Court Rules
All enforcement actions
Enforcement ActionLow RiskMultistate

NY AG and 27 States Sue 23andMe to Block Genetic Data Auction

23andMe, Inc.June 10, 2025New York Attorney General

Consumers Affected

15,000,000

Summary

New York Attorney General Letitia James, joined by 27 other state attorneys general and the District of Columbia, filed a lawsuit against 23andMe to block the company’s planned sale of 15 million customers’ genetic and health data without their consent or knowledge. The coalition argues 23andMe must comply with state laws requiring express informed consent for the sale or transfer of sensitive genetic data. The lawsuit seeks to prevent misuse, exposure in future breaches, and unauthorized use of customers’ private genetic information.

Remedy

The attorneys general seek an injunction to block 23andMe’s planned auction of 15 million customers’ genetic data without consent, and to require compliance with state laws mandating express informed consent for the sale or transfer of sensitive genetic and health information.

Injunction

Contract Impact

In-house legal teams should review all vendor agreements involving the collection, storage, or sale of genetic, health, or other sensitive consumer data to ensure they include requirements for express informed consent from consumers before any transfer, sale, or sharing of such data. Clauses related to asset sales, data transfer in bankruptcy, and sensitive data handling should be updated to explicitly require consumer consent and compliance with applicable state genetic privacy laws. Additionally, teams should verify that contracts with DNA testing, health, or biotech vendors mandate notice to consumers about any planned data transfers and prohibit unauthorized sale of sensitive genetic information.

Contract Search Terms

genetic datahealth dataexpress informed consentdata saledata transfersensitive genetic informationasset sale data provisionsgenetic privacy compliance

Violation Types

Entity Details

Entity

23andMe, Inc.

Also known as: 23andMe

Industry

Healthcare

Multistate Coalition

Official Sources

Source Evidence

Title
"Attorney General James Sues 23andMe to Protect New Yorkers’ Genetic Data"
Event Date
"June 10, 2025"
Jurisdiction
"New York Attorney General Letitia James"
Event Type
"filed a lawsuit against 23andMe"
Entity Name
"23andMe, a popular direct-to-consumer DNA testing company"
Violation Types
"without their consent or knowledge"

Related Enforcement Actions

FTC

23andMe, Inc.

Federal Trade Commission Chairman Andrew N. Ferguson issued a letter to the U.S. Trustee overseeing the 23andMe bankruptcy proceeding, expressing concerns about the potential sale or transfer of consumers' personal genetic data. The letter underscores the importance of companies honoring their privacy promises to consumers, particularly regarding sensitive information, during bankruptcy proceedings.

NY

No specific entity cited

New York Attorney General Letitia James issued a consumer alert on May 18, 2026, warning businesses against engaging in price gouging on transportation services during the Long Island Rail Road strike. The alert reminds businesses that New York’s price gouging laws prohibit unconscionable price increases on essential goods and services during market disruptions, with potential penalties of up to $25,000 per violation. No specific enforcement action against a particular entity was announced, only a general warning for businesses and a call for consumers to report suspected price gouging.

NY

N/A

New York Attorney General Letitia James issued a consumer alert on May 18, 2026, warning residents of potential price gouging by transportation service providers during the Long Island Rail Road strike. The alert reminds businesses that New York’s price gouging laws prohibit unconscionable price increases on essential services like transportation during market disruptions. No specific privacy violations or enforcement actions against individual entities were announced in the alert.

NY

N/A

This press release announces New York Attorney General Letitia James leading a coalition of 21 state attorneys general, the District of Columbia, and Pennsylvania’s Governor in filing an amicus brief with the U.S. Supreme Court to stay a Fifth Circuit ruling that would reinstate in-person dispensing requirements for mifepristone, a medication used for abortion. The coalition argues the ruling is scientifically unsupported, would restrict telehealth access to reproductive care, and undermines state sovereignty over abortion policy post-Dobbs. This is not a privacy-related enforcement action, as the content addresses reproductive health policy rather than data privacy violations.

NY

Uphold HQ, Inc.

$5.0M

New York Attorney General Letitia James secured a $5 million settlement from cryptocurrency platform Uphold HQ, Inc. for promoting Cred’s fraudulent CredEarn investment product as safe and reliable, when Cred was making risky loans to uncreditworthy borrowers in China. Uphold also falsely claimed Cred had comprehensive insurance and promoted the product without registering as a broker or commodity broker-dealer under New York law. As part of the settlement, Uphold will pay $5 million to harmed investors, remit $545,189 from Cred’s bankruptcy to customers, improve due diligence policies for third-party products, and register as a broker with the OAG.

NY

Miles Burton Marshall

New York Attorney General Letitia James announced the conviction of tax preparer and insurance agent Miles Burton Marshall for operating a decades-long Ponzi scheme that defrauded 988 investors out of more than $50 million. Marshall pleaded guilty to Grand Larceny in the Second Degree, Securities Fraud under the Martin Act, and Scheme to Defraud in the First Degree, and faces four to 12 years in prison plus approximately $90 million in restitution to victims.