{"id":10577,"date":"2020-02-11T17:24:37","date_gmt":"2020-02-11T22:24:37","guid":{"rendered":"https:\/\/digital.hbs.edu\/platform-digit\/submission\/23andme-losing-at-digital-privacy\/"},"modified":"2020-02-11T17:24:37","modified_gmt":"2020-02-11T22:24:37","slug":"23andme-losing-at-digital-privacy","status":"publish","type":"hck-submission","link":"https:\/\/d3.harvard.edu\/platform-digit\/submission\/23andme-losing-at-digital-privacy\/","title":{"rendered":"23andMe: Losing at digital privacy"},"content":{"rendered":"
Background and business model<\/strong><\/p>\n 23andMe is a direct-to-consumer (DTC) genetic testing company that uses at-home kits and mail delivery to collect biologic samples (saliva) in order to provide customized reports about consumers\u2019 ancestry and genetic data (e.g., predispositions to specific health conditions). 23andMe uses digital technology to analyze biologic samples and compare customer data to the large 23andMe reference dataset of samples in order to identify and classify a customer\u2019s ancestry and genetic markers.<\/p>\n 23andMe disrupted the genetic testing industry because it provided a lower quality (limited set of genetic information compared to traditional genetic testing), lower cost product directly to consumers that provided relevant genetic information that was traditionally only available to doctors and medical professionals.<\/p>\n How 23andMe works: Sample 23andMe health report: Value creation and capture<\/strong>\u00a0<\/strong><\/p>\n 23andMe creates and captures value by 1) charging customers for at-home genetic testing kits with individualized reports, and 2) partnering with pharmaceutical companies to share customer data for drug development.[1]<\/a><\/p>\n 1) Customer at-home genetic testing kits:<\/u> 23andMe offers three versions of genetic testing kits for customers which range in the level of information provided. A customer can purchase 23andMe\u2019s \u201cAncestry + Traits Service\u201d for $99, the \u201cHealth + Ancestry Service\u201d for $199, or the \u201cVIP Health + Ancestry Service\u201d for $499. All of the kits provide ancestry and traits information, while the health-specific kits provide health predisposition, carrier status, and wellness reports. The VIP kit provides priority lab processing, premium customer support, and a 1-on-1 ancestry results walkthrough.<\/p>\n 2) Pharmaceutical partnerships:<\/u> In 2018, 23andMe initiated an exclusive 4-year partnership with pharmaceutical giant, GlaxoSmithKline (GSK), to share genetic information about 23andMe\u2019s 5 million customers. GSK will use 23andMe\u2019s large base of customer data and proprietary statistical analytics to inform drug discovery and development. As part of the partnership, GSK and 23andMe will share in the proceeds from any new drugs that are developed. Additionally, GSK made a $300M equity investment in 23andMe at the time of the partnership.[2]<\/a><\/p>\n Thus, 23andMe creates value for both customers and pharmaceutical companies, and it captures that value by charging customers for genetic testing kits and partnering with pharmaceutical companies to develop new drugs.<\/p>\n <\/p>\n How 23andMe is \u201closing\u201d at digital privacy<\/strong><\/p>\n 23andMe laid off 14% of its workforce in January 2020 due to a slowdown in sales of its genetic testing kits. 23andMe CEO Anne Wojcicki cited privacy concerns as a possible cause of the slowdown. She believes that customers are feeling anxious about sharing genetic data due to the publicity about Facebook and other technology companies sharing customer data without consent.[3]<\/a><\/p>\n I view 23andMe\u2019s lagging sales as an indicator that it is a \u201closer\u201d in the digital privacy realm since 1) 23andMe was not fully transparent with customers about its data sharing practices, and 2) 23andMe may put customers\u2019 genetic information at risk.<\/p>\n 1) 23andMe\u2019s data sharing practices:<\/u> When customers submit biologic samples to 23andMe for analysis, they can choose to consent or withdraw from \u201c23andMe Research\u201d. By consenting to 23andMe Research, customers are agreeing to let 23andMe use their genetic and self-reported information for, what 23andMe describes as, \u201cresearch purposes\u201d. \u00a023andMe indicates that this data will be de-identified (name, contact, and credit card information removed) and shared with 23andMe researchers, as well as \u201cexternal research partners and in scientific publications\u201d. [4]<\/a><\/p>\n While 23andMe frames this consent form around research and scientific development, it was not always clear to customers that their data would be used by pharmaceutical companies until 23andMe publicly partnered with GSK. Although this data is deidentified, it still causes many customers to reconsider choosing to share their genetic data with 23andMe. While customers may have felt comfortable sharing information for scientific research, they may not feel comfortable sharing their data with a for-profit company. Since 23andMe was not transparent about its intention to share data with pharmaceutical companies, customers cannot be certain that 23andMe will not share data with other companies that customers are not comfortable with in the future.<\/p>\n 2) Genetic information at risk:<\/u> While 23andMe has data security measures in place, it cannot be certain that a data breach will never occur. In fact, DNA testing service MyHeritage was attacked by hackers in June 2018, exposing 92 million of its accounts.[5]<\/a> Hackers can use genetic information to get paid ransom, or, even more concerningly, to potentially sell to health insurance companies to use to evaluate patient eligibility or individual insurance premiums (although this would be illegal under current regulations). If 23andMe\u2019s genetic database is hacked, customers are at risk of losing very personal and individualized information that could harm their future.<\/p>\n Thus, in the age of heightened concerns about digital privacy, 23andMe\u2019s genetic testing is not as compelling for customers since sharing genetic information with 23andMe means customers are sharing their DNA with any company 23andMe chooses to partner with, and customers\u2019 personal genetic information may be at risk of being hacked.<\/p>\n [1]<\/a>https:\/\/mediacenter.23andme.com\/company\/about-us\/<\/a><\/p>\n [2]<\/a> https:\/\/www.gsk.com\/en-gb\/media\/press-releases\/gsk-and-23andme-sign-agreement-to-leverage-genetic-insights-for-the-development-of-novel-medicines\/<\/a><\/p>\n [3]<\/a> https:\/\/www.cnbc.com\/2020\/02\/07\/how-dna-testing-companies-like-ancestry-and-23andme-can-survive.html<\/a><\/p>\n [4]<\/a> https:\/\/www.23andme.com\/about\/consent\/<\/a><\/p>\n [5]<\/a> https:\/\/www.theverge.com\/2018\/6\/6\/17435166\/myheritage-dna-breach-genetic-privacy-bioethics<\/a><\/p>\n","protected":false},"excerpt":{"rendered":" In the age of heightened digital privacy concerns, sharing genetic data with 23andMe may not be worth the risk.<\/p>\n","protected":false},"author":12972,"featured_media":10580,"comment_status":"open","ping_status":"closed","template":"","categories":[207],"class_list":["post-10577","hck-submission","type-hck-submission","status-publish","has-post-thumbnail","hentry","category-losers","hck-taxonomy-industry-health","hck-taxonomy-country-united-states"],"connected_submission_link":"https:\/\/d3.harvard.edu\/platform-digit\/assignment\/digital-winners-and-losers-2\/","yoast_head":"\n
<\/a><\/p>\n
<\/a><\/p>\n