The clause is included in the company’s terms and conditions, which also outlines how the information could later result in a customer being denied insurance due to diseases in their DNA – should you fail to opt out of one of its ‘informed consent’ options.
Submitting DNA to the site gives Ancestry “a perpetual, royalty-free, worldwide, sublicensable, transferable license to host, transfer, process, analyse, distribute, communicate, and display your submission for the purposes of providing Ancestry’s products and services, conducting Ancestry’s research and product development, enhancing Ancestry’s user experience, and making and offering personalised products and services.”
Ancestry is based in the US, but provides DNA testing in more than 30 different countries. The company has more than 4 million DNA profiles in its collection.
“In addition, you understand that by providing any DNA to us, you acquire no rights in any research or commercial products that may be developed by AncestryDNA using your Genetic Information,” the terms state.
Concerns have previously been raised about DNA being used in experimental research, such as cloning.
The company has promised to safeguard DNA in its informed consent document, but does note that “there is a potential risk that data about you could become public as the result of a security breach.”
“Although we have processes in place designed to prevent a security breach (see the controls described above) and we require our Collaborators and Collaborator Partners to have similar controls, we cannot guarantee a breach will never happen,” the document reads.
According to a report from Oxford law professor Andelka Phillips investigating the “Direct-to-Consumer Genetic Testing Space,” it was noted that “insecure storage of genetic data may pose as yet unforeseen risks for consumers.”
“In the future, there may be an incentive for hackers to target genetic databases in order to acquire data than can be used in financial or identity fraud,” Phillips notes.
Speaking to Global News in 2016, Ann Cavoukian of the Privacy and Big Data Institute at Ryerson University said “you have to assume that you’re going to lose control over that information.”
“Your full genetic code is there through that test, so perhaps other information can be gleaned, over which you have no control in terms of who has access to it,” Cavoukian said.
“The language in our T&Cs has been updated to clarify how we have always operated,” Ancestry’s Brandon Borrman told RT. “What is most important to understand is that Ancestry does not claim ownership of a user’s DNA. Anyone who uses our service remains the owner of their data. They can download it at any time, and even delete it from our systems. This is the way it has always been and the new T&C language makes that clearer.”