DNA Testing Privacy Risks

Direct-to-consumer DNA tests can reveal sensitive information about individuals and their relatives, while the companies handling that data may fall outside some traditional health-privacy protections.

Key concerns include opaque consent practices, sample and data retention, commercial sharing, re-identification, security breaches, vendor access, and law-enforcement matching. Companies such as 23andMe, AncestryDNA, and FamilyTreeDNA illustrate different questions around data use, deletion, and disclosure. The subject also involves the limits of HIPAA and GINA, state privacy rules, voluntary industry standards, and disputes over what happens to genetic data when a company is breached, sold, or faces financial distress.