A group of 27 states and Washington D.C. have sued 23andMe, a DNA testing company, to stop them from selling people's genetic information without their permission. This lawsuit began because another biotech company wants to buy 23andMe, which is facing financial difficulties. Oregon's Attorney General, Dan Rayfield, stated that personal data, such as biological samples, DNA information, and medical records, should not be sold unless each person gives clear consent. 23andMe, founded in 2006, provides customers with saliva-based DNA testing kits to discover their ancestry and find distant relatives. However, the company has struggled to find a profitable business model since its initial public offering in 2021. In March, it laid off 40% of its employees and filed for bankruptcy. Regeneron Pharmaceuticals, which plans to buy the company for $256 million, has promised to follow 23andMe's privacy policies and all applicable laws. An independent consumer privacy expert has been asked to examine the proposed sale and its possible impact on customer privacy.