — governs your medical records and clinical health information.
Users of 23andMe's telehealth services have their clinical medical information governed by a separate privacy notice that may include HIPAA-protected health information, creating a two-track privacy regime where the protections and data uses differ materially between the genetic testing service and the healthcare service. Consumers using both services should read both documents carefully.
Cross-platform context
See how other platforms handle Telehealth and Medical Record Privacy Notice and similar clauses.
Compare across platforms →Medical information collected through 23andMe's telehealth service is subject to different (and likely HIPAA-governed) rules than your genetic testing data, and failing to read the separate Medical Record Privacy Notice could mean missing critical protections or limitations.
REGULATORY FRAMEWORK: The Telehealth service and associated Medical Record Privacy Notice likely engages HIPAA Privacy Rule (45 CFR Part 164) and the HIPAA Security Rule (45 CFR Part 164.300 et seq.), enforced by HHS Office for Civil Rights (OCR). The 21st Century Cures Act information blocking rules (45 CFR Part 171) may also apply to electronic health records generated through telehealth. State telehealth and medical privacy laws may impose additional requirements.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.