What Regeneron’s Purchase Of 23andMe Means For Your Genetic Privacy

Regeneron Pharmaceuticals announced on Monday it will acquire bankrupt genomics firm 23andMe for $256 million through a bankruptcy auction, promising to maintain ethical standards in handling sensitive customer DNA information.

According to Reuters, the New York-based pharmaceutical giant aims to leverage 23andMe’s extensive database of over 15 million customer DNA samples to enhance its genomic-driven drug discovery processes. The acquisition comes at a crucial time as concerns about genetic data privacy have intensified following 23andMe’s data breach in 2023 that affected millions of users.

The Bankruptcy Sale And Data Privacy Promises

23andMe, once valued at $6 billion, filed for bankruptcy in March 2025 after experiencing declining consumer interest and dealing with the fallout from its significant data breach. The company’s vast genetic database, built through its popular direct-to-consumer saliva-testing kits, became its most valuable asset in the bankruptcy proceedings.

The acquisition has raised alarm bells among privacy advocates and customers concerned about what happens to their genetic information when ownership changes hands.

Regeneron has publicly committed to adhering to 23andMe’s current privacy guidelines and all relevant data protection regulations. The company has also pledged to work transparently with an independent overseer appointed by the court to evaluate the deal’s effects on consumer privacy, with a report due to the bankruptcy court in June.

“Regeneron will not utilize any personal data in a way that contradicts the intended purpose for which it was shared with 23andMe,” the company stated. “All preferences will remain intact, and personal data will not be employed for research without explicit consent.”

The New Jersey Precedent: When Genetic Data Meets Law Enforcement

The 23andMe acquisition brings to mind another recent controversy involving genetic data privacy. In New Jersey, a directive issued by Attorney General Matt Platkin in June 2024 limited law enforcement’s ability to obtain newborn blood samples for criminal investigations without proper authorization.

Before this directive, law enforcement agencies could use grand jury subpoenas to obtain blood samples from the state’s newborn screening program without the knowledge or consent of families. In one troubling case, State Police used a child’s blood sample collected nine years earlier to help connect the child’s father to a sexual assault committed nearly 25 years prior–effectively circumventing the requirement to establish probable cause before seeking a warrant.

Under New Jersey’s new policy, bloodspots linked to a child’s identifying information are retained for only two years unless a parent opts for a different retention period, and law enforcement must now obtain proper warrants or court orders to access such data.

Could History Repeat Itself With 23andMe Data?

While Regeneron has made firm commitments regarding data privacy, the New Jersey case illustrates how genetic information, once collected, can potentially be used in ways consumers never anticipated.

“This agreement helps to bring a favorable resolution to what could have been a challenging bankruptcy scenario,” noted trial lawyer Daniel Gielchinsky, adding that Regeneron’s established history makes it more likely to safeguard consumer data in compliance with privacy regulations.

However, the concern remains that future policy changes, ownership transfers, or legal precedents could potentially alter how this genetic data is accessed and used. The acquisition has already attracted the attention of U.S. lawmakers concerned that genetic information could eventually be sold to entities with different ethical standards.

How To Delete Your 23andMe Data

For consumers concerned about their genetic data following the acquisition announcement, deleting their information from 23andMe’s database is an option.

Here’s how to do it:

• Log into your 23andMe account on their website.
• Navigate to “Settings” (usually found by clicking on your username).
• Scroll to the bottom of the page to the “23andMe Data” section.
• Click “View”.
• Optional: Download your data if you want to keep a copy for personal records.
• Scroll to the “Delete Data” section.
• Click “Permanently Delete Data”.
• Confirm your request by clicking the link in the confirmation email sent by 23andMe.

To Destroy Your Genetic Sample

• If you previously opted to store your sample, go to “Preferences” in your account settings and request to have your saliva sample discarded.

To Withdraw Research Consent

• In your account settings, go to “Research and Product Consents” and withdraw your consent for research purposes.

The Future Of Genetic Data Privacy

The Regeneron acquisition of 23andMe represents more than just a business transaction. It’s emblematic of broader questions about who owns our most personal data and how it can be used.

For consumers, the fundamental question remains: Is the potential benefit of contributing to medical research worth the privacy risks associated with sharing your genetic information? As the Regeneron and 23andMe deal moves toward finalization in the third quarter of 2025, this question becomes increasingly relevant.

In an era where data is the new currency, genetic information represents the ultimate personal asset. One that, once shared, may be difficult to truly reclaim, regardless of delete buttons and privacy policies.