PrivacySignal
Enforcement

NY Attorney General James Secures $18 Million From 23andMe for Failing to Protect Customers’ Genetic Data

DataBreaches.net · · International · Enforcement

New York Attorney General Letitia James, joined by a bipartisan coalition of 42 other state attorneys general, reached an $18 million settlement with genetic testing company 23andMe over its failure to adequately protect customers' genetic data. California's attorney general has filed a separate lawsuit against the company under state privacy law.

Why this matters: Genetic data is not like a leaked password you can reset. It is permanent, it identifies your relatives, and it can reveal things about your health that even you do not know yet. 23andMe collected that data from millions of people who trusted them with it. The $18 million settlement spread across 43 states is a signal that regulators are paying attention, but it does not undo what happened. The California lawsuit still ahead means this company is not done answering for how it handled some of the most sensitive personal information that exists.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

Enforcement
Ars Technica — Policy · · International

“Zlibrary my beloved”: Anthropic staff chats extolling piracy cited in Sony suit

Sony has filed a lawsuit against Anthropic that includes internal staff communications in which employees apparently praised using piracy tools like Z-Library. The suit argues that Anthropic's use of copyrighted material to train its AI has directly harmed songwriters at a moment when AI-generated music is gaining commercial ground.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

#enforcement#ai Read original →
Enforcement
The Guardian — Tech · · International

Anthropic sued over alleged theft of ‘tens of thousands’ of songs

Sony Music Publishing and Warner Chappell have filed a multibillion-dollar lawsuit against Anthropic, alleging the AI company used tens of thousands of copyrighted songs without permission to train its Claude models. The music publishers represent songwriters and composers whose works were allegedly misused.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

#enforcement#ai Read original →
Enforcement
NPR — Tech · · International

Meta settlement could reshape how social media companies treat young users

Meta has reached a settlement involving billions of dollars in payments and new protective measures for minors. The agreement is drawing attention for what it might signal to other social media platforms and AI companies facing similar scrutiny over how they handle young users.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

#enforcement#ai Read original →
Enforcement
Lawfare · · US Federal

U.K. Supreme Court Opens Door for Spyware Victims to Sue Foreign States

The U.K. Supreme Court has issued a ruling that allows victims of state-deployed spyware to bring civil claims against foreign governments in British courts. The decision marks a significant shift in how sovereign immunity protections apply when states are accused of covert digital surveillance against individuals.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity

#enforcement#surveillance Read original →
Enforcement
HIPAA Journal · · US Federal

Azul Vision Settles HIPAA Right of Access Case for $50,000

The HHS Office for Civil Rights has reached a $50,000 settlement with Azul Vision over a HIPAA right of access violation, marking the agency's ninth financial penalty in this enforcement area.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals

#enforcement#healthcare Read original →