8 Total
3 High severity
4 Medium severity
1 Low severity
Summary

This is 23andMe's Terms of Service for its U.S. DNA testing and genetic information services, covering everything from how your saliva sample is processed to how disputes are resolved. The single most important thing to know is that by using the service you give up your right to sue 23andMe in court or join a class action lawsuit — all disputes must go through private arbitration, but you have 30 days from account creation to opt out of this clause. If you want to keep your right to sue, you must mail a written opt-out notice to 23andMe Legal, 870 Market Street, Room 415, San Francisco, CA 94102 within 30 days of first creating your account.

Technical Summary

This Terms of Service governs U.S. users' access to 23andMe Research Institute's genetic testing products, services, software, and website, establishing a binding contractual relationship under California law with dispute resolution via JAMS arbitration. The most significant obligations include users' agreement to mandatory individual arbitration with a 30-day opt-out window, a class action waiver, and 23andMe's right to modify terms with continued-use acceptance constituting consent. Notable deviations from industry standard include an explicit prohibition on use by insurance companies and employers, a restriction on forensic genealogy use, a broad perpetual license grant to user-generated content, and a no-refund policy for partially used services with a narrow carve-out for failed sample processing. The document engages GINA (Genetic Information Nondiscrimination Act), CCPA/CPRA (Cal. Civ. Code §1798.100 et seq.), FTC Act Section 5, and potentially HIPAA-adjacent frameworks given the sensitivity of genetic health data, though 23andMe explicitly disclaims medical device or HIPAA-covered-entity status. Material compliance considerations include the company's bankruptcy proceedings (referenced in the document), which create heightened risk regarding data asset transfer, and the adequacy of consent mechanisms for secondary research use of genetic data.

Evidence Provenance
Captured April 19, 2026 06:10 UTC
Document ID CA-D-000147
Version ID CA-V-000706
Wayback Machine View archived versions →
SHA-256 bddb92bc01773d87e5f6157d525fe0a08abb0e48becacc33725f316880d9f25e
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
Analyzed Changes

2 changes analyzed since monitoring began.

What changed 23andMe updated their 23andMe Terms of Service on April 19, 2026. Change detected: 4 sentence(s) added, 2 sentence(s) removed, 17 sentence(s) modified. Document contained 61 sentences after update.
Consumer impact US consumers are now explicitly subject to mandatory individual arbitration, meaning they give up the right to jury trials or class action lawsuits to resolve disputes with 23andMe. The rule governing conflicts between the main Terms and service-specific terms has also flipped — the main Terms now control, which could limit protections consumers thought they had under specific service agreements like Telehealth. You can review the full updated Terms and the newly incorporated Membership Terms, Telehealth Terms, and Important Test Info at the link provided in the document to understand how these changes affect your rights.
Why it matters US users of 23andMe now have a mandatory individual arbitration requirement prominently built into their agreement, meaning they cannot pursue class action lawsuits or jury trials if something goes wrong. The reversal of the conflict-resolution rule also means any protections in the Telehealth or Membership Terms can be overridden by the broader main Terms.
What changed 23andMe updated their 23andMe Terms of Service on March 23, 2026. Change detected: 2 sentence(s) added, 4 sentence(s) removed, 17 sentence(s) modified. Document contained 59 sentences after update.
Consumer impact This version of 23andMe's Terms of Service now explicitly applies to users outside the US, Canada, EEA, UK, and Switzerland, meaning users in those covered regions should identify which regional Terms apply to them. The removal of the mandatory arbitration notice from this document may change how disputes are resolved for international users covered by this version. You can visit 23andMe's website to confirm which regional Terms of Service apply to your location.
Why it matters International users subject to this version of the Terms are no longer bound by a mandatory arbitration clause, which may change their legal options for resolving disputes with 23andMe. The change in which terms govern conflicts also means users and businesses can no longer assume the main Terms are the authoritative document for all services.

Recent Clause-Level Changes Apr 19, 2026

10 provisions unchanged.

View full change record →
High Severity — 3 provisions
Medium Severity — 4 provisions
Low Severity — 1 provision

Cross-platform context

See how other platforms handle Age Restriction — Minimum Age 18 and similar clauses.

Compare across platforms →

Applicable Regulations

BIPA
Illinois, USA
CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
GDPR
European Union
HIPAA
United States Federal

Related Analysis

Privacy · April 16, 2026
23andMe Is Bankrupt. What Happens to Your DNA Now?

Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do…