23 and me does this explicitly and with permission.

This comment is a rather egregious example of how surreal the false equivalences drawn between these two countries can be.

> The women, who signed consent forms stating that their genetic data would be stored and used for research, said they did not realize their genetic information could end up in China.

How do people not see the bias?

23andme doesn't specify which countries can do research on their clients' data, and for one I don't mind whichever country it is since the data can't be linked to people's identities. The only way to link it is to collect the person's DNA, at which point there is no point in using the database.

> ...since the data can't be linked to people's identities.

Well, 23andMe does "know" the identity of each individual. They know their name, their relatives, a lot about their genetics, and if given consent, store actual dna (biobanking) so that in the future other tests can be run. That's a lot of sensitive information for one entity to own.

Can we assume that 23andMe is at least very competent with security and PII, that they've taken enough safeguards to prevent hackers from stealing the keys to the kingdom? ehh maybe. Can we assume that they won't simply bend over when acquired by another less scrupulous entity? Nope. Can we assume that a future authoritarian government won't simply commandeer data whenever it likes like the CCP already does with Chinese companies? Hell no.

More to the point, however, is that folks are limiting the discussion to information about "individuals". Everyone imagines the consequences of individuals being targeted using this data. But really, geopolitical concerns don't care about individuals (modulo a very small number of key people). They care about populations. So even if individual information is kept safe, there's still awful things a bad actor can do with genetic data from everyone even without identifying individuals. That's what the concern is here.

23andMe has the same ultimate risks as BGI. It's just that BGI has skipped a few steps and gone further along in the dystopian nightmare by virtue of the fact that they're a Chinese company and utterly at the service of the CCP.

When I wrote "since the data can't be linked to people's identities", I was talking about 23andme research partners. They don't get any PII, and I presume neither does BGI as there is no reason for them to have it, unless they offer tests directly to consumers.

The data can't be linked untill it is. With DNA, you can guess approximative physical appearance and some medical properties. Once your database is rich enough, you can build family tree.

> with permission.

Most people barely understand the impact of their choices, that includes realising that all their (DNA) data will be logged forever if they ever let it touch the US. It is not reasonable to take this stance when the US tech company playbook has been to as obtusely as possible gain "permission" to do whatever they want.

do most people know about the usage of their DNA data in this form though? My guess would be no

permisson from whom and for what

23andme made the headline here many, many times, going all the way back to its early days. Would you rather we keep silent when Chinese companies do it?

US, US, US. How about CCP backed companies?