Research Project: The Dark Side of DNA Data
GENOMIC PRIVACY · CYBERSECURITY · NATIONAL SECURITY · DATA GOVERNANCE
About the Research
Consumer DNA testing has transformed the accessibility of genetic information, offering new opportunities for personalized medicine, scientific discovery, and ancestry research. However, the widespread collection and commercialization of genomic data raise significant concerns regarding individual privacy, informed consent, cybersecurity, and national security.
This research examines how genetic information collected through direct-to-consumer DNA testing services may be retained, aggregated, shared, or repurposed beyond consumers’ original expectations. Unlike conventional personal information, genetic data is inherently identifying, reveals information about biological relatives, and cannot be replaced once compromised.
The initial study explored the national security implications of large-scale genomic databases, including their potential exploitation for foreign intelligence collection, surveillance, coercion, and other emerging biological security threats. Particular attention was given to gaps in regulatory oversight, the limitations of genetic data de-identification, and the relationship between commercial data ownership and national security.
Building upon these findings, the continuing research investigates the intersection of genomic privacy, commercial data practices, and adversarial exploitation. Its central objective is to identify vulnerabilities in the governance and protection of genetic information and evaluate safeguards that preserve scientific innovation while protecting individual autonomy, privacy, and national security.
Next Steps for Further Research
The next phase of this research will expand beyond the traditional cybersecurity implications of data breaches to examine the broader risks associated with the collection, commercialization, and secondary use of genomic information.
Primary areas of investigation include:
Informed Consent and Secondary Data Use: Evaluate whether consumers adequately understand how their genetic information may be retained, shared with third parties, used in research, or transferred following changes in corporate ownership.
Genomic Data Commercialization: Investigate the economic value of large-scale genetic databases and the potential use of genomic information in commercial profiling, personalized advertising, insurance-related risk assessment, and consumer targeting.
Re-identification and Familial Privacy: Examine the limitations of anonymization and de-identification techniques, particularly when genomic information is combined with publicly available records, demographic data, and other commercial datasets.
Foreign Intelligence and National Security: Assess how aggregated genetic information could contribute to intelligence targeting, surveillance, population analysis, or coercion when combined with other compromised or commercially acquired personal information.
Emerging Biological Security Threats: Evaluate the scientific feasibility, limitations, and national security implications of using population-level genetic information to inform biological threat assessments, distinguishing established capabilities from speculative scenarios.
Regulatory and Governance Frameworks: Analyze the effectiveness of existing privacy protections, consent models, cross-border data restrictions, and cybersecurity standards. Develop recommendations for strengthening accountability, transparency, and consumer control over genetic information.