Don't blame 23andMe for the federal government's lack of clear data privacy rules

In June , 27 states filed a lawsuit against 23andMe to block the sale of the company's customer data without their consent.

The U.S. doesn't have a federal framework to regulate how private companies can use or share sensitive data.

A better way forward would be to empower private entities to protect consumer data.