This piece was originally published by .
When DNA evidence of Joseph James DeAngelo in the Golden State Killer case last month, there was considerable relief and celebration among investigators, survivors, and the public-at-large. But as the public learned the details of the investigation 鈥 that investigators had uploaded a detailed genetic profile created from crime-scene DNA to a public genealogical database to find matches to relatives 鈥 companies such as 23andMe and Ancestry.com were quick to .
Here鈥檚 why.
Testing DNA holds immense promise: It can help us identify and ultimately treat health risks, teach us about our origins and even reunite families. But those benefits are only possible because our DNA holds deeply sensitive information about us 鈥 and about our relatives. In submitting our DNA for testing, we give away data that exposes not only our own physical- and mental-health characteristics but also those of our parents, our grandparents and, as in DeAngelo鈥檚 case, our 鈥 not to mention relatives who haven鈥檛 been born yet.
This sort of 鈥渘etworked privacy鈥 isn鈥檛 unique to genetic material. It emerges any time we share information with others, including all the photographs shared online in which we鈥檙e often unwitting extras. It could also be infringed through social media relationships, as we saw for the who recently had their information exposed to Cambridge Analytica because of choices only tens of thousands made.
We should be able to access the benefits of technological advances without giving up our rights.
For starters, private companies have an important role to play in safeguarding sensitive information. 23andMe already has a explaining that its results cannot be considered 鈥減roof in a legal context鈥 because the company lacks 鈥渢he means to reliably connect any particular DNA sample or account to an individual.鈥 The company also bars law enforcement from submitting samples from incarcerated people or those charged with a crime for testing.
But 23andMe and similar companies such as Ancestry.com also state that they will comply with 鈥溾 seeking consumer information. It is not clear from the companies鈥 terms of service whether that applies only to usernames, photos, and credit-card information, or if it extends to genetic material as well. All of these companies should make clear that the genetic material they collect from users is not available to serve as legal proof and that law enforcement cannot use their services to test prisoners and arrested individuals or to conduct investigations. Otherwise, the public may have to choose between accessing the benefits of genetic science and maintaining its privacy rights.
Even if companies take these much-needed steps, the onus remains on government actors to protect our rights. We shouldn鈥檛 have to rely on changeable company policies to protect such private information.
Moreover, the privacy concerns raised by the Golden State Killer investigation don鈥檛 disappear just because , the genealogical database investigators reportedly used, was a public site. In fact, investigators鈥 decision to upload a detailed genetic profile generated from crime-scene DNA to a public website likely violated the alleged perpetrator鈥檚 privacy rights. Even if DeAngelo is found guilty of the crimes he is accused of, penalties for such crimes do not typically entail releasing a person鈥檚 entire genetic makeup. People may not be so troubled by such an intrusion when it comes to a serial killer, but imagine the implications of using this technique for shoplifters or trespassers.
The lines we draw for this case may well provide a roadmap for investigations of crimes in the future. And the techniques used here are likely only the tip of the iceberg when it comes to what investigators will soon have the technological power to do.
Now is the time for legislators, the courts and law enforcement to ensure that the benefits of genetic-science technology don鈥檛 come at the cost of our privacy rights. And our legal system should also recognize that just because information isn鈥檛 secret doesn鈥檛 mean that people don鈥檛 have an interest in controlling who can see it.
Blockbuster investigations, as gratifying as they are, shouldn鈥檛 obscure the very real dangers of government access to sensitive information.