FTC Says Genetic Testing Company 1Health Failed to Protect Privacy and Security of DNA Data and Unfairly Changed its Privacy Policy

Share This Post

The Federal Trade Commission charged that the genetic testing firm 1Health.io left sensitive genetic and health data unsecured, deceived consumers about their ability to get their data deleted, and changed its privacy policy retroactively without adequately notifying and obtaining consent from consumers whose data the company had already collected.

As part of a proposed settlement with the FTC, 1Health will be required to strengthen protections for genetic information and instruct third-party contract laboratories to destroy all consumer DNA samples that have been retained for more than 180 days.

“Companies that try to change the rules of the game by re-writing their privacy policy are on notice,” said Samuel Levine, Director of the FTC’s Bureau of Consumer Protection. “The FTC Act prohibits companies from unilaterally applying material privacy policy changes to previously collected data.”

California-based 1Health.io Inc., also known as Vitagene, Inc. before changing its name in October 2020, has sold DNA health test kits and used DNA test results, along with information consumers supplied, to provide the consumers with reports about their health, wellness, and ancestry as part of product packages that cost between $29 and $259. The health reports include personal information about a consumer’s health and genetics, such as their level of risk for developing health problems based on their genotype data.

In its first case focused on both the privacy and security of genetic information, the FTC said in a complaint that Vitagene deceived consumers about its privacy and security practices. On its website, the company prominently touted its privacy and security, claiming to offer “Rock-solid security” and promised users that it “collects, processes, and stores your personal information in a responsible, transparent and secure environment.” From 2017-2020, the company also said it would only share consumers’ sensitive health and other personal information in limited circumstances such as providing information to a customer’s doctor or with the lab doing genetic testing.

Vitagene also claimed on its website that it did not store DNA results with a consumer’s name or other identifying information; that consumers could delete their personal information at any time and that such data would be removed from all of the company’s servers; and that it would destroy DNA saliva samples shortly after they have been analyzed.

But the FTC said Vitagene failed to keep these promises. Beginning in 2016, the company did not implement a policy to ensure that the lab that analyzed the DNA samples had a policy in place to destroy them. And in 2020, the company changed its privacy policy by retroactively expanding the types of third parties that it may share consumers’ data with to include, for example, supermarket chains and nutrition and supplement manufacturers—without notifying consumers who had previously shared personal data with the company or obtaining their consent to share such sensitive information, according to the complaint.

In addition, Vitagene’s security failures put consumers’ sensitive data at risk, the FTC said. Vitagene stored in publicly accessible “buckets” on Amazon Web Service’s (AWS) cloud storage service nearly 2,400 health reports about consumers and raw genetic data of at least 227 consumers sometimes accompanied by a first name—despite promising users its security practices would exceed industry-standard security practices. Vitagene did not encrypt that data, restrict access to it, log or monitor access to it, or inventory it to help ensure its security, according to the complaint.

Over a two-year period, Vitagene was warned at least three times that the company was storing unencrypted health, genetic, and other personal information in publicly accessible data buckets, according to the complaint. After a security researcher contacted the company in June 2019, the company finally investigated the issue and notified its customers whose data it had exposed publicly.

As part of the proposed order, 1Health.io, which Vitagene is now known as, must pay $75,000, which the FTC intends to use for consumer refunds. In addition to the DNA deletion requirement, under the proposed order the company:

  • Will be prohibited from sharing health data with third parties—including information provided by consumers before and after its 2020 privacy policy change—without obtaining consumers’ affirmative express consent;
  • Must ensure any company that purchases all or parts of 1Health’s business agrees by contract to adhere to provisions of the order;
  • Must notify the FTC about incidents of unauthorized disclosure of consumers’ personal health data; and
  • Must implement a comprehensive information security program addressing the security failures outlined in the complaint.

The Commission voted 3-0 to issue the proposed administrative complaint and to accept the consent agreement with the company.

The FTC will publish a description of the consent agreement package in the Federal Register soon. The agreement will be subject to public comment for 30 days after publication in the Federal Register after which the Commission will decide whether to make the proposed consent order final. Instructions for filing comments will appear in the published notice. Once processed, comments will be posted on Regulations.gov.

NOTE: The Commission issues an administrative complaint when it has “reason to believe” that the law has been or is being violated, and it appears to the Commission that a proceeding is in the public interest. When the Commission issues a consent order on a final basis, it carries the force of law with respect to future actions. Each violation of such an order may result in a civil penalty of up to $50,120.

