You must be at least 18 years old to create an account, though parents or legal guardians may submit samples on behalf of minors.
This analysis describes what 23andMe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes 18 as the minimum age for account creation while creating a parental consent pathway for minors, which has implications for how genetic data of children is collected and processed under applicable privacy laws.
The updated Terms now apply only to users who live outside the United States, Canada, EEA, UK, and Switzerland, or who access the Services from outside those regions. US, Canadian, EEA, UK, and Swiss users are directed to region-specific Terms instead. Additionally, when terms for a specific Service conflict with the main Terms, the specific Service terms now govern that portion of your use rather than the main Terms controlling. The mandatory arbitration provision remains in the document but is no longer prominently featured at the very beginning of the Terms.
View change record →The updated Terms of Service now apply exclusively to users in the United States, narrowing the geographic scope from the prior version that addressed users in multiple regions. The terms now contain a prominently featured mandatory arbitration provision that requires disputes to be resolved through individual arbitration on an individual basis rather than through jury trials or class action lawsuits. This means that if a user has a dispute with 23andMe, the updated terms require arbitration as the method of resolution instead of traditional litigation. Additionally, if a user purchases additional services, the main Terms of Service (including the arbitration provision) will control any conflicting terms from those additional services. You can review the complete updated Terms of Service through the link provided in the document.
View change record →The updated terms now apply only to users who live outside or access services outside the United States, Canada, EEA, UK, and Switzerland. Previously, the terms applied to US-based users. The terms also clarify that when service-specific terms conflict with the general Terms of Service, the service-specific terms will govern that particular service rather than the general terms controlling all conflicts. This means users of additional services may operate under different dispute resolution and governance procedures depending on which service they are using.
View change record →The Terms permit genetic sample collection from minors only when a parent or legal guardian registers and submits the sample, meaning the parent's account and consent govern the minor's genetic data processing under these Terms.
How other platforms handle this
You must be at least 13 years old (or the minimum age required in your country) to use Threads. If you are under 18, you must have your parent or legal guardian's permission to use Threads.
Our Services are not directed to children under 13. If you learn that anyone younger than 13 has unlawfully provided us with personal data, please contact us at privacy@medium.com.
The Service is intended for general audiences and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your cons...
Monitoring
23andMe has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"You are at least 18 years old; Any sample you provide to 23andMe is either your own, or the sample of a minor for whom you are a parent or legal guardian, or the sample of a person for whom you are a legally authorized representative;— Excerpt from 23andMe's 23andMe Terms of Service
REGULATORY LANDSCAPE: The collection of genetic data from minors implicates COPPA for users under 13, as well as state children's privacy laws including the California Age-Appropriate Design Code. The parental consent mechanism described in the Terms, where a parent registers their own account and submits a minor's sample, should be evaluated against COPPA's specific consent requirements. The FTC enforces COPPA and has taken enforcement action against companies that collect children's data without compliant parental consent. GOVERNANCE EXPOSURE: High. Genetic data is among the most sensitive categories of personal information, and collection from minors under a parent-mediated consent structure requires careful implementation of consent mechanisms, data retention limits, and access controls specific to minors' data. The adequacy of the consent structure for minors' genetic data should be evaluated against COPPA, CCPA's children's data provisions, and applicable state genetic privacy laws. JURISDICTION FLAGS: California's CCPA imposes specific obligations for data of consumers under 16. Illinois' BIPA covers biometric identifiers, and whether genetic data qualifies under BIPA is a developing legal question. States with genetic privacy statutes may impose additional consent requirements for minor genetic data collection beyond what the Terms describe. CONTRACT AND VENDOR IMPLICATIONS: Laboratory partners processing samples from minors should confirm that their data handling practices are consistent with the heightened obligations applicable to children's data under federal and state law. Any third-party research participation involving minor samples requires additional consent review. COMPLIANCE CONSIDERATIONS: Compliance teams should audit the consent flow for minor sample submission to confirm it meets COPPA requirements, including verifiable parental consent mechanisms. Data mapping should separately categorize minor genetic data to ensure appropriate retention, access, and deletion controls are applied.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes 18 as the minimum age for account creation while creating a parental consent pathway for minors, which has implications for how genetic data of children is collected and processed under applicable privacy laws.
The Terms permit genetic sample collection from minors only when a parent or legal guardian registers and submits the sample, meaning the parent's account and consent govern the minor's genetic data processing under these Terms.
ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by 23andMe.