I take the (you may call it Stoic) decision not to think about what I cannot affect. 23andMe is not a good company, it is tied to Google etc. and they are sloppy with security. I am not even trying to justify myself not taking my data away from there earlier, that is my fault, and I have been stupid and lazy.

That said, their Privacy Statement is quite clear about what should happen and none of the exception listed there apply, also because genetic data is anyway Art. 9 data.

I will act at the best of my possibilities and not concern myself more than needed with how bad of an actor anyone may be in the US (it is a bit overwhelming as an exercise, especially nowadays).

What I meant is that “this Privacy Statement will apply to your Personal Information as transferred to the new entity”, so by itself the sale of assets is not a reason to exclude any data from anything stated there.

I am deleting my account as soon as I get transferred all the data, but what happens when I request the deletion is still valid whether or not they sold the assets.

And genetic data of any kind is absolutely covered by GDPR: https://gdpr-info.eu/recitals/no-34/

A merger or liquidation is not a valid purpose to store personal, and especially Art. 9, data, as covered by the legal basis of legal obligations, according to GDPR. So, if you are in Europe, they would have to delete it.

That’s in line with being from Switzerland. Act cool, but be sure to stick with the richer people and do their interest. Never used Proton (I use Tuta instead) for that reason only. You are free to call me racist.