So, Can Bankruptcy Transfer Genetic Data Like an Ordinary Asset?

Yes—but only in the narrow sense that a bankruptcy estate can transfer its own interests in a business that holds genetic information. No—if “ordinary asset” means property that can be sold without regard to customer rights, privacy policy, state law, purpose, access, or post-sale accountability. The 23andMe decision is best understood as a conditional answer to the title question: the court approved a change of custody because the same testing business was meant to continue, existing personnel were expected to retain access, privacy controls were preserved or enhanced, and the realistic alternative could have produced less protection. Those facts did not make genetic data ordinary.

The estate could transfer an interest, not erase the relationship

The most important distinction is between the bankruptcy estate’s interest and the customer’s entire relationship with the company. The estate held a business that included saliva samples, genetic results, account information, research participation, employees, systems, and the capability to provide testing services. Under the Equity Toggle, a wholly owned subsidiary called Newco would receive the assets, including customer data, in exchange for a promissory note; TTAM Research Institute would then acquire Newco’s equity.

That structure moved a real legal and economic interest. TTAM would control the subsidiary that housed the data and operated the business. The transfer did not require data to travel to a new server or a new team in order to matter. The debtors disposed of their interest in the assets, and the court treated that as a transfer in form.

But the estate did not thereby acquire every right associated with every customer. The court’s discussion of Texas law treated a customer’s property interest in a biological sample or test result as remaining with the customer. Before the sale, customers could delete their accounts, direct disposal of saliva samples, and opt out of research. The court did not read the transaction as transferring those rights away. In the most useful formulation, TTAM acquired the company’s custodial and operating position, not a power to rewrite what customers retained under applicable law.

This distinction answers two opposing mistakes. It is too broad to say that customer rights block any transfer of a business-held data interest. It is equally too broad to say that the estate could sell the information without restriction merely because it appeared among the assets. The transferable interest and the customer’s continuing control had to be analyzed together.

Why the 23andMe transaction was accepted

The court did not approve the sale because genetic data was treated as harmless. It approved the transaction after weighing a particular combination of facts.

First, the transaction preserved a going concern. TTAM was formed by 23andMe co-founder and former chief executive Anne Wojcicki. The court expected TTAM to operate essentially the same business, retain employees, and maintain the same limited access group. The transfer was not presented as a release of the database to a new audience or as a plan to sell genetic inferences for unrelated marketing.

Second, the transaction produced value for the estate. The auction process began with a $52 million opening bid, and TTAM ultimately offered $305 million, including $302.5 million in cash. Customers affected by the 2023 breach were among the main creditor groups. The court therefore viewed the sale as a potential source of recovery for people who had already been harmed, not just as a transaction benefiting a buyer.

Third, the chosen structure carried privacy commitments. TTAM agreed to preserve the petition-date privacy policy, continue account and data deletion and research opt-out rights, comply with applicable laws even if non-profit status might otherwise provide an exception, limit certain future transactions, avoid sharing personal information with insurance companies, plan for an independent consumer privacy advisory board, and provide two years of identity-theft monitoring. The later state announcements described related obligations in terms of risk analysis, security governance, advisory oversight, and continuing deletion rights.

Fourth, the court compared the Equity Toggle with a real alternative.