A group of 27 states and the District of Columbia have started a lawsuit against 23andMe, a genetic testing company, to stop them from selling personal genetic data without customer permission. This legal action comes because a biotech company wants to buy the company, which is having financial problems. Oregon Attorney General Dan Rayfield said in a press release that this sensitive information, including biological samples, DNA data, health details, and medical records, should not be sold without clear and informed consent from each person. 23andMe, founded in 2006, offers customers DNA testing kits using saliva to find out about their family history and distant relatives. However, the company has struggled to make a profit since it first offered shares to the public in 2021, and as a result, it laid off many staff and filed for bankruptcy. Regeneron Pharmaceuticals, which plans to buy the company for $256 million, has promised to follow 23andMe's privacy rules and the law. An independent consumer privacy expert has been given the job of looking closely at the proposed sale and how it might affect customer privacy.