Under a finalized order with the U.S. Federal Trade Commission, genetic testing firm 1Health.io will pay USD75,000 and instruct third-party contract labs to destroy consumer DNA data retained for over 180 days. 1Health.io is also prohibited from sharing health data with third parties without consumers' "affirmative express consent." The order follows a June complaint alleging the company "left sensitive genetic and health data unsecured, deceived consumers about their ability to get their data deleted, and changed its privacy policy retroactively" without notification and consent, according to the FTC.
Full story