DNA and Law Enforcement: How the Use of Open Source DNA Databases Violates Privacy Rights

68 Am. U. L. Rev. 1015 (2019).

* Junior Staff Member, American University Law Review, Volume 68; J.D. Candidate, May 2020, American University Washington College of Law; B.S., Political Science, 2015, Drexel University. I am grateful for the hard work of the staff of the American University Law Review, Professor Robert Tsai, and Professor Elizabeth Beske, all of whom provided valuable assistance in preparing this piece for publication. I would like to thank my husband, Johnathan Guest, for his support throughout my law school career and my sister and parents for encouraging my love of learning.

DNA testing, once an expensive and rare technology, has expanded rapidly in the past few decades. Now, individuals can send away a DNA sample for testing at a private company and receive a report with their ancestors’ countries of origin and their potential for developing genetically linked diseases within a few weeks. Individuals can even upload these test results to open source websites in order to connect with other individuals who may be related to them. Law enforcement has recognized the value in this technology and begun uploading DNA samples from unknown suspects in order to solve long-cold cases, including the high-profile “Golden State Killer” case. However, open source DNA databases are unlike law enforcement databases. In an open source database, there is no guarantee that an uploaded DNA profile is secure, even if the user is supposedly anonymous. Additionally, the DNA testing technique used to test the DNA sample reveals far more information about the individual, including sensitive information about the suspect’s ancestral origin and potential for developing certain genetically-linked diseases.

This Comment argues that when law enforcement uploads a suspect’s DNA to an open source DNA database, it violates the suspect’s constitutional right to privacy. A suspect retains a privacy interest in some kinds of sensitive information, and by uploading the sample to a website accessible to anyone, law enforcement has violated that privacy interest. This Comment further argues that the right to privacy of the suspect’s family is also violated by law enforcement use of this technique. Because DNA is shared between genetic relatives, law enforcement is also releasing information that implicates the suspect’s genetic relatives any time it uploads a genetic sample to an open source database.

Introduction

On April 25, 2018, law enforcement arrested Joseph James DeAngelo, a seventy-two-year-old resident of a Sacramento, California suburb, for a string of rapes and murders committed in the 1970s and 1980s.¹ The killer had eluded law enforcement for decades and was previously known only as the “Golden State Killer,” the “Original Night Stalker,” and the “East Area Rapist.”² Shortly after the arrest, details surfaced regarding law enforcement’s method for catching the alleged killer. Law enforcement revealed that it had uploaded the unknown suspect’s DNA to a DNA database called GEDmatch, an open source website that allows users to upload their genetic profiles from consumer genetic testing sites like Ancestry and 23andMe and make the profiles public to other GEDmatch users.³ Law enforcement had recovered the suspect’s DNA from evidence at several crime scenes, and while the DNA connected the crimes to each other, the DNA never matched any of the profiles in law enforcement’s own DNA databases.⁴ Officers stated that they had used the suspect’s uploaded DNA sample to identify a biological relative and then identified other individuals in the matched user’s family tree, ultimately leading the officers to DeAngelo.⁵

The arrest of the Golden State Killer was a highly public instance of law enforcement using genetic data uploaded by private individuals to a public DNA database, rather than using state and federal databases, which are more commonly associated with crime-solving.⁶ Private use of genetic testing has expanded rapidly in recent years, with sites like Ancestry and 23andMe boasting millions of users in their databases.⁷ Users of these services send in a saliva sample and receive test results with information about their genetics, such as their ancestral countries of origin.⁸ Users may also elect to share certain identifying information about themselves with other users whom the testing service identifies as possible biological relatives.⁹ Other sites permit users to upload their genetic profiles and make them public to any other user of the site.¹⁰ These public sites are open source, meaning that anyone can access them- including law enforcement.¹¹

Many of the articles concerning law enforcement’s methodology published in the immediate aftermath of the Golden State Killer arrest wrestle with optimism for the future of this technique to identify suspects in unsolved cases and wariness of the technique’s privacy implications.¹² Regardless of the public’s trepidation, law enforcement has expanded upon the use of this technique, particularly in cold cases.¹³ Technology company Parabon Nanolabs has offered assistance to law enforcement in testing DNA samples for upload to sites like GEDmatch,¹⁴ and many law enforcement bodies have taken advantage of such offers to solve criminal cases.¹⁵

Any profile created by law enforcement on a public DNA database is also public, at least to a certain degree.¹⁶ The DNA testing procedures used to obtain the correct format for uploading to a public DNA database are also far more “intrusive” than DNA testing traditionally used by law enforcement.¹⁷ While the DNA tests used by law enforcement for inclusion in government databases reveal nothing about the individual’s ancestry or medical history, the testing performed by commercial DNA databases is specifically designed to provide personal information, such as the individual’s genetic predisposition for certain diseases.¹⁸ By uploading a suspect’s DNA on a site like GEDmatch, law enforcement is revealing a great deal of highly sensitive data about the suspect to an unknown number of third parties. Additionally, because DNA is shared between relatives, uploading a suspect’s DNA profile to a public website may also share data about the suspect’s biological relatives.¹⁹

