At-Home DNA Test Kits Raise Security Questions

At-Home DNA Test Kits Raise Security Questions

Despite the answers a bit of saliva can provide, some are critical of the at-home test services, questioning the level of security they provide for your most sensitive information.

Home DNA test kits such as AncestryDNA or 23andMe are some of the most popular gifts this season, allowing you to send a DNA sample off to be analyzed for information on your ethnic background and genetic health conditions. Despite the answers a bit of saliva can provide, some are critical of the at-home test services, questioning the level of security they provide for your most sensitive information.

In November, Senator Chuck Schumer expressed concern about the at-home testing kits, saying many of their terms-of-service agreements weren’t clear on what the company could do with your genetic information.

"There are no prohibitions, and many companies say that they can still sell your information to other companies," Schumer said. He called for the Federal Trade Commission to “take a serious look at this relatively new kind of service and ensure that these companies can have clear, fair privacy policies”.

The privacy policies of these companies do vary, but typically require customer consent to share personally identifiable data. However, they often allow the sale or sharing of DNA information that has been anonymized as well as aggregate DNA information. There are potential benefits to this information sharing, but a lack of clear security safeguards means dangers loom.

"It all leads to good places for a patient if it's used appropriately, but when there's opportunity for misuse or for monetary gain, criminals are very fast on the uptake," said Peter Pitts, president of the Center for Medicine in the Public Interest.

While companies may anonymize DNA, it’s difficult to truly separate genetic information from identity, as DNA is basically the most personal identifying information anyone has. A 2013 study in the journal Science using two public genealogy databases found that researchers could correctly find people’s surnames from their genetic data alone between 12 and 18 percent of the time.

If DNA information and the genetic databases they’re held in aren’t properly secured and protected, the consequences of leaked data could be serious.

“It’s really inevitable that these databases will be breached” by hackers, said Michelle De Mooy, director of the privacy and data project at the Center for Democracy & Technology. “This is just tempting, tempting data for the government, too,” De Mooy said.

The Genetic Information Nondiscrimination Act of 2008 (GINA) aims to prevent insurance companies from denying coverage to healthy people based on predispositions their DNA may reveal and to prevent employers from using genetic information to make hiring, firing or promotion decisions. However, GINA has loopholes, and House Bill 1313, recently introduced in the U.S. House of Representatives, would reverse some of GINA’s workplace protections by allowing workplace wellness programs to restrict rewards to employees who did not provide genetic data.

Pitts said that the popularity and presence of genetic information means that the law needs to start paying attention.

"It simply means thoughtful regulation and thoughtful consumer education," he said.

About the Author

Jessica Davis is the Associate Content Editor for 1105 Media.

Featured

  • 5 Tips to Improve Your Password Security

    Change Your Password Day is right around the corner. Observed every year on February 1, the day aims to raise awareness about cybersecurity and underscores the importance of keeping passwords strong and up to date. Read Now

  • Enhancing Port Security

    DP World Yarimca, one of the largest container terminals of the Gulf of İzmit and Turkey, is a strong proponent of using industry-leading technology to deliver unrivaled value to its customers and partners. As the port is growing, DP World Yarimca needs to continue to provide uninterrupted operations and a high level of security.To address these challenges, DP World Yarimca has embraced innovative technological products, including FLIR's comprehensive portfolio of security monitoring solutions. Read Now

  • Hot AI Chatbot DeepSeek Comes Loaded With Privacy, Data Security Concerns

    In the artificial intelligence race powered by American companies like OpenAI and Google, a new Chinese rival is upending the market—even with the possible privacy and data security issues. Read Now

  • Survey: CISOs Increasing Budgets for Crisis Simulations in 2025

    Today, Cyber Performance Center, Hack The Box, released new data showcasing the perspectives of Chief Information Security Officers (CISOs) towards cyber preparedness in 2025. In the aftermath of 2024’s high-profile cybersecurity incidents, including NHS, CrowdStrike, TfL, 23andMe, and Cencora, CISOs are reassessing their organization’s readiness to manage a potential “chaos” of a full-scale cyber crisis. Read Now

New Products

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings.

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure.