Ancestry states that personal information, including potentially genetic data and family history content, may be transferred to a third party in the event of a corporate transaction such as a merger, acquisition, or asset sale.
This analysis describes what Ancestry's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes transfer of the full scope of Ancestry's collected personal information, including genetic data, to a successor entity in a corporate transaction. The receiving entity may operate under different privacy policies and data governance frameworks, subject to applicable law and any representations made at the time of transfer.
The updated Privacy Statement no longer displays a dedicated 'Do Not Sell or Share My Personal Information' link in the footer, which was previously accessible to California residents under CCPA requirements. This link allowed users to exercise data-sharing opt-out rights. The footer now lists 'Consumer Health Privacy' as a separate item but does not explicitly direct users to their CCPA controls. California residents may need to locate their opt-out rights through alternative navigation paths on the Ancestry site.
View change record →The updated privacy policy removes the 'Do Not Sell or Share My Personal Information' link from the footer navigation. This link previously provided direct access to Ancestry's data-sharing opt-out mechanism, which is a required disclosure under California's CCPA. While the removal does not eliminate the opt-out right itself, it may make the opt-out control less easily discoverable from the privacy policy page. Affected users may need to locate the opt-out mechanism through alternate navigation or search methods.
View change record →The updated Privacy Statement clarifies what uses of Ancestry services are permitted and prohibited, establishes that photo face-grouping in your gallery requires your express consent, and introduces SMS messaging as a communication channel for future opt-in communications. The statement now covers Ancestry, AncestryDNA, and Related Brands under a unified framework while noting that other services operated by the company use separate privacy statements. The removal of 'uploaded DNA data' from the account creation section reflects a narrowing of that specific provision's scope, though genetic information processing remains described elsewhere in the policy. You can review the full updated statement to understand how your personal information will be processed and manage your communication preferences when SMS opt-ins become available.
View change record →Removed notification requirement, opportunity to opt out, and disclosure of changes to privacy policy; significantly weakened user protections in corporate transactions.
View full change record →Under this clause, personal data including DNA records and family tree content collected by Ancestry may be transferred to an acquiring company in a merger, acquisition, or asset sale, potentially subjecting that data to a different privacy framework. The policy does not specify whether users will be notified prior to such a transfer or provided an opportunity to delete their data before the transaction completes.
How other platforms handle this
if you are accessing and using Lime Services under a corporate account...you acknowledge and agree that Lime may share certain of your usage information with whomever provided you with access to the Lime Services
we may share data between our affiliates for the safety and security of our users and may take necessary actions if we believe you have violated these Terms, including banning you from our Services and/or our affiliates' services...
Whenever we transfer personal data internationally, we use tools and transfer agreements to: make sure the data transfer complies with applicable law; and help to give your data the same level of protection as it has in the EU...
"In the event of a merger, acquisition, bankruptcy, or other sale of all or a portion of our assets, personal information may be one of the assets transferred to or acquired by a third party.Excerpt from Ancestry's Privacy Statement
REGULATORY LANDSCAPE: Corporate transaction data transfers involving sensitive personal data, including genetic information, may require regulatory notification or approval in certain jurisdictions.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision authorizes transfer of the full scope of Ancestry's collected personal information, including genetic data, to a successor entity in a corporate transaction. The receiving entity may operate under different privacy policies and data governance frameworks, subject to applicable law and any representations made at the time of transfer.
Under this clause, personal data including DNA records and family tree content collected by Ancestry may be transferred to an acquiring company in a merger, acquisition, or asset sale, potentially subjecting that data to a different privacy framework. The policy does not specify whether users will be notified prior to such a transfer or provided an opportunity to delete their …
ConductAtlas has identified this type of provision across 288 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ancestry.