Considering the long list of awful pharma, insurance, and marketing firms in the world out there, Regeneron is probably one of the better outcomes
slg · 2h ago
Which somewhat undermines all the doomsday scenarios that people have been talking about. Going back to 23andMe going bankrupt in the first place, this data is clearly not worth nearly as much as it would be if any potential buyers thought there was an actual legal path to abusing this data in the way many are predicting. That doesn't mean that won't change in the future and part of the problem here is that there is no putting the toothpaste back in the tube, but buyers don't think this will change anytime soon, which should be an indication that it probably won't.
nextos · 1h ago
DeCODE, which was a very fancy Icelandic company roughly in the same niche as 23andme (founded in the 1990s!), also got bought by a pharma. Amgen in their case. For more background, see: https://en.wikipedia.org/wiki/DeCODE_genetics.
Genetic information is valuable for finding drug targets, but it's generally a poor predictor of disease, except in case of rare monogenic disorders. With the advent of large population studies such as UK Biobank, which include lots of epigenetic information as well, I am not sure if one can get much extra value from 23andme's dataset in a pharmaceutical context.
lesuorac · 2h ago
Idk.
Everybody made fun of Elon buying twitter but the spin-off from it (X.ai) was valued enough to buy the original company.
We'll need to wait a bunch of more years to see if the 23andme concerns were unfounded.
mgiampapa · 1h ago
Those are all paper transactions with made up numbers. You need outside money coming in from sane investors for the numbers to mean things.
bflesch · 4h ago
They will keep selling and re-selling copies of this dataset as long as there are interested buyers.
pavel_lishin · 4h ago
There may be some sort of exclusivity clause that comes with the sale - though, of course, that's no guarantee of anything.
xxpor · 4h ago
Does the first sale doctrine apply to B2B?
hiatus · 4h ago
First sale doctrine only applies to physical copies.
pavel_lishin · 4h ago
I'm not sure if buying a CD from Walmart is comparable to buying a large business full of people's personal data.
benrapscallion · 3h ago
That’s not what has been happening with DiscovEHR and Regeneron Genetics Center data.
davidcbc · 3h ago
So far
1vuio0pswjnm7 · 2h ago
Licensing, not selling.
shadowgovt · 2h ago
So the database of DNA will continue to be copied, and copied, and copied...
Life, uh, really does find a way!
xyst · 4h ago
There is no "better outcome".
People who got bamboozled into paying for this junk service shouldn’t have their DNA data treated as some commodity that can be traded like a stock.
The sale of this data should be treated as PII and "transfers of ownership" should not be implied. The default for every user should be to delete the data upon sale of company and provide a way for users to opt in to the transfer.
Users should be incentivized and trust (if any at this point) needs to be rebuilt with this new company, not implied.
DebtDeflation · 1m ago
>The sale of this data should be treated as PII and "transfers of ownership" should not be implied.
Completely agree. The usual social media esque "it's a free service so you are the product" arguments don't apply here, people paid 23andme for genetic testing.
The good news is:
>"Regeneron pledged to comply with 23andMe’s privacy policy, which allows customers to have their personal information deleted upon request."
There needs to me a massive campaign to convince every single customer to file a data deletion request.
bananalychee · 3h ago
I paid for a service that gave me useful insights into my ancestry and health profile, and it cost me less than 30 minutes with a teledoc and a basic blood test. I opted out of keeping my sample in storage and using the data for research at the time, and deleted my account and data a few months ago as a matter of general digital hygiene, but even if they didn't honor any of that, I don't see why I should be concerned about it being out there. The privacy concerns were quite obvious and oft-discussed several years ago when I sent my sample in, so I certainly didn't get "bamboozled". I'm sure there are many people who didn't consider that their data may not be private, but how many actually care about that?
JonChesterfield · 2h ago
The ones that are reliant on health insurance to not die and now can't have any because their genotype suggests they might be expensive?
shadowgovt · 2h ago
The right solution to that continues to be outlawing genetic risk-based cost scaling. Doing anything else means that we're just deciding people get to live and die due to their genetics and we will systematically encourage that; it's eugenics with extra steps.
