Twenty-seven states and Washington D.C. have sued 23andMe, a DNA testing company, to stop them from selling customers' genetic information without their permission. This lawsuit started because another company wants to buy 23andMe, which is having financial problems. Oregon's Attorney General, Dan Rayfield, said that personal data, like DNA and health records, should not be sold unless each person clearly agrees. 23andMe, which began in 2006, gives customers DNA testing kits to learn about their family history and find relatives. However, the company has found it hard to make enough money since it first offered shares to the public in 2021. So, in March, it fired 40% of its employees and declared bankruptcy. Regeneron Pharmaceuticals plans to buy the company for $256 million and has promised to follow 23andMe's privacy rules and all relevant laws. An independent person, called a consumer privacy ombudsman, has been asked to look into the sale and how it might affect customer privacy.