23andMe is updating its TOS to force binding arbitration with a limited opt-out window
23andMe is updating its TOS to force binding arbitration with a limited opt-out window
23andMe, the personal genomics and biotechnology company, has been trying to contain a security breach that was first disclosed on October 6th. On October 19th, 23andMe disclosed another security breach by the same hacker who had initially claimed responsibility. The hacker said he had access to mor...
This change will force its users into binding arbitration, which is a means to resolve disputes (such as a cybersecurity breach leaking your DNA data) outside of court.
I'm not a lawyer, but I don't think that retroactively applies to things that happened before the ToS got updated.
So 23andMe would still be open to lawsuits for the previous breach
I'd almost guarantee the original TOS had a line like "we can change the TOS at any time."
Having said that, I also thought I'd seen quite some time ago that burying undesirable restrictions in the fine print of a TOS doesn't help companies who fuck up as much as they hope it will in court because it's been acknowledged that so few people thoroughly read them.
IIRC they scare people into thinking they have signed away legal rights more than they actually have. I could be wrong, but that's my recollection.
Edit: Just a quick search - https://www.rocketlawyer.com/family-and-personal/personal-finance/consumer-protection/legal-guide/your-rights-if-a-business-changes-its-terms-of-service
Consumer protection laws
Federal law and many state laws protect consumers from a wide range of deceptive, fraudulent, or unfair business practices. As mentioned earlier, businesses can enforce their TOS even if their users did not read them in their entirety, but only if the terms are reasonable and fair. Hiding unusual terms deep in the fine print of the TOS could be considered deceptive.
Yes, but every other "oopsies" that will happen to your DNA Data will cost them a "We're so Sorry"-Card and a Hershey's Kiss per Customer. And there will be oopsies in the future. It was a way to voluntary get people to submit their DNA Data with the Bogus claim to "find out where your came from". But the value for the medicine (read: Pharma industry) is much much bigger. My Sister submitted her DNA to them. They now know the genetic probability of illnesses of my whole Family-Tree including mine and everyone else in the Family up and down. And not only they know, but everyone who is using the "leaked" Data. Thank you Sister.
Note: limit of 500 "sorry" cards and 75 kisses for the entire class action suit. You may also opt to receive a free "DNA protection plan" from the same company that fucked everything up in the first place or 75 cents discount on future products (your code expires in 45 minutes).
Maybe not but you’ll undoubtedly have to go to court to argue that (paying legal cost the whole time) before you can then start the case about gross negligence (and pay more for)
It’s all designed to ensure you can’t afford to sue them
No, you’d just have to defend against a motion to dismiss under the terms of this agreement as part of the larger action. It’s a nominally increased amount of work and would not significantly increase the cost of litigation.
Funny, it's almost like they factored in a breach to their business model. Hunh
I would be surprised if they thought that far ahead.
You'd be surprised how much of corporate America assumes similar of us, then.
Thanks for the heads up, I got that email 4 days ago and ignored it.