Twenty-seven states and Washington D.C. have sued 23andMe, a DNA testing company, to stop it from selling personal genetic information without customer permission. This legal action began because another company wants to buy 23andMe, which is facing financial problems. Oregon's Attorney General, Dan Rayfield, stated that sensitive information, such as biological samples, DNA data, and medical records, should not be sold unless each person gives clear consent. 23andMe, founded in 2006, offers customers DNA testing kits that use saliva to help them discover their ancestry and find distant relatives. However, the company has found it difficult to make a profit since its initial public offering in 2021. In March, it laid off 40% of its staff and filed for bankruptcy. Regeneron Pharmaceuticals plans to buy the company for $256 million and has promised to follow 23andMe's privacy policies and all applicable laws. An independent consumer privacy expert has been asked to examine the proposed sale and how it might affect consumer privacy.