The scenario now at hand—an untold number of buyers able to potentially grab up the genetic data troves collected and analyzed by 23andMe—is a forceful reminder of the need for better data privacy and security protections. Nothing can eliminate the possibility that a company collecting data goes bankrupt. But companies and policymakers can and should do better in mitigating the risks from any potential bankruptcy-data fallout ahead of time.