That means the only insurer who could afford the risk is the US government.
This is a feature not a bug.
yawnxyz · 4h ago
It's pretty wild we don't have laws that cover this
specto · 3h ago
That's exactly why I never used it. Unfortunately I have family members who did so it doesn't matter that I avoided it.
bsimpson · 2h ago
That part has never sat right with me.
Grandpa sewed some oats before he got with your grandma? That's his business, not his relatives'.
It's hard to argue that a criminal's rights are being violated if he's found out through a DNA database, but the privacy ramifications overall of them are really unfortunate. The world is moving to a place where your biometrics are on the record, and the government can use them to hunt you down (see also, Global Entry, fingerprinting people who work with kids, Real ID, speed cameras, etc.).
I really don't like that we're being surveilled by default now. It's even creepier when there's now an administration in power that has no respect for prior norms and a long list of perceived enemies.
burningChrome · 43m ago
>> The world is moving to a place where your biometrics are on the record
I remember watching GATTACA and thinking how depressing it was in 1997. Its been less than 30 years and we're already here.
yawnxyz · 2h ago
yeah I did bioinformatics for a living and I warned anyone I knew to not get this (or ancestry, etc.)
SlightlyLeftPad · 2h ago
I sense a lawsuit incoming that could lead to a supreme court decision on the basis of this being medical data, who actually owns that data? It really isn’t 23andme’s dna to sell to the highest bidder, it’s the customer’s protected health data, and would fall under HIPAA.
malfist · 1h ago
With this corporatist court? You'd be lucky if they don't reverse the ban on using the data for health insurance and all privacy laws at the same time
wyager · 28m ago
> reverse the ban on using the data for health insurance
Right now, health "insurance" is transparently a subsidy scheme where the healthy subsidize the unhealthy. I wonder, if "insurance" companies were allowed to operate as actual actuarial net-neutral-EV honest-to-god insurance companies again, which political coalition would get net savings? I could see it going either way. Conceivably, the efficiency gains from having actual insurance again would result in net-positive EV for both sides.
criddell · 1h ago
Be careful what you wish for. If this goes to the current court, having HIPAA struck down wouldn't be all that shocking.
As noted therein, you need to request a download well before you actually delete your account, since the former requires to batch work to complete and the latter will cancel any in-progress requests.
blitzar · 5h ago
> Bankrupt genetic-testing firm 23andMe agreed to sell its data bank, which once contained DNA samples from about 15 million people, to the drug developer Regeneron Pharmaceuticals for $256 million.
Some juicy data they sold there.
solarkraft · 5h ago
$17 per person. quite a number.
wiether · 5h ago
And to think that most of those 15 million people even gave their own money so that 23&Me could sold them for that price later on!
micromacrofoot · 5h ago
They weren't donations, 23andMe provided a service people thought was worth it at the time of purchase
davidcbc · 5h ago
Had they known all their data was going to be sold later they may have reconsidered whether that service was worth it.
cheeseomlit · 4h ago
Based on my conversations with friends who paid for 23andMe they probably wouldn't have cared, and likely still don't. 23andMe customers are the kind of people who put Alexas in their bedroom
rvnx · 4h ago
From Day 1, it was Google in the shadows of the company (due to the connection with Wojcicki), so it's obvious that a Google-connected company would try to monetize the data.
Now that being said, when it was launched, 23andme was the only way to have very affordable and high-quality and reliable DNA scans.
This data is very useful to improve your quality of life today using tools like Promethease. This to be weighted, against a risk that "potentially" someone may use maliciously in X or XX years.
There is also the "risk" that they use this data to develop popular medicines that will actually help your long-term quality of life (if you can afford it).
benced · 3h ago
Privacy advocates, by-and-large, don't engage with the fact that people are often willing to trade their data for value. Surely some people are under-informed and wouldn't if they fully understood the tradeoffs but there are some people who are fully informed and willing to make that tradeoff. The informed-tradeoff-makers opinions' matter exactly as much as the under-informed group's does.
falcor84 · 4h ago
The big "risk" that I see is that this would bring into existence the world of GATTACA, where everyone's genetic information is open, and you might be, e.g. denied a job because they assessed that people with genes similar to yours are likely to do bad in such a role.
moneywoes · 3h ago
any examples of quality of life improvements?
