Online DNA and genealogy databases are multi-billion dollar industries offering a glimpse into one’s ancestry and heritage. GEDmatch, for example, provides search capabilities for ancestry, lost family members, and cold cases. It’s little wonder that armchair detectives eagerly attempt to solve crimes with open source DNA. GEDmatch is owned by Verogen, Inc., a forensic science sequencing company—making the game all that more interesting. Genetic detectives are popping up everywhere, even on the ABC television network.

Spit into a tube and solve a crime, right? Well, perhaps.

In my intelligence gathering career, technology has simplified daunting tasks and made for more efficient workflow. Artificial intelligence in cyber investigations has developed at a quick clip in the past decade. In the 1990s, an onsite specialist examiner would conduct manual computer forensics with less than a gigabyte of data to examine. Today, that examination is conducted by software platforms that access the data remotely and capture a court-worthy batch of evidence.

Yes, technology does create the path, but it is the professional examiner—the investigator—who should forge the way. DNA material handled with the oversight of established protocols, rules of evidence, and ethical guidelines can be properly managed. In the hands of the possibly amateur public, however, DNA can lead to incredibly dangerous confrontations—perhaps well-intentioned but equally misled.

This new 3-part blog series focuses on the DNA testing industry and the potential risks of offering up too much personally identifiable information to corporate databases.

Delete Your DNA Data from the Big Three

Since the U.S. federal government requires companies to retain DNA information in order to comply with quality control guidelines, it is never really possible to delete it forever. The best way to remain anonymous is not to share a swab of your DNA. However, if you already have, you can work to have your data deleted.

23andMe

Websitehttp://www.23andme.comPrivacy Policyhttps://customercare.23andme.com/hc/en-us/articles/212170688-Requesting-account-closureOpt OutMostly, your DNA information will be retained for CLIA compliance.ActionVisit your account settings page: https://you.23andme.com/user

Find the “Delete Your Data” option under “23andMe Data.” You can download any or all of your data before you destroy it. If you agreed to have your sample saved, it will also be physically destroyed. 

Ancestry

Websitehttp://www.ancestry.com/dnaPrivacy Policyhttps://www.ancestry.com/cs/legal/privacystatementOpt OutMostly, your DNA information will be retained for CLIA compliance.ActionVisit your account settings page: https://www.ancestry.com/dna/

Choose “Your DNA Results Summary.” From there, click Settings and choose Delete Test Results. You’ll have to enter your password again to confirm that you want to delete your information.

MyHeritage

Websitehttps://www.myheritage.com/dnaPrivacy Policyhttps://www.myheritage.com/FP/Company/popup.php?p=privacy_policyOpt OutMostly, your DNA information will be retained for CLIA compliance.ActionVisit your account settings page: https://www.myheritage.com/dna

Click your name in the upper-right corner and choose Account Settings. From there, scroll to the bottom of the page and click Delete Account. You can also choose to delete your Family Tree Builder projects or sites without deleting your entire account, but this will not necessarily delete your data

Are you an analyst or investigator looking for advanced OSINT training on risk assessment and risk monitoring? If so, check out Hg’s webinar series, where you can attend live sessions and receive CEUs or watch previously recorded sessions to beef up your investigative skills.

Are you concerned about your company’s or employees’ points of vulnerability through online and open sources? Our skilled analysts are experts at removing personal information that puts you, your business partners, and your family at risk. Learn how our team can assist you in assessing and monitoring your risks.