This action follows on a biometric policy statement the Commission issued last month that warned against the misuse of biometric information that could harm consumers.

The lead FTC attorneys on this matter are James Trilling and Elisa Jillson from the FTC’s Bureau of Consumer Protection.

Official news published at https://www.ftc.gov/news-events/news/press-releases/2023/06/ftc-says-genetic-testing-company-1health-failed-protect-privacy-security-dna-data-unfairly-changed

Related Posts

FTC to Host Virtual Roundtable on AI and Content Creation

The Federal Trade Commission staff will be hosting a...

Hanna Interpreting Services Awarded Comparably’s Best Company for Work-Life Balance

Hanna Interpreting Services, a premier language services provider, is proud to announce its recognition by Comparably as one of the best companies for work-life balance. This honor is a testament to the company’s unwavering commitment to employee well-being and its innovative approach to fostering a harmonious work environment.

Comparably’s accolade assesses factors such as employee satisfaction with work-life balance, average hours worked per day, lunch break lengths, and overall feelings of burnout. Hanna Interpreting Services' dedication to creating an environment that melds productivity with personal time has made it stand out in this evaluation.

A significant contributor to this balance is the company's hybrid working model, where employees merge the best of both worlds by working remotely for three weeks and in the office for one week every month. This flexibility allows team members to maintain their personal lives while still fostering in-person collaboration. Hanna also ranked among the top 35% of companies for diversity and in the top 40% for gender balance.

"It's a balance we've been striving to achieve, especially in these dynamic times," says President Tom Elias Hanna. "We understand the challenges presented by both remote work and the need to be in-office."

September is a monumental month for Hanna Interpreting Services. In addition to the Comparably award, the company celebrated its 13th anniversary on September 9, marking over a decade of industry leadership and commitment to bridging linguistic barriers. The month also saw the inauguration of a brand-new office space, showcasing the company’s dedication to growth and serving as a hub for innovation and team collaboration.

As Hanna Interpreting Services continues to evolve and set benchmarks in the industry, the core values remain consistent: a commitment to bridging language barriers, a dedication to employee well-being, and a vision to be the most trusted name in language services.

Founded in 2010 by mother and son duo Jennifer Hanna and Tom Elias Hanna in their garage, Hanna has grown to more than 70 employees, served 1.1 million clients to date in 250+ languages, and has sponsored countless outreach events to serve the local community.

For more information about Hanna Interpreting Services or to schedule an interview, please contact Sean Spicer, Revenue Operations Manager, at Sean.Spicer@HannaIS.com
 

Contact Information:
Sean Spicer
RevOps Manager
sean.spicer@hannais.com
(619) 963-2331


Original Source: Hanna Interpreting Services Awarded Comparably's Best Company for Work-Life Balance

With Nearly 2,000 Athletes, the 2023 JCC Maccabi Games & Access, North America’s Largest Jewish Teen Sports and Community Building Event, Leaves a Lasting...

With Nearly 2,000 Athletes, the 2023 JCC Maccabi Games & Access, North America’s Largest Jewish Teen Sports and Community Building Event, Leaves a Lasting Impact
Boys 16U Soccer Finals

The Fort Lauderdale Maccabi Soccer team won their gold medal match against the Philadelphia team.

The 2023 JCC Maccabi Games® & Access, hosted by the David Posnack Jewish Community Center (DPJCC) in Fort Lauderdale, Florida, have concluded with resounding success and heartfelt gratitude to the community that made it all possible. This week-long celebration of sports, camaraderie, and inclusivity has left a lasting impact, thanks to the dedicated efforts of our generous supporters.

Close to 2,000 Jewish teen athletes aged 12-16, representing communities worldwide, gathered in Fort Lauderdale to experience the joy of sports and the power of inclusion. The Games, presented by the JCC Association of North America, offered an unforgettable Olympic-style experience filled with competitions, opening and closing ceremonies, community service, social and cultural events, and opportunities to create Jewish connections that will last a lifetime.

One of the highlights of this year's event was the introduction of JCC Maccabi Access, brought to you by UKG and presented by the Posnack Family Foundation. This program is designed to provide athletes aged 12-18 with intellectual and developmental disabilities an inclusive Maccabi experience. This three-day program, held in conjunction with the 2023 JCC Maccabi Games®, exemplified the event's commitment to inclusivity and diversity.