Symmetry · 2h ago
Or even worse than putting a potentially compromised microphone in their bedroom, carry around a microphone in their pocket all day which is also definitely reporting its location to call companies.
EGreg · 2h ago
Is 23andMe no longer going to provide matrilineal mitochondrial DNA analysis and haplogroups?
It is a very valuable service if you’re Jewish, that others like Heritage.com don’t. Where can you get it otherwise?
gchamonlive · 4h ago
I think this isn't the fundamental problem there, that it wasn't clear that your data would be up for sale, but the fact that this is even legal. I think the law should always protect the weaker party in any transaction from misuse of byproducts from that transaction.
Symmetry · 3h ago
"We're going to take your genetic information and use it to develop new drugs" was certainly part of the pitch I was given to get me to join 23andme.
micromacrofoot · 3h ago
Have you been on the internet lately? almost no one cares about their data, most people share their behavior constantly every day to watch 30 second videos.
Why would someone care whether or not it would be sold if they didn't care enough to provide their DNA to an unknown company to begin with?
You're making an argument about a concern that doesn't even exist in the average person's head.
squigz · 4h ago
How could they not? It was inevitable without data protection laws. Even if 23andme didn't go bankrupt, this would have happened as they chased more money - either directly selling the dataset, or "licensing" it
I think people knew this would happen, eventually. The real question is whether they cared. To most people, protection and privacy of data like this is still an abstract concern. I suspect that won't change until a serious data leak happens or something along those lines - although I hope I'm wrong.
micromacrofoot · 3h ago
People don't care so deeply that if you tried to explain it to the average person they'd be bored by the conversation. I one time tried to explain why someone should be concerned about their social security number being leaked in an exploit... and the reaction was "maybe they'll steal the student loans I'll never be able to pay"
squigz · 3h ago
One reason such issues are so abstract to so many people is because they have bigger things to worry about - like paying off debts. Worrying about things that, from their perspective, they can't change and doesn't directly affect them, isn't high on their list of things to do. Casually dismissing it is a way of coping.
davidcbc · 3h ago
In the same way that people have "known" for decades that smoking causes cancer and smoked anyway, however efforts to keep that knowledge at the forefront of people's minds at the point of consumption by requiring extremely clear messaging on cigarette packaging (in countries other than the US) have been shown to decrease smoking rates.
If these companies were required to put up a big banner before you check out saying "By purchasing this and giving us your data we have the right to sell it to whoever we want" with examples of how the data may be misused by bad actors people may think twice. Not everyone will, but I suspect it would be more effective than you think
SSJPython · 4h ago
No offense, but you have to be an idiot to not even consider the possibility that your data was going to be sold. What do they think they were going to do with the data? Just keep it safe in storage?
davidcbc · 4h ago
Your average person definitely thought that
kjkjadksj · 3h ago
Don’t you specifically consent to use your data for research? That is what another commenter said who used this service.
davidcbc · 2h ago
Does the average user read a consent for research and think it means "we'll sell your data to whomever we choose"?
florbnit · 5h ago
To be fair most people got their results 17$ cheaper than it would have cost them if the data hadn’t been stored to later be sold /s
azan_ · 5h ago
$256 is steal for what they are getting.
usaphp · 4h ago
There was a checkbox about letting 23andme use your dna in research, I wonder if that will be forced to be respected by regeneron after a sale?
hiatus · 4h ago
It's crazy that your own genome is not protected health information. Your doctor can't just sell your info to another doctor when they close their practice.
epistasis · 1h ago
Your doctor can sell your data at any time into health data markets as long as their privacy policy allows it, and many do. See this article from 2016, for example:
Additionally, 23andMe sold data in the past, quite publicly, to pharma companies to help identify drug targets.