This Comment argues that the sensitivity of the information revealed by a suspect’s genetic profile is so great that the suspect and the suspect’s family maintain a privacy interest in that genetic information. As such, law enforcement violates both the suspect’s right to privacy and the suspect’s relatives’ rights to privacy when law enforcement uploads the suspect’s DNA profile to an open source DNA database. While this Comment cites to several Fourth Amendment decisions, this Comment bases its argument solely on the grounds of the right to privacy. Any citation to Fourth Amendment jurisprudence is used only to highlight the privacy interests protected by the courts in those cases. Additionally, while the anonymization of an individual’s data may seem to negate privacy concerns, there is no guarantee that this data will remain anonymous, particularly after a high-profile suspect is identified in the media.²⁰ Some may also argue that a suspect does not maintain a privacy right in information revealed by crime scene DNA, but courts have recognized a right to confidentiality for certain kinds of sensitive information, even for individuals with reduced privacy rights.²¹

Part I of this Comment begins by providing some scientific background on DNA and then goes on to describe DNA testing techniques, focusing on the testing techniques used by law enforcement and private DNA testing services.²² This section further elaborates on the rise of direct-to-consumer DNA testing and the leaps in technology that now allow DNA tests to reveal far more information about an individual than previous DNA tests.²³ Finally, Part I discusses the development of the constitutional right to privacy and the applicability of this right in analogous contexts.²⁴

Next, Part II of this Comment analyzes the law enforcement practice of uploading a suspect’s DNA to a publicly available DNA database in the context of the applicable law discussed in Part I. Section II.A discusses the privacy rights of a suspect and argues that some of the information contained within an individual’s DNA implicates sensitive information about the individual’s health and genetic background. Therefore, law enforcement violates a suspect’s right to privacy by uploading the DNA profile to a website where the public can potentially access the information. Section II.B discusses the privacy rights of a suspect’s family members. This section argues that the information contained in a suspect’s DNA can also reveal sensitive information about a suspect’s family members. Because uploading the DNA profile implicates the privacy rights of innocent third parties, law enforcement is therefore obligated to keep this information confidential.

I. Background

A. The Basics of DNA and DNA Testing

A basic understanding of the science of DNA is essential to understand how law enforcement uses DNA to identify suspects in cold cases. This section will address several important points, including what DNA is, how related individuals share DNA, and how scientists test DNA.

1. DNA and shared biological characteristics

DNA stands for “deoxyribonucleic acid,” and is found in most cells of the body of a living thing.²⁵ DNA is essentially a “blueprint” that tells the body how to make different types of proteins.²⁶ To form this “blueprint,” DNA has four “bases” called adenine (A), cytosine (C), guanine (G), and thymine (T).²⁷ These bases match up with one another to form the unique twisted ladder shape of a DNA molecule, known as a “double helix.”²⁸ The bases always match with a particular counterpart (A always matches with T and C always matches with G) to form a “base pair.”²⁹ DNA coils itself into compact structures called chromosomes, which are stored in the nucleus of the cell.³⁰ Most cells in the human body contain forty-six chromosomes, each made of tightly compacted DNA.³¹ Collectively, all of the information contained within an individual’s DNA is called the individual’s “genome.”³² The genome of one individual human contains approximately 3.2 billion base pairs.³³ DNA is also able to make copies of itself, which allows cells to divide and form new cells with the same exact DNA.³⁴

DNA is a hereditary material, meaning that it is passed down from parents to their biological children.³⁵ Hereditary information concerns both “phenotype,” the physical manifestation of a genetic trait, and “genotype,” the underlying genetic code that informs the creation of the trait.³⁶ A biological child, however, can inherit traits from a parent that the parent does not outwardly demonstrate.³⁷ This is because the child’s parents may have passed down DNA with recessive genes, which are only expressed when the child does not inherit a dominant gene from a parent.³⁸

Because a child inherits DNA from both parents, who in turn inherited their DNA from their parents, and so on, each person shares DNA not only with his parents, but also with other biologically related members of his family. Closely related individuals usually share a significant amount of DNA with one another.³⁹ However, with the exception of the parent-child relationship, the exact amount of shared DNA between related individuals varies depending on how close the genetic relationship is between the two individuals.⁴⁰ The closer the genetic relationship between the two individuals, the more likely they are to share a significant amount of DNA.⁴¹ However, at some point when two individuals are very distantly related, they may not share any DNA at all.⁴²

2. Identifying individuals using DNA

DNA is unique to each individual.⁴³ Therefore, by testing DNA, scientists can compare a DNA sample from