Our Work · APERTURE
23andMe: What Did the Privacy Promise Actually Support?
What did the privacy promise actually support when 23andMe entered bankruptcy?
Decision question
What did the privacy promise actually support when 23andMe entered bankruptcy?
What the public record supported
The public record supports a narrower conclusion than either “the data was unprotected” or “the privacy policy guaranteed nothing would change.” The FTC highlighted the continuing force of privacy promises in a bankruptcy transfer context; state regulators reminded consumers of deletion rights; the eventual sale process included privacy conditions. The reliance boundary sits between enforceable promises and the practical reality that sensitive data could be transferred under a court-supervised transaction.
Material findings
- The FTC publicly warned that consumer privacy promises remain relevant in bankruptcy and quoted 23andMe's own statement that its privacy policy would continue to apply after a sale or transfer.
- California reminded consumers that state law gave them rights to request deletion of genetic data.
- 23andMe entered Chapter 11 and pursued a court-supervised sale of substantially all assets while stating that buyers would have to comply with applicable law.
- The eventual TTAM transaction included commitments to comply with the privacy policy and additional safeguards, but those commitments do not erase the distinction between data remaining with the same company and data moving to a successor entity.
What Aperture examined
- 23andMe bankruptcy and privacy promises as public evidence.
- FTC and state-regulator positions on transfer and consumer rights.
- Difference between a privacy commitment and practical transfer risk in bankruptcy.
- Reliance classification for sensitive-data promises.
Boundaries
- Individual privacy/legal advice.
- Bankruptcy-court legal opinion.
- Cybersecurity audit of 23andMe systems.
- Prediction of future data use.
How this demonstrates Aperture capability
This demonstration shows how Aperture frames a decision question, traces material claims to external evidence, separates what is established from what remains uncertain, and keeps the reliance boundary visible. It is designed to demonstrate the research and evidence method rather than imply a client engagement.
Relevant buyer context: Healthcare, privacy, transaction and distressed-matter teams.
Scenario: Privacy promise and successor-risk verification.
Evidence snapshot
12 cited sources · 18 controlled propositions · 54-page PDF snapshot
The PDF is retained as an optional dated snapshot. For current public presentation, use this web page.