Sign up for our daily briefing

Make your busy days simpler with Axios AM/PM. Catch up on what's new and why it matters in just 5 minutes.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Catch up on the day's biggest business stories

Subscribe to Axios Closer for insights into the day’s business news and trends and why they matter

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Stay on top of the latest market trends

Subscribe to Axios Markets for the latest market trends and economic insights. Sign up for free.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Sports news worthy of your time

Binge on the stats and stories that drive the sports world with Axios Sports. Sign up for free.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Tech news worthy of your time

Get our smart take on technology from the Valley and D.C. with Axios Login. Sign up for free.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Get the inside stories

Get an insider's guide to the new White House with Axios Sneak Peek. Sign up for free.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Want a daily digest of the top Denver news?

Get a daily digest of the most important stories affecting your hometown with Axios Denver

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Want a daily digest of the top Des Moines news?

Get a daily digest of the most important stories affecting your hometown with Axios Des Moines

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Want a daily digest of the top Twin Cities news?

Get a daily digest of the most important stories affecting your hometown with Axios Twin Cities

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Want a daily digest of the top Tampa Bay news?

Get a daily digest of the most important stories affecting your hometown with Axios Tampa Bay

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Want a daily digest of the top Charlotte news?

Get a daily digest of the most important stories affecting your hometown with Axios Charlotte

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Illustration: Sarah Grillo/Axios

Genetic testing companies that trace customers' ancestry are amassing huge databases of DNA information, and some are sharing access with law enforcement, drug makers and app developers.

Why it matters: At-home DNA testing kits are soaring in popularity, but many consumers who take the tests to learn more about their family trees may not realize how that data is being shared for other purposes.

The big picture: What started out as a novelty for genealogists has gone mainstream. There are now more than 50 DNA-testing kit services on the market, estimates Carson Martinez, a health policy fellow at the Future of Privacy Forum.

  • MIT Technology Review predicts more than 100 million people may be part of commercial genetic databases within the next two years.
  • Amid controversies over internet companies' collection of personal data, millions are paying to hand over DNA samples to a largely unregulated industry.
  • Some worry law enforcement, employers or insurance companies could end up using that DNA information against them.

Driving the news: This month FamilyTreeDNA came under fire for voluntarily giving the FBI routine access to its database of more than 1 million users' data, allowing agents to test DNA samples from crime scenes against customers' genetic information to look for family matches.

  • FamilyTreeDNA apologized for not disclosing the agreement to consumers. The company told the NYT that users can disable the "matching" option to prevent their data from being visible. Ancestry.com and 23andMe say they require a warrant or subpoena before they consider turning over data to law enforcement.
  • It's not the first time genetic data has been used in cold cases. To catch the Golden State Killer last year, police detectives compared crime scene DNA against publicly available genetic data to identify the suspect.

Drugmakers also want access. Ancestry.com and 23andMe — the largest companies that, combined, have DNA data of 15 million users — both share anonymized genetic data with outside researchers and companies.

  • Last summer, 23andMe struck a drug-development deal with GlaxoSmithKline, and it's working on developing its own line of drug treatments.
  • Ancestry has worked with Google spinoff Calico to study human longevity.
  • The companies say they obtain customers' "informed consent" — or explicit permission — before DNA is used in scientific or medical research.
  • Kathy Hibbs, 23andMe's chief legal and regulatory officer, said that assembling large aggregated datasets of human DNA can speed up drug development. The company says 80% of its customers opt in to research programs.
"It's not individual data that's interesting for research — it's the ability to look at large groups of people to see what's unique. It's the aggregate data, not individual data, that's meaningful."
— Kathy Hibbs, 23andMe

A firm called Helix acts like an "app store" platform that gives third-party software developers access to parts of customers' DNA data for apps and personalized services that consumers opt into separately. Helix has partnerships with around 25 companies. Fitness and wellness apps are among the most popular, said Elissa Levin, Helix's senior director of clinical affairs and policy.

  • For example, weight-loss app Lose It integrates genetic information to tailor diet and exercise recommendations.
  • Helix analysts work closely with third parties to provide privacy guidelines, but does not dictate their policies, Levin said.

Personal DNA tests are used to help predict genetic risk factors for health complications. 23andMe offers FDA-approved genetic risk reports for inherited breast cancer and colorectal cancer.

  • The results may allow customers to manage their own health, but can also lead to revelations that are surprising or alarming.
  • "We're encouraging companies to provide education to consumers about the risks and benefits and unintended consequences of the results," said John Verdi of the Future of Privacy Forum.

