Genetic testing company 23andMe filed for bankruptcy and intended to sell customer biometric data as part of its restructuring plan. This decision has caused a massive controversy regarding data ethics, particularly the use of personal information for secondary purposes. These new developments will have major implications, which will affect important business choices and public confidence.
Understanding Secondary Use of Data
Secondary use denotes the use of collected data for purposes other than the original intended collection. 23andMe customers submitted their DNA for ancestry discovery and health risk assessment, but the same data now exists for potential sale to outside organizations without clear consent. The ethical problems are quite serious, including violations of business-customer trust and consumer rights.
Biometric Data—Who Really Owns It?
Biometric data, including genetic information, is intrinsically sensitive because it remains impossible to anonymize or modify it. Consumers usually believe they have ownership rights to their biometric information, but official regulations fail to provide clear and specific directions (Acero et al., 2020). Comprehensive policies and regulations must be developed to clearly establish data ownership and usage, including selling the data to third parties and protecting consumers’ rights to their deeply personal information.
Pros and Cons of 23andMe Selling DNA Data
23andMe’s decision to sell its genetic database has some potential advantages for medicine. The data could enable substantial medical progress if sold under specific guidelines, anonymization, and consent protocols. Research into complex diseases requires extensive genetic datasets to create targeted therapies. The 23andMe DNA information could help pharmaceutical companies and research institutions speed up innovation by discovering genetic markers that lead to rare conditions and reduce drug development timelines.
However, substantial concerns accompany these potential benefits. The main problem with 23andMe’s planned data sale stems from DNA information’s irreplaceable and unchangeable character. 23andMe customers submitted their genetic information under the belief that it would remain private except for personal use or approved de-identified research that required explicit consent. The sale of this data as part of bankruptcy proceedings to unknown parties erodes customer trust and may result in discriminatory practices by employers, insurance companies, and governmental agency surveillance. The initial consent process did not include this future risk, making users vulnerable to data exposure. Genetic data contains critical information about disease predispositions, ancestry, and behavioral traits that require proper and ethical handling to prevent exploitation. Unregulated data sales could cause future medical advancements to provide advantages only to particular groups while excluding others who were not part of the 23andMe data sets (Wang, 2023). The customer’s data is not the only information at risk because parents share half of their DNA with their children and their full siblings and up to 12.5% similarity to first cousins. We have all heard good and bad stories about discovering unknown family members through DNA databases. The sale of this data could be used to discriminate against people who have DNA in common with a 23andMe customer, even when they did not contribute DNA for analysis or sign any form of consent.
Executive Responsibility and Ethical Leadership
Executive leaders have a major duty to develop organizational standards that determine how employees handle data ethically. Sustainable business operations and stakeholder trust depend on ethical leadership as their fundamental basis. As a CEO, one must understand that ethical matters function as strategic elements that build stakeholder trust and protect brand integrity while ensuring operational resilience. Customers will express their preferences through financial decisions.
Business leaders must recognize that data, particularly biometric data, holds more value than its commodity status. Data stewardship is a form of social stewardship. CEOs must embrace two roles: protecting shareholder value and safeguarding social trust. Organizations that handle sensitive data ethically decrease their legal exposure and reputational damage yet gain distinction as responsible industry leaders.
Practical leadership requires organizations to develop a data culture through transparent disclosure about consumer data utilization. Implementing future-oriented consent protocols alongside robust security protocols are essential elements of data protection that adapt to changing social expectations. CEOS must dedicate their resources to technological and governance frameworks that defend against data misuse.
Conclusion: Moving Towards Responsible Data Stewardship
CEOs should use strategic foresight combined with principled leadership when handling the intricate ethical challenges that arise from biometric data management. The level of responsibility extends past regulatory compliance because it affects the fundamental relationship between organizations, their customers, and society at large. Biometric data ethical challenges require more than superficial or reactive solutions. Organizations need to act proactively with thoughtful measures that align with their corporate values and societal responsibilities.
Every business leader must create strong data governance policies that fulfill present regulations while predicting upcoming standards and societal norms. The data lifecycle requires stakeholders, including consumers, to receive transparent information at each stage, from data collection through consent procedures to data sharing and deletion processes.
Ethical treatment of biometric data ethically goes beyond risk control. The company has an opportunity to demonstrate purposeful leadership, building societal trust while guiding responsible innovation into the future. CEOs who take this approach enable their organizations to establish trust-based competitive advantage while ensuring accountability throughout the market.
Note: I will have more blogs on secondary use of data in the future. I am reading an excellent book called “The Secret Life of Data: Navigating Hype and Uncertainty in the Age of Algorithmic Surveillance” by Aram Sinnreich and Jesse Gilbert. The insights the authors have are fascinating.
References:
Acero, J., et al. (2020). The ‘digital twin’ to enable the vision of precision cardiology. European Heart Journal, 41(48), 4556-4564.
Bose, R. (2024). Quantum-enhanced blockchain and digital twin integration for enhanced healthcare data security.
Fischer, R. (2024). Digital patient twins for personalized therapeutics and pharmaceutical manufacturing. Frontiers in Digital Health, 5.
Laubenbacher, R., et al. (2024). Toward mechanistic medical digital twins: some use cases in immunology. Frontiers in Digital Health, 6.
Wang, M. (2023). Opportunities and challenges of digital twin technology in healthcare. Chinese Medical Journal, 136(23), 2895-2896.