My biggest concern, more than the trading of health data and genomes, is that people are not away its happening. That builds distrust. The actual practice of sharing deidentified health data helps improve outcomes and lower costs, aid discovery, etc. etc. But if people don't know it's happening they may get scared and try to stop it, without fully understanding the risks and benefits and how the risks have been mitigated by current law.
I 23andMe delete my data a while back. I argued with people on online forums about it in two different directions: 1) that 23andMe actually would delete your data so go ahead and request it to be deleted, it's not a futile effort, and 2) it's not super important. I did it mostly because I intensely dislike the behavior of 23andMe leadership, and secondarily because it may have ended up in more nefarious hands. Which leads to 3) the most dangerous use of this data is in bad science from bad polygenic risk scores, which have been a big fad for the past few years, but which are also extremely easy to mess up. Discrimination based on bad models with poor results is just as harmful as discrimination based on good models with adequate results, and some might even say worse.
RandallBrown · 3h ago
They can't sell the info, but they can sell the practice, which is very similar.
Loughla · 2h ago
But I'm getting a doctor in that situation. My doctor is leaving, and it's saving me steps, really, in finding a new doctor.
What do I get when another company buys my genetic information?
OJFord · 2h ago
What were you going to get if they continued operating (practicing) instead of selling?
Loughla · 19m ago
My original doctor? I don't understand the question you asked.
throwaway173738 · 2h ago
They do put the records in the care of another practice at times. My dentist did that when he retired.
kjkjadksj · 3h ago
It isn’t your genome in question and also people consented towards this.
butlike · 2h ago
Consented to a relationship between 23andMe and the person, not 23andMe and another arbitrary business
dannykwells · 5h ago
This is honestly a fantastic outcome.
Regeneron is among the most science and data focused biopharma and has a long, long history in genetics. They know how critical privacy is and will ensure the data are used to advance human health.
Potentially an even better home for the data than in the company, since now will not have pressure of quarterly reports.
jadbox · 3h ago
On the face of it, this seems like a win-win when you think about Regeneron using this data to make better medicines based on the data.
Ylpertnodi · 2h ago
Oh, now i feel better. They're trustworthy. Got it.
tgv · 4h ago
And it's now worth more to aggressive buyers.
xyst · 4h ago
This was the same sentiment about 23andme many years ago.
If regeneron cared about user privacy, then they would work to make sure consent to use of every piece of data is obtained.
It should be the default to delete any data that has not received a consent upon transfer and users must opt in for regeneron to use it for research or otherwise.
cess11 · 2h ago
If they cared about "privacy" in the sense of data protection rights they wouldn't be based in the US.
hermannj314 · 4h ago
Telling the slave how lucky he is to have been bought by a good slave owner.
Buying and selling humans has never been a good thing. Trading their DNA in the marketplace without consent is just the new evil our generation is too blind to see.
rolisz · 2h ago
Are there any "safer" options for doing genetic testing? From a privacy perspective mostly.
mylons · 2h ago
not really. i work in the field. any commercial offering is likely subject to this. every company i've worked for that does personal testing eventually gives their data to someone: other companies, or law enforcement.
it's even worse if one of your siblings or close relatives does this. people have been implicated in crimes due to relatives getting tested. on the one hand that's great they're closing cold cases, but the disaster where this is used incorrectly against you is horrifying.
tantalor · 2h ago
I'd argue that even using the gene database to correctly nab wrongdoers is horrifying.
The ends do not justify the means. The police should not have an easily searchable database of everyone's genetic profile, no matter how they gathered it.
mylons · 2h ago
i agree with you
drdaeman · 2h ago
Does it mean that no company honestly offers a "we sequence your generic material, send you data back, and completely forget the whole affair afterwards, all genetic data wiped on our side with the only copy left being yours - no strings attached" type of service? In a jurisdiction that doesn't require labs to retain anything (so non-US, as US has CLIA). I assume it would cost significantly more than usual subscription/research-subsidized services, of course.
