
New York Attorney General Letitia James has successfully secured an $18 million settlement from 23andMe following a significant genetic data breach. The agreement addresses the company's failure to protect the sensitive biological data of its users during the security incident. This settlement marks a major regulatory action regarding the protection of personal genetic information. The funds are expected to be allocated toward addressing the damages caused by the exposure. How should companies be held accountable for the loss of sensitive biometric data?