Scott Ehrlich, CEO of the David Posnack Jewish Community Center, reflected on the Games, stating, "We were overjoyed to welcome Jewish athletes from all corners of the world to Broward County for the 2023 JCC Maccabi® Games & Access. Our heartfelt appreciation goes to our JCC Maccabi Team led by our Co-Chairs, Lori and Mitch Green, Debby and Dennis Eisinger, Davia and Jim Mazur, and Missy and Dan Longman. Their unwavering commitment contributed significantly to establishing an atmosphere that nurtured camaraderie, inclusiveness, and the genuine essence of the Games."

The Games' success was significantly bolstered by the support of honorary co-chairs Scott Scherr, founder of Ultimate Software, and Scot Hunter, co-founder of Emerald Multi-Family Office. Their encouragement to business owners and the backing of corporate and community partners played a pivotal role in the event's success.

Supporting Corporate Sponsors:

  • Emerald Multi-Family Office
  • Southern Glazer's Wine & Spirits
  • Official Torch Sponsor: Duty-Free America
  • Kent Security
  • Official Beverage Sponsor: Coca-Cola 
  • The Meltzer Group
  • Official Transportation: Sponsor Comcast 
  • Official Media Partner: Clear Channel Outdoor 
  • Official Produce Sponsor: ProEx International
  • Official Pun, Pass, and Kick Sponsor: Miami Dolphins
  • Official Basketball Sponsor: Miami HEAT
  • Official Baseball Sponsor: Miami Marlins
  • Official Cleaning Company Sponsor: AK Building Services
  • Official Swimming Sponsor: Blavatnik Family Foundation 
  • Northland Investments
  • Official V-VIP Dinner Sponsor: Aroma Market & Catering
  • Custom Outfitters LLC
  • FP&L
  • Greenspoon Marder
  • Manne Foundation for Homeless Prevention
  • Official Mitzvah Sponsor: Children's Services Council of Broward County

The 2023 JCC Maccabi Games® & Access were not just about competition; they were also about giving back to the community. The JCC Cares Mitzvah Projects showcased the spirit of service, assembling over 1,000 Rosh Hashanah food baskets for Goodman JFS Seniors and Holocaust Survivors, donating over 2,500 pairs of new sneakers to students, in partnership with Children's Services Council of Broward County, and repurposing 340 medals for the "We Finish Together" organization, spreading kindness to ill children and adults in hospitals.

Among the highlights:

  • Approximately 10,000 spectators attended the Opening Ceremony at FLA Live Arena.
  • 1,620 visiting athletes.
  • 21 Access participants.
  • 375 Coaches & Chaperones.
  • 850 Community Volunteers.
  • 600 Host Families.
  • 215 Local Athletes & Access participants representing Team Fort Lauderdale.
  • 64 delegations, including international representation from Israel, Ukraine, Argentina, South Africa, Mexico, Canada, Great Britain, and 53 cities throughout the USA.
  • 100 Local businesses and individuals generously supporting.
  • 110,000 bottles of Dasani water, Powerade, and soda provided by Coca-Cola.
  • 47,000 pounds of ice used.
  • 20,000 meals served.
  • 300 athletes and coaches wrapped tefillin daily.

As the Games came to a close, the resounding message was one of unity, inclusivity, and the power of community. The 2023 JCC Maccabi Games® & Access will be remembered not only for the athletic achievements but also for the lasting friendships, cultural exchanges, and shared experiences that will continue to enrich the lives of all those who participated.

For more information about the 2023 JCC Maccabi Games® & Access and how you can support future events, please visit dpjcc.org.

Contact Information:
Rixys Alfonso
Corporate Sponsorship Consultant
rixys@causemomarketing.com
305-558-8877

Scott Ehrlich
Chief Executive Officer
sehrlich@dpjcc.org
954-434-0499, ext. 313
Related Images
Boys 16U Soccer Finals
Boys 16U Soccer Finals

The Fort Lauderdale Maccabi Soccer team won their gold medal match against the Philadelphia team.

Ukrainian team with Stanley
Ukrainian team with Stanley

The Ukranian team, sponsored by the David Posnack JCC, poses with Stanley C. Panther at opening ceremonies of the JCC Maccabi Games & Access.

JCC Access Games Athlete & Coaches
JCC Access Games Athlete & Coaches

Nico poses with his coaches during a skill competition at the Maccabi Access games.



Original Source: With Nearly 2,000 Athletes, the 2023 JCC Maccabi Games & Access, North America's Largest Jewish Teen Sports and Community Building Event, Leaves a Lasting Impact
green agriculture project
- Part of VUGA Media group -best seo company