I'm not interested in services of finding relatives or health coach gimmicks, I just want an one-time purchase of a raw data blob with solid personal privacy guarantees. Am I asking for too much?
mylons · 2h ago
as far as i know this is not offered. my assumption is there's little to no demand. if there is a ton of demand, i'd be happy to start this company :)
FL33TW00D · 2h ago
Why isn't there a company that just "wraps" Illumina. Zero partners minus the Illumina machine. Seems obvious.
mylons · 2h ago
what do you mean? i think you more or less described every personal genetics testing company as they start out. they use the illumina machine to do the testing and develop custom assays with said machine
FL33TW00D · 1h ago
"every company i've worked for that does personal testing eventually gives their data to someone: other companies, or law enforcement."
Why isn't there a privacy focused company that just doesn't do this.
mylons · 1h ago
as far as i know there just isn't demand for one's own data like this. people have kinda tried, there's some weird web3 offerings that allegedly do this so you can monetize your data but afaik nobody uses that.
i mentioned in an earlier comment i'd be happy to start this company if there were that kinda demand. it'd cost you around $1000 USD to get this done and get a hard drive mailed to you with raw data (fastq files).
EDIT: it probably would be cool if this kind of thing existed so consumers could shop their analysis around. it might actually open up some consumer bioinformatics startups
So I have to assume my DNA data was illegally sold by 23andme to Regeneron.
In return, I just asked Regeneron to provide me a copy of sequenced DNA data from their CEO and founder. As Regeneron seems to be cool with buying and selling of DNA data they should not have a problem to share their leadership's DNA.
epistasis · 4h ago
What do you mean by "illegal"?
JonChesterfield · 1h ago
Need to offer $17 for it
psunavy03 · 4h ago
So I have to assume you didn't read the fine print when you clicked "Accept" or whatever . . .
Genetic information is valuable for finding drug targets, but it's generally a poor predictor of disease, except in case of rare monogenic disorders. With the advent of large population studies such as UK Biobank, which include lots of epigenetic information as well, I am not sure if one can get much extra value from 23andme's dataset in a pharmaceutical context.
Everybody made fun of Elon buying twitter but the spin-off from it (X.ai) was valued enough to buy the original company.
We'll need to wait a bunch of more years to see if the 23andme concerns were unfounded.
Life, uh, really does find a way!
People who got bamboozled into paying for this junk service shouldn’t have their DNA data treated as some commodity that can be traded like a stock.
The sale of this data should be treated as PII and "transfers of ownership" should not be implied. The default for every user should be to delete the data upon sale of company and provide a way for users to opt in to the transfer.
Users should be incentivized and trust (if any at this point) needs to be rebuilt with this new company, not implied.
Completely agree. The usual social media esque "it's a free service so you are the product" arguments don't apply here, people paid 23andme for genetic testing.
The good news is:
>"Regeneron pledged to comply with 23andMe’s privacy policy, which allows customers to have their personal information deleted upon request."
There needs to me a massive campaign to convince every single customer to file a data deletion request.
That means the only insurer who could afford the risk is the US government.
This is a feature not a bug.
Grandpa sewed some oats before he got with your grandma? That's his business, not his relatives'.
It's hard to argue that a criminal's rights are being violated if he's found out through a DNA database, but the privacy ramifications overall of them are really unfortunate. The world is moving to a place where your biometrics are on the record, and the government can use them to hunt you down (see also, Global Entry, fingerprinting people who work with kids, Real ID, speed cameras, etc.).
I really don't like that we're being surveilled by default now. It's even creepier when there's now an administration in power that has no respect for prior norms and a long list of perceived enemies.
I remember watching GATTACA and thinking how depressing it was in 1997. Its been less than 30 years and we're already here.
Right now, health "insurance" is transparently a subsidy scheme where the healthy subsidize the unhealthy. I wonder, if "insurance" companies were allowed to operate as actual actuarial net-neutral-EV honest-to-god insurance companies again, which political coalition would get net savings? I could see it going either way. Conceivably, the efficiency gains from having actual insurance again would result in net-positive EV for both sides.
As noted therein, you need to request a download well before you actually delete your account, since the former requires to batch work to complete and the latter will cancel any in-progress requests.
Some juicy data they sold there.
Now that being said, when it was launched, 23andme was the only way to have very affordable and high-quality and reliable DNA scans.
This data is very useful to improve your quality of life today using tools like Promethease. This to be weighted, against a risk that "potentially" someone may use maliciously in X or XX years.
There is also the "risk" that they use this data to develop popular medicines that will actually help your long-term quality of life (if you can afford it).
It is a very valuable service if you’re Jewish, that others like Heritage.com don’t. Where can you get it otherwise?
Why would someone care whether or not it would be sold if they didn't care enough to provide their DNA to an unknown company to begin with?
You're making an argument about a concern that doesn't even exist in the average person's head.
I think people knew this would happen, eventually. The real question is whether they cared. To most people, protection and privacy of data like this is still an abstract concern. I suspect that won't change until a serious data leak happens or something along those lines - although I hope I'm wrong.
If these companies were required to put up a big banner before you check out saying "By purchasing this and giving us your data we have the right to sell it to whoever we want" with examples of how the data may be misused by bad actors people may think twice. Not everyone will, but I suspect it would be more effective than you think
https://www.scientificamerican.com/article/how-data-brokers-...
Optum Health and IQVIA facilitate this.
Additionally, 23andMe sold data in the past, quite publicly, to pharma companies to help identify drug targets.
My biggest concern, more than the trading of health data and genomes, is that people are not away its happening. That builds distrust. The actual practice of sharing deidentified health data helps improve outcomes and lower costs, aid discovery, etc. etc. But if people don't know it's happening they may get scared and try to stop it, without fully understanding the risks and benefits and how the risks have been mitigated by current law.
I 23andMe delete my data a while back. I argued with people on online forums about it in two different directions: 1) that 23andMe actually would delete your data so go ahead and request it to be deleted, it's not a futile effort, and 2) it's not super important. I did it mostly because I intensely dislike the behavior of 23andMe leadership, and secondarily because it may have ended up in more nefarious hands. Which leads to 3) the most dangerous use of this data is in bad science from bad polygenic risk scores, which have been a big fad for the past few years, but which are also extremely easy to mess up. Discrimination based on bad models with poor results is just as harmful as discrimination based on good models with adequate results, and some might even say worse.
What do I get when another company buys my genetic information?
Regeneron is among the most science and data focused biopharma and has a long, long history in genetics. They know how critical privacy is and will ensure the data are used to advance human health.
Potentially an even better home for the data than in the company, since now will not have pressure of quarterly reports.
If regeneron cared about user privacy, then they would work to make sure consent to use of every piece of data is obtained.
It should be the default to delete any data that has not received a consent upon transfer and users must opt in for regeneron to use it for research or otherwise.
Buying and selling humans has never been a good thing. Trading their DNA in the marketplace without consent is just the new evil our generation is too blind to see.
it's even worse if one of your siblings or close relatives does this. people have been implicated in crimes due to relatives getting tested. on the one hand that's great they're closing cold cases, but the disaster where this is used incorrectly against you is horrifying.
The ends do not justify the means. The police should not have an easily searchable database of everyone's genetic profile, no matter how they gathered it.
I'm not interested in services of finding relatives or health coach gimmicks, I just want an one-time purchase of a raw data blob with solid personal privacy guarantees. Am I asking for too much?
Why isn't there a privacy focused company that just doesn't do this.
i mentioned in an earlier comment i'd be happy to start this company if there were that kinda demand. it'd cost you around $1000 USD to get this done and get a hard drive mailed to you with raw data (fastq files).
EDIT: it probably would be cool if this kind of thing existed so consumers could shop their analysis around. it might actually open up some consumer bioinformatics startups
In return, I just asked Regeneron to provide me a copy of sequenced DNA data from their CEO and founder. As Regeneron seems to be cool with buying and selling of DNA data they should not have a problem to share their leadership's DNA.