Reality check: Commercial DNA-testing services aren't specifically covered by federal privacy rules, such as HIPAA, because they aren't health providers or insurers.

  • They are subject to the FTC's protections around privacy disclosures, as well as some FDA standards for how data is used in drug and medical device research.
  • But protections can get murky when genomic data is used for human-subject medical research or for treatment, says Pamela Hepp, a health care attorney at Buchanan Ingersoll & Rooney specializing in data privacy.
  • For example, research using de-identified data in a clinical setting may not require participants' consent. But DNA data that is unique is arguably not capable of being fully de-identified and would still be personally identifiable, Hepp said. So use of such data — even if all identifying information is removed — may require consent, and it may even become part of your medical record.

Last year, the Future of Privacy Forum worked with 8 leading DNA testing companies, including 23andMe, Ancestry and Helix, to establish best (but voluntary) practices for data use and security — as well as restrictions on marketing based on DNA data and allowing consumers to delete their data.

  • Yes, but: "Even if a consumer deletes their DNA information, that is only effective if the DNA hasn't already been shared," Hepp said. "This is new territory."
  • Also, "subsequent researchers may want to use genetic data for future investigations, making it difficult to keep participants abreast of the various uses of their genetic data," according to a paper published in the Mayo Clinic Proceedings journal last summer.

The DNA services have grown popular without most consumers realizing that their data could be used for purposes other than genealogy, such as forensics, said Benjamin Berkman, a bioethicist at the National Institutes of Health, who wrote about ethical issues of using genealogy data to solve crimes in the Annals of Internal Medicine.

  • Not so long ago, serious concerns were raised about genetic research because of fears about potential discrimination by insurance companies and employers. In 2009, the Genetic Information Nondiscrimination Act outlawed discrimination on the basis of genetic information.
  • "There's still a lot of evidence that people are concerned about those things," Berkman said. "But we are gradually moving away from the hyper-sensitivity to the private nature of genomic data."

The bottom line: Read the fine print before uploading your genetic data, Berkman said, and use care when interpreting the results.

Go deeper:

Editor's note: An earlier version of this story incorrectly stated that Ancestry shared data with pharmaceutical companies.

Go deeper

Updated 1 hour ago - World

Skripal poisoning suspects linked to Czech blast, as country expels 18 Russians

Combined images released by British police in 2018 of Alexander Petrov (L) and Ruslan Boshirov, who are suspected of carrying out an attack in the in the southern English city of Salisbury using Novichok, a military-grade nerve agent, and also the2014 Czech depot explosion. Photo: Metropolitan Police via Getty Images

Czech police on Saturday connected two Russian men suspected of carrying out a poisoning attack in Salisbury, England, with a deadly ammunition depot explosion southeast of the capital, Prague, per Reuters.

Driving the news: Czech officials announced Saturday they're expelling 18 Russian diplomats they accuse of being involved in the blast in Vrbětice, AP notes. Czech police said later they're searching for two men carrying several passports — including two named Alexander Petrov and Ruslan Boshirov.

Indianapolis mass shooting suspect legally bought 2 guns, police say

Marion County Forensic Services vehicles are parked at the site of a mass shooting at a FedEx facility in Indianapolis, Indiana, on Friday. Photo: Jeff Dean/AFP via Getty Images

The suspected gunman in this week's mass shooting at a FedEx facility in Indianapolis legally purchased two assault rifles believed to have been used in the attack, police said late Saturday.

Of note: The Indianapolis Metropolitan Police Department's statement that Brandon Scott Hole, 19, bought the rifles last July and September comes a day after the FBI told news outlets that a "shotgun was seized" from the suspect in March 2020 after his mother raised concerns about his mental health.

U.S. and China agree to take joint climate action

US Special Presidential Envoy for Climate John Kerry waves as he arrives at the Elysee Presidential Palace on March 10, 2021 in Paris. Photo: Chesnot/Getty Images

Despite an increasingly tense relationship, the U.S. and China agreed Saturday to work together to tackle global climate change, including by "raising ambition" for emissions cuts during the 2020s — a key goal of the Biden administration.

Why it matters: The joint communique released Saturday evening commits the world's two largest emitters of greenhouse gases to work together to keep the most ambitious temperature target contained in the Paris Climate Agreement viable by potentially taking additional emissions cuts prior to 2030.