Familial DNA Searches May Make You Think Twice About Signing Up With Private Genetic Services
from the running-in-family dept
Using DNA found at the scene of a crime to identify the guilty party is pretty routine these days, but, as Mike discussed many years ago, police have been getting more aggressive in going much further: carrying out "familial" DNA searches on privately-held genetic databases. That link is to a recent Wired article that concerns the case of Michael Usry, who became a suspect in a 1966 1996 murder case because of his father's DNA:
Detectives had focused on Usry after running a familial DNA search, a technique that allows investigators to identify suspects who don’t have DNA in a law enforcement database but whose close relatives have had their genetic profiles cataloged. In Usry's case the crime scene DNA bore numerous similarities to that of Usry’s father, who years earlier had donated a DNA sample to a genealogy project through his Mormon church in Mississippi. That project’s database was later purchased by Ancestry, which made it publicly searchable -- a decision that didn’t take into account the possibility that cops might someday use it to hunt for genetic leads.
Using general similarities as the yardstick rather than more exact matches means that false positives are more likely -- as in this case, when Usry's own DNA proved he had nothing to do with the murder. Those similarities were only found because his father's DNA was in a privately-held genetic database that the police could access. That's unusual, but becoming more common as services like Ancestry.com and 23andMe gather many more DNA samples.
According to an article on Fusion.net, Ancestry now has over 800,000 samples, while 23andMe has a million customers (Ancestry says that a more up-to-date figure is 1.2 million members in its database). Those are significant holdings, and it's only natural that the police would try to use them to solve crimes; both companies confirm that they will turn over information from their databases to law enforcement agencies if served with a suitable court order. A more recent post on Fusion.net notes that 23andMe has produced its first transparency report (direct link, but Techdirt readers outside the US may have to use the Google cache version for reasons that are not clear.) The report shows that a total of four requests were received from the US authorities, concerning five 23andMe customers, and indicates that the company was successful in denying those requests, without giving details.
Although understandable, this kind of access is problematic for people who sign up for these services, for reasons made clear by the Usry case. The DNA that goes into the database affects not only the donor, if a rough match to crime materials is found by the police, but many close relatives whose genetic make-up is necessarily similar. As a result, it's entirely possible that completely innocent people might have to go through the traumatic experience of being a suspect just as Usry did before more precise tests ruled him out.
That's unfortunate, because it adds a complicating factor to the decision about whether to provide DNA to interesting and innovative services like Ancestry.com and 23andMe: doing so means future generations might be put at risk of erroneous police interest. The only way to prove their innocence would be to hand over their DNA to the authorities for detailed testing, which then raises the question of what happens to it afterwards.
Follow me @glynmoody on Twitter or identi.ca, and +glynmoody on Google+
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: dna, government, law enforcement, surveillance, transparency
Companies: 23andme, ancestry.com
Reader Comments
Subscribe: RSS
View by: Time | Thread
That was then; this is now
It's only a matter of time until these companies are compelled to turn over ALL data and to remain silent about doing so. Whether that's done via NSL or by quietly backdooring them, it will happen. Their repositories are too rich and too tempting to be left untapped. So...their assurances mean nothing. Their public statements mean nothing. Their transparency reports mean nothing.
[ link to this | view in chronology ]
Re: That was then; this is now
National government DNA databases. What could possibly go wrong?
[ link to this | view in chronology ]
Re: That was then; this is now
See: CISA.
Which will also conveniently allow them to share data with other companies, as well.
[ link to this | view in chronology ]
Re: That was then; this is now
These then get analyzed and filed into a database, which the Cops can then search at will, without warrant or oversight, forever.
Many people don't even realize the Cops already HAVE their DNA on file, because it happened so long ago... if they do have memories of the 'Safety Presentation' it rarely occurs to them what actually happened.
[ link to this | view in chronology ]
Re: That was then; this is now
[ link to this | view in chronology ]
1966
I think that's supposed to be "1996".
[ link to this | view in chronology ]
Re: 1966
[ link to this | view in chronology ]
Re: Re: 1966
[ link to this | view in chronology ]
(This is not including the factor of the risk assessment on the firmware of a couple of "lab" devices involved)
YMMV
[ link to this | view in chronology ]
Re:
Give the cops a break, those non-disclosure agreements are written by lawyers, so of course they're hard to understand!
