Twenty-seven states and the District of Columbia have sued 23andMe, a genetic testing company. They want to stop the company from selling personal genetic data without customers' permission. This lawsuit started because another biotech company wants to buy 23andMe, which is having financial problems. Oregon Attorney General Dan Rayfield stated in a press release that sensitive data, including biological samples, DNA information, health traits, and medical records, should not be sold without each person's clear and informed consent. 23andMe, founded in 2006, provides customers with saliva-based DNA kits to learn about their family history and find relatives. However, the company has struggled to make a profit since it went public in 2021. In March, it laid off 40% of its employees and filed for bankruptcy. Regeneron Pharmaceuticals plans to buy 23andMe for $256 million and has promised to follow 23andMe's privacy rules and the law. An independent consumer privacy expert has been assigned to review the proposed sale and how it might affect customer privacy.