FTC Finalizes Order with 1Health.io Over Charges it Failed to Protect Privacy and Security of DNA Data

The Federal Trade Commission (FTC) has reached a settlement with genetic testing firm 1Health.io over charges of failing to protect the privacy and security of DNA data and making unfair changes to its privacy policy. The FTC accused 1Health.io, formerly known as Vitagene, of deceiving consumers about its privacy and security practices. The company allegedly stored sensitive data in publicly accessible data buckets and changed its privacy policy without adequately notifying or obtaining consent from consumers. As part of the settlement, 1Health.io will pay $75,000 for consumer refunds and must instruct third-party laboratories to destroy retained DNA samples. The company is also prohibited from sharing health data without consumers’ consent and must implement an information security program. The FTC voted 3-0 to finalize the complaint and order.