Twenty-seven states and Washington D.C. have sued the DNA testing company 23andMe. They want to prevent the company from selling people's genetic information without their permission. This lawsuit began after another company, Regeneron Pharmaceuticals, announced its plan to buy 23andMe, which is currently facing financial difficulties. Oregon's Attorney General, Dan Rayfield, stated that personal data, such as DNA and health records, should not be sold unless each individual clearly agrees to it. 23andMe, founded in 2006, provides customers with saliva-based DNA testing kits to help them discover their ancestry and find distant relatives. However, the company has struggled to make a profit since its initial public offering in 2021. In March, it laid off 40% of its staff and filed for bankruptcy. Regeneron Pharmaceuticals plans to buy the company for $256 million and has promised to follow 23andMe's privacy policies and all applicable laws. An independent privacy expert will also examine the proposed sale to see its possible impact on customer privacy.