Speaking recently with CBC Radio's Just Asking, Brent Arnold, a partner in Gowling WLG's Cyber Security & Data Protection Group, addressed the legal and privacy implications of using consumer DNA test kits in the wake of the 23andMe data breach. The Privacy Commissioner of Canada found the company failed to adequately safeguard the personal information of approximately 6.9 million users—much of which later appeared for sale online.
Reflecting on the sensitivity of genetic information and the gaps in existing regulation, Brent emphasized the need for greater awareness and corporate responsibility.
"A data breach like this represents a huge problem when you look through the lens of privacy law, because privacy law is all consent based and the cornerstone of that is informed consent," he explained. "It shows why you don't give away information unless you know what it's going to be used for."
To listen to the full segment, click the link below (no subscription required):