DoJ announces an interim policy, that will go into effect Nov.1 2019, limiting how genealogy DNA databases can be used by law enforcement in serious crimes
The U.S. Department of Justice (DOJ) released new rules yesterday governing when police can use genetic genealogy to track down suspects …
Context & Ripple Effects
Law-enforcement use of consumer DNA had been governed largely by voluntary gestures: Ancestry and 23andMe pledged in 2018 to be upfront about sharing users' DNA with third parties, but the guidelines carried no force, and police were already requesting suspects' data from those firms' databases as far back as 2015. The flashpoint came when BuzzFeed News reported in February 2019 that FamilyTreeDNA was working with the FBI, giving agents access to its 1M+ profiles.
The DoJ's interim policy, effective November 1, converts that ad-hoc landscape into written federal rules: genetic genealogy searches are limited to serious crimes rather than open-ended database trawling. It lands months after FamilyTreeDNA moved to let users block law enforcement from their data, so the government is now codifying boundaries that consumer firms had begun drawing themselves.
First-order effects
- FBI and other federal investigators lose unrestricted access to consumer genealogy databases from November 1 — searches must be tied to serious crimes under the new DoJ criteria, directly constraining the FamilyTreeDNA-FBI arrangement reported earlier in 2019.
- Consumer testing firms like FamilyTreeDNA gain a clearer compliance line: the opt-out controls they introduced after the FBI disclosure now sit inside an official federal framework instead of being unilateral company policy.
Second-order effects
- Commercial DNA databases become a regulated intermediary between police and citizens, forcing firms like Ancestry and 23andMe to build audit trails and transparency reporting for law-enforcement requests or risk the same user backlash FamilyTreeDNA absorbed.
- State and local agencies that piggybacked on federal database access face a patchwork: the DoJ rules bind federal practice but leave civilian-run genealogy sites to set their own terms, pushing platforms to decide who may search and under what warrant conditions.
Third-order effects
- Genomic data is consolidating as a distinct category of sensitive-data governance: five years later the Biden administration proposed rules restricting transfers of biometric and genomic information to adversarial nations, extending the same logic from domestic policing to national security.
- If the pattern holds, genetic-privacy rules keep ratcheting from voluntary corporate pledges toward binding statute, with each incident — the FBI partnership, the DoJ interim policy — narrowing what platforms may do with customer DNA without explicit consent.
The trend: Consumer genetic data is moving from self-regulated marketing asset to formally governed sensitive infrastructure, with each law-enforcement controversy converting voluntary pledges into enforceable rules.