[ad_1]
UK and Canadian data protection agencies have initiated a combined inquiry into the recent data security incident at 23andMe.
The ICO in the UK and OPC in Canada made a public announcement regarding their joint probing of the data breach that happened in October 2023.
23andMe, a company from the US which conducts genetic testing, processes its customers’ saliva at home to provide information about their health and ancestry, among other features.
The online platform reports that the company has surpassed the sale of 12 million DNA testing kits since its inception in 2006.
The UK’s ICO and Canada’s OPC have disclosed their collaboration in the investigation to utilize their combined skill sets and resources.
Their examination will focus on the extent of the breach, including the information that was compromised and the potential impact on the individuals involved.
The effectiveness of the protective measures in place at 23andMe will also be part of the investigation, along with the company’s compliance regarding communicating the breach to regulatory authorities and those affected.
An ICO representative explained: “As the caretakers of highly sensitive data, including unchangeable genetic information, 23andMe is responsible for critical details concerning a person and their close ones, such as health, ethnicity, and family ties.
“Maintaining public confidence in these services is imperative.”
Related news from Sky News:
Famed TV host and nature campaigner Simon Cowell passes away
Soccer team dismisses its entire women’s division
The UK Information Commissioner, John Edwards, remarked: “Organizations entrusted with highly sensitive personal data must have robust security and privacy protections.
“Given the international ramifications of this data breach, our collaboration with the OPC in Canada is crucial to protect UK residents’ information.”
Get the latest UK and international news when you follow Sky News on WhatsApp
Philippe Dufresne, the Privacy Commissioner of Canada, warned: “Genetic information in the wrong hands could lead to monitoring or discrimination based on that data.”
Responding to the issue, 23andMe released a statement asserting: “We plan on fully cooperating with the requests made by the regulatory authorities in regards to the credential stuffing attack identified in October 2023.”
[ad_2]
FAQs about the 23andMe Data Breach Investigation
Q: What happened with 23andMe?
A: 23andMe experienced a data breach in October 2023, which led to a collaborative international investigation by the UK’s ICO and Canada’s OPC.
Q: What is 23andMe?
A: 23andMe is a genetic testing company that analyzes DNA from saliva samples to provide users with health and ancestry information.
Q: How many people were affected by the data breach?
A: The joint investigation aims to determine the scope of the breach and the number of individuals affected.
Q: What will the investigation focus on?
A: The investigation will assess the extent of the compromised data, the potential risks to individuals, the adequacy of 23andMe’s security measures, and their compliance in notifying the affected parties and regulatory bodies.
Q: Has 23andMe cooperated with the investigation?
A: According to their statement, 23andMe intends to cooperate with the regulators’ demands regarding the data breach.
