

They’re headquartered in the US. GDPR being an EU statute, won’t hold much weight with the current administration; and since they’re filing for bankruptcy the data will be sold to the highest bidder. Likely as not they were selling access to their db when they were in operation.
HIPAA may have a claim on the data that could give some privacy protections, however since people’s insurance wasn’t involved and the process didn’t go through a doctor’s office I doubt it.
https://en.m.wikipedia.org/wiki/23andMe
https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html#who
If domestic terrorism is such a focus why’d they shutter their KKK and White Nationalist investigations and kill their metadata tracking tool?
https://www.reuters.com/world/us/fbi-scales-back-staffing-tracking-domestic-terrorism-probes-sources-say-2025-03-21