National Security

Your DNA kit begins a ‘journey of discovery’ – but are results in safe hands?

A technician removes tubes containing genetic material at a lab in Arlington, Va., in this 2010 file photo. Consumers can now buy DNA test kits for as little as $50.
A technician removes tubes containing genetic material at a lab in Arlington, Va., in this 2010 file photo. Consumers can now buy DNA test kits for as little as $50. AP

Test kits to check one’s DNA heritage have never been cheaper. Prices have skidded to less than $50, and in at least one instance, thousands of people were offered free tests.

It’s a commercial brawl, but one that stretches far beyond the marketplace to raise sensitive issues of privacy and personal identity. And it is likely to intensify. Some 10 to 15 million Americans have already taken the DNA tests, and the number is rising quickly.

For many Americans, the tests are fodder for cocktail conversation, revealing exotic aspects of their heritage, perhaps native American blood. For others, results can help track lost relatives or build a family tree.

As the DNA tests proliferate, though, some experts fret that consumers may be getting a sour bargain. Indeed, they say DNA data may fall in the wrong hands, betraying consumers and even making them the target of creepy advertising by companies aware of their genetic predispositions, like overeating or gambling.

The DNA kits, and advertising for them, are becoming ubiquitous. In September, a biotech company, Orig3n Inc., promised 55,000 football fans headed to Baltimore’s M&T Bank Stadium for a Ravens game that they would get a free DNA test. All they had to do was swab their mouths and drop the swabs in a bin on the way home.

Maryland regulators questioned the promotion, and to avoid potential legal hassles the company postponed the plan before game day.

Competition is intensifying. Year-end sales that began around Thanksgiving saw prices for some DNA kits drop slightly under $50.

Not mentioned amid the sales blitz and bargain-basement pricing, though, is that human genetic material can be extremely valuable to some commercial interests, experts say, and some companies are making a profit by selling the material onward.

They are selling it to you on the front end, and they are commercializing it on the back end.

Bennett Greenspan, president of Family Tree DNA

“They are selling it to you on the front end, and they are commercializing it on the back end,” said Bennett Greenspan, president and founder of Family Tree DNA, a Houston company.

Senate Democratic Leader Chuck Schumer of New York called last week for greater scrutiny over how the consumer genomics companies can sell DNA databases to others.

“DNA testing firms don’t clearly disclose to consumers exactly what they are doing with the DNA once a person’s cheek swab is sent in to the company,” Schumer said. “Most people, if they knew that this information could be sold to third parties, would think twice. “

Schumer urged the Federal Trade Commission to examine the industry to ensure that companies have “clear, fair privacy policies.”

At least half dozen companies are significant players in the field, including Ancestry, 23andMe and MyHeritage; many smaller ones, some in Europe, also compete.

It’s just growing at an astronomical rate.

Blaine T. Bettinger, lawyer and blogging genealogist

“It’s doubling in size practically every year. It’s just growing at an astronomical rate,” said Blaine T. Bettinger, a lawyer in Syracuse, New York, who also holds a doctorate in molecular biology and blogs as The Genetic Genealogist.

“People are naturally curious over what their DNA can tell them,” said Michelle De Mooy, director of the privacy and data project at the Center for Democracy & Technology, a Washington think tank on privacy and governance issues.

But De Mooy said there are landmines ahead for the industry, particularly if testing companies don’t adequately protect the security of the genetic databases and ensure that consumers don’t find that their own DNA is giving business or the government a leg up against them.

“It’s really inevitable that these databases will be breached” by hackers, De Mooy said. “This is just tempting, tempting data for the government, too.”

And accusations have intensified over the onward sale of DNA databases by the companies themselves.

Greenspan’s company last week launched a social media video campaign hitting on the theme. In one ad, a company spokesman says, “Family Tree DNA will never sell your genetic data. Can the other guys say that? Nope.”

Even as transparency is being called into question, the companies acknowledge that confidence is essential to growth.

This business is based on trust, and without the users’ trust, it doesn’t exist.

Eric Heath, privacy officer at Ancestry

“This business is based on trust, and without the users’ trust, it doesn’t exist,” said Eric Heath, privacy officer for Ancestry, the giant in the field with more than six million customers.

Ancestry, headquartered in Lehi, Utah, shares some DNA databases with Calico, a division of Alphabet Inc., the parent of Google. Calico is a biotech company focused on combating aging. Ancestry says that all genetic samples are anonymized, with no names attached, and transferred only with users’ consent.

“We state essentially, ‘You, our users, own your DNA data.’ … If at any time you want to take it away from us, we’re more than happy to give it back to you,” Heath said.

Greenspan said some legal language that authorizes companies to sell DNA databases is couched deep in lengthy customer user agreements.

“Most people other than lawyers really don’t read the fine print,” Greenspan said.

23andMe, which says it has tested more than three million people worldwide, says some 80 percent of clients opt in to participate in research programs, which include some conducted by pharmaceutical companies, academic institutions and nonprofit groups looking for cures to Parkinson’s and other diseases.

“We do not sell individual customer information nor do we include any customer data in our research program without an individual’s voluntary and informed consent,” said Kate Black, the company’s privacy officer.

Information shared with or sold to third parties is anonymized, unless clients agree to give additional information, Black said, and recipients are “required to meet the same rigorous security standards as we hold ourselves to, including robust technical and organizational controls.”

Outside of the industry, health experts say they worry that as scientists find new genetic markers for predisposition to disease or risky behavior, the DNA data banks will become both more valuable to outside parties and more risky for consumers.

“If you had a genetic test, and your genetic test showed that you might be predisposed to develop early onset Alzheimer’s Disease, and that information was made public, how would your employer feel about that?” said Peter Pitts, president of the Center for Medicine in the Public Interest, a New York-based research group.

Pitts said he feared that criminals could also target victims by impersonating them with their DNA samples.

“If people are trying to imitate you based on your Social Security number, imagine the damage they could cause impersonating you on the genetic level,” Pitts said.

Heath, the Ancestry executive, downplayed such fears, saying that genetic material is already widely available to criminals, who don’t have the knowhow to use it.

You go to your barber shop, that place is full of DNA.

Eric Heath of Ancestry

“You go to your barber shop, that place is full of DNA,” Heath said.

Of greater concern to Robert Lord, chief executive of Protenus, a Baltimore start-up that helps healthcare organizations protect their digital records, is a potential desire by industry and business to exploit their customers through DNA research.

“Perhaps we start to understand that particular genetic markers indicate a susceptibility to more addictive behaviors,” Lord said. “You could imagine that gambling institutions or casinos might say, ‘Well, you know what? Why don’t we target and segment individuals who have addictive personalities?’”

Other industries could also take an interest, such as insurance companies that find a genetic indicator of people prone to risky behavior.

“You could be priced out of insurance before you are even born,” Lord said.

The one natural brake on the DNA testing industry is skepticism among some consumers.

“They are worried about health insurers getting their information or the government having access to their information, law enforcement having access. I’ve encountered a lot of resistance to testing because of privacy concerns,” said Bettinger, the lawyer and genealogist.

Tim Johnson: 202-383-6028, @timjohnson4