A group of 27 states and the District of Columbia have sued 23andMe, a company that tests genes, to stop them from selling personal genetic data without people's permission. This lawsuit started because a biotech company wants to buy the company, which is having financial problems. Oregon Attorney General Dan Rayfield said in a press release that this data, which includes biological samples, DNA information, health details, and medical records, should not be sold unless each person gives clear and informed permission. 23andMe, which started in 2006, provides DNA testing kits using saliva so customers can find out about their family history and distant relatives. However, the company has struggled to make enough money since it first offered shares to the public in 2021. In March, it laid off 40% of its employees and filed for bankruptcy. Regeneron Pharmaceuticals, which plans to buy the company for $256 million, has promised to follow 23andMe's privacy rules and the law. An independent person who protects consumer privacy has been asked to look closely at the planned sale and how it might affect people's privacy.