“On the 23andMe website, the company’s privacy policy specifies that it “will not share your genetic data with employers, insurance companies, public databases or 3rd party marketers without your explicit consent.””
But I’ll bet that a court could compel them to cooperate.