23andMe changes arbitration terms after hack impacting millions

Enlarge (credit: Bloomberg / Contributor | Bloomberg)

Shortly after 23andMe confirmed that hackers stole ancestry data of 6.9 million users, 23andMe has updated its terms of service, seemingly cutting off a path previously granted to users seeking public accountability when resolving disputes.

According to a post on Hacker News, the "23andMe Team" notified users in an email that "important updates were made to the Dispute Resolution and Arbitration section" of 23andMe's terms of service on November 30. This was done, 23andMe told users, "to include procedures that will encourage a prompt resolution of any disputes and to streamline arbitration proceedings where multiple similar claims are filed."

In the email, 23andMe told users that they had 30 days to notify the ancestry site that they disagree with the new terms. Otherwise, 23andMe users "will be deemed to have agreed to the new terms." The process for opting out is detailed in the site's ToS, instructing users to send written notice of their decision to opt out in an email to arbitrationoptout@23andme.com.