Not really. They used to have pretty good privacy agreements. I don’t know about now. They do supply agrigate information to pharmaceutical companies, but that has become a pretty fungible resource. The only big consumer of individual DNA information is law enforcement, and that’s more of an expense than an income flow, since reviewing warrants and providing responses costs money.
An important lesson in infosec is that the best way to reduce the cost of discovery and warrant compliance is to regularly delete any data you don’t need or aren’t legally required to retain. Companies like this don’t have that option. Data is both an asset and a liability.
I assumed they were making absolute bank by selling the data
Not really. They used to have pretty good privacy agreements. I don’t know about now. They do supply agrigate information to pharmaceutical companies, but that has become a pretty fungible resource. The only big consumer of individual DNA information is law enforcement, and that’s more of an expense than an income flow, since reviewing warrants and providing responses costs money.
An important lesson in infosec is that the best way to reduce the cost of discovery and warrant compliance is to regularly delete any data you don’t need or aren’t legally required to retain. Companies like this don’t have that option. Data is both an asset and a liability.