> 23andMe chooses to use all practical legal and administrative resources to resist requests from law enforcement, and we do not share customer data with any public databases, or with entities that may increase the risk of law enforcement access.
See: https://www.23andme.com/law-enforcement-guide/
The GSK (EDIT: their 4th cousin) actually used GEDmatch which is a service that openly cooperates with law enforcement.
GSK did not actually use GEDmatch, but his 4th cousins did.
The website identified 10 to 20 distant relatives of the Golden State Killer's (sharing the same great-great-great grandparents)
They "resist". All that means is they ask for a proper legal document, such as a warrant.
Warrants are easy to obtain. Judges give them out like candy, and I'd be incredibly surprised if after the success of the Golden State Killer case, that 23&me doesn't get 100's or 1000's of search requests per month.
Sure, they are probably not ever getting the full dataset, but you don't really think they are actually contesting the legal authority of the government to do this right? 23&me is not your doctor. You have no HIPAA protections.