4 ms·

their own privacy team told me they are bound by regulatory obligations to retain data even after you request deletion. I've notified our attorney general's off

their own privacy team told me they are bound by regulatory obligations to retain data even after you request deletion. I've notified our attorney general's office to see if anything can be done but it might be too late. I'd love for someone who knows these "regulatory obligations" to chime in.....

kelnos 2y ago
Interesting, as that would be a violation of the CCPA/CPRA for customers who are California residents, at least. The "regulatory obligations" sounds like a fake excuse. Is 23andme even regulated beyond how your regular average business might be?
- nostromo 2y ago
  Yes, they have been regulated by the FDA for a decade now.
- adastra22 2y ago
  Federal regulations trump state codes.
llm_nerd 2y ago
>their own privacy team told me they are bound by regulatory obligations to retain data even after you request deletion They have to retain data about the person who requested the deletion which seems eminently reasonable. In the future if you sue them because you can't access your account that you paid for, they have a record that you requested said account's deletion. Similarly they obviously can't withdraw your data from the anonymized research projects they pursued.