Spain fines 23andMe nearly $3 million for cybersecurity failings enabling 2023 hack

◆ ◆ The Wire takeaway

If you're collecting genetic data in Europe, multifactor authentication and per-IP download limits are now table-stakes - regulators are fining on the gap between what you say you'll do in a risk disclosure and what your actual security looks like. The fine is small; the pattern of enforcement across US states and EU regulators moving in parallel is the real signal.