[ link to this | view in chronology ]
Would the prosecution please present the other matches then?
What other matches?
Well for one the tristate area population is 380 million and I at least did not fail grade school math.
....
Some time latter.
....
Judge Judy finds local prosecutors guilty of all crimes due to overwhelming DNA evidence.
[ link to this | view in chronology ]
one problem with transparency report
[ link to this | view in chronology ]
Look for those same traits in genetic databases - with familial DNA covering those not in the databases - and you've got a valuable target marketing tool.
Ancestry databases may resist police demands, but I doubt they'll resist the money.
[ link to this | view in chronology ]
Re:
That hasn't stopped cities, counties, and states from offering for sale their databases. I bought a car in the 1980s and the state misspelled my legal name on the title. Several months later I started getting junk mail with my misspelled legal name. Don't think for one minute a police department won't offer to buy a database, even if they go through another department to disguise the end user.
[ link to this | view in chronology ]
Confused Lawyer Syndrome
Wait, what I meant was DNA databases should fall under HIPPA rules, and not be sellable, or accesible by anyone who is not currently providing medical care to a person. Um not that anyone would provide medical care to a non-person. NO I am NOT denigrating your pet. How could you share DNA with your pet??? You did WHAT?
[ link to this | view in chronology ]
Re: Confused Lawyer Syndrome
For example, if I were to obtain sensitive medical data about you, I can legally ignore HIPAA rules completely since I am not a health care professional. The only rule I'd have to comply with is to not do any work with or for an entity that is covered under HIPAA.
[ link to this | view in chronology ]
Re: Re: Confused Lawyer Syndrome
[ link to this | view in chronology ]
Re: Re: Re: Confused Lawyer Syndrome
Unless your employer is in a covered business or is acting as an agent for the business (for example, acting as an agent for an insurance company), then no, employers do not have to adhere to HIPAA.
Here's a more complete summary of who HIPAA applies to: http://www.hrsa.gov/healthit/toolbox/HIVAIDSCaretoolbox/SecurityAndPrivacyIssues/whoisreq2comply.htm l
[ link to this | view in chronology ]
Re: Re: Confused Lawyer Syndrome
[ link to this | view in chronology ]
This is the reason I have not yet done so.
[ link to this | view in chronology ]
Unreasonable weighting of evidence
Really? I imagine this "suspect" could have easily proved he was nowhere near the crime scene at the time the crime was committed. However, in this age evidence like that is completely ignored in the light of sexier evidence like DNA.
I realize that DNA can be very strong evidence, but only when many criteria are met. Again and again, people have been falsely convicted primarily on DNA evidence, and only years later does it come to light that there were problems with how evidence was collected, stored, analyzed, or presented in court.
[ link to this | view in chronology ]
It most likely stays in the law enforcement database for all eternity, just in case you ever happen to commit a crime in the future.
All the concern over police searching private DNA databases is misplaced in my opinion. Give it another 10-20 years and doctors will be required to collect a DNA sample at birth, which will then go into a national (or possibly international) database. I'm actually surprised this hasn't been done before now. Actually, I'm surprised that the government has yet required States to collect people's fingerprints when they get a driver's license.
[ link to this | view in chronology ]
Re:
Unlikely. DNA can only be used to solve murder, rape and the occasional armed robbery. Not important things like piracy and copyright violations.
[ link to this | view in chronology ]
Re:
However, "DNA Collection" isn't what it sounds like; what is usually being collected is specific marker patterns, NOT a complete genome. As such, the data is of limited use beyond acting as a filter (which appears to be how it was used in this case).
But what's REALLY interesting is that about the time you'd think that it would become a requirement (10-20 years), gene therapy will have matured to the point where a collected sample from one year might not even match the marker patterns from the same person, a few years later.
This is going to make the entire database pretty useless, as well as screw up future generation's genetic anthropology efforts, unless people log all changes to their genome for posterity.
[ link to this | view in chronology ]
Re: DNA
[ link to this | view in chronology ]
Me (tm)
---
[ link to this | view in chronology ]