What 23andMe business troubles could mean for millions of users' genetic data
No. 23andMe is considered a direct-to-consumer genetic testing company, and transactions with the company are considered commercial, not medical. Because 23andMe is not a medical company, customers' personal information is not protected under the HIPAA Privacy Rule, which affords privacy protections to health records.