Twenty-seven states and the District of Columbia have started a lawsuit against 23andMe, a genetic testing company. They want to stop the company from selling personal genetic data without customers' clear permission. This legal action comes after a biotech company proposed buying the company, which is having financial problems. Oregon Attorney General Dan Rayfield stated that sensitive information, such as biological samples, DNA data, health details, and medical records, should not be sold without each person's direct and informed agreement. 23andMe, founded in 2006, provides customers with saliva-based DNA testing kits to learn about their family history and find distant relatives. However, the company has found it hard to create a profitable business since it first offered shares to the public in 2021. In March, it laid off 40% of its employees and filed for bankruptcy. Regeneron Pharmaceuticals, which plans to buy the company for $256 million, has promised to follow 23andMe's privacy rules and relevant laws. An independent consumer privacy expert has been asked to examine the planned sale and how it might affect consumer privacy.