From the same article, 23&me is lucky they are not covered under HIPPA... >The federal Health Insurance Portability and Accountability Act, a.k.a. HIPAA, inclu

From the same article, 23&me is lucky they are not covered under HIPPA... >The federal Health Insurance Portability and Accountability Act, a.k.a. HIPAA, includes penalties ranging from $100 to $50,000 per violation — that is, per hacked record. Violations also can carry criminal charges resulting in jail time.