Twenty-seven states and Washington D.C. have sued 23andMe, a DNA testing company. They want to stop the company from selling personal genetic information without people's permission. This lawsuit started because another company wants to buy 23andMe, which is having money problems. Oregon's Attorney General, Dan Rayfield, stated that sensitive data, such as biological samples, DNA information, health details, and medical records, should only be sold if each person clearly agrees. 23andMe, founded in 2006, provides DNA testing kits that use saliva. These kits help customers discover their family history and find relatives. However, the company has struggled to make a profit since it first offered shares to the public in 2021. In March, it laid off 40% of its employees and declared bankruptcy. Regeneron Pharmaceuticals plans to buy the company for $256 million and has promised to follow 23andMe's privacy rules and all relevant laws. An independent expert on consumer privacy has been asked to review the proposed sale and its possible impact on customer privacy.