23andMe can change its terms at any time, and simply continuing to use the service after being notified counts as your agreement to the new terms.
Because 23andMe can modify its Terms at any time and treats continued use as acceptance, users who remain on the platform after a material change — including changes that could expand data sharing or alter dispute resolution rights — are deemed to have agreed to those changes even if they did not read the notification.
Cross-platform context
See how other platforms handle Terms Modification and Continued-Use Acceptance and similar clauses.
Compare across platforms →Continued-use acceptance clauses mean users can be bound by significantly changed terms — including changes to data sharing, arbitration, or privacy practices — without actively consenting, which is particularly significant for a service holding users' irreversible genetic data.
REGULATORY FRAMEWORK: This provision implicates CCPA/CPRA (Cal. Civ. Code §1798.100) which requires affirmative consent for material changes to the processing of sensitive personal information including genetic data; FTC Act Section 5 applies to deceptive change-notification practices; GDPR Art. 7 (where applicable to EU-adjacent users) requires freely given, specific, informed, and unambiguous consent that cannot be obtained through continued-use mechanisms for sensitive data. California AG and FTC are primary enforcement authorities.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.