Twenty-seven states and the District of Columbia have sued 23andMe, a genetic testing company. They want to stop the company from selling personal genetic data without customers' clear permission. This lawsuit comes after another biotech company offered to buy 23andMe, which is facing financial problems. Oregon's Attorney General, Dan Rayfield, stated in a press release that this data, which includes biological samples, DNA information, health traits, and medical records, should only be sold if each person gives their direct and informed consent. 23andMe, founded in 2006, provides DNA testing kits using saliva for customers to learn about their family history and find relatives. However, since going public in 2021, the company has struggled to make a profit. In March, it cut 40% of its staff and filed for bankruptcy. Regeneron Pharmaceuticals plans to buy 23andMe for $256 million and has promised to follow 23andMe's privacy rules and the law. An independent consumer privacy expert has been appointed to review the proposed sale and how it might affect customer privacy.