Edmonton (National Times): In light of the recent sale of 23andMe and its genome assets to California-based TTAM Research Institute, Diane McLeod, Alberta’s Information and Privacy Commissioner, has issued a strong caution to Albertans, urging them to be vigilant about how their personal and genetic information may now be used.
The sale of 23andMe’s assets, including its vast repository of genome data, was recently approved by a U.S. federal bankruptcy court, allowing TTAM Research Institute — a non-profit led by 23andMe’s co-founder and former CEO Anne Wojcicki — to acquire the company.
In response, Commissioner McLeod has confirmed that she is sending a letter to TTAM, formally reminding the organization that all personal information collected in Alberta, including sensitive genome data, falls under Alberta’s Personal Information Protection Act (PIPA) and must be handled accordingly.
“I strongly encourage Albertans to carefully read the notice and information provided about these protections and uses of their personal information for research by TTAM,” said McLeod. “If they are not satisfied, I encourage them to withdraw consent for any subsequent use.”
As part of its transparency efforts, 23andMe has issued a statement on its website stating that TTAM is committed to maintaining the existing privacy policies “in perpetuity” and that customers will receive advance email notification before the transaction closes. The notice also indicates that TTAM will allow users to change their research participation preferences and is adopting additional privacy safeguards.
However, Commissioner McLeod emphasized that Albertans have the right to request deletion of their personal data, including genome information, if they are uncomfortable with how their information may be used by the new entity.
Albertans with 23andMe accounts are advised to watch for upcoming communication from TTAM, which will detail how personal data will be managed, how privacy will be protected, and what options users have to limit or revoke the use of their data.
McLeod reiterated that her office — the Office of the Information and Privacy Commissioner (OIPC) — will continue to monitor the situation closely. The OIPC is responsible for overseeing compliance with Alberta’s privacy and access to information laws, including PIPA and the Health Information Act.
This update follows the Commissioner’s previous alert regarding the 23andMe bankruptcy, in which she flagged the potential risk of personal data misuse during the sale of company assets. The Commissioner operates independently of government and is tasked with protecting the privacy rights of Albertans.
For more information or to file a privacy concern, Albertans can contact the OIPC directly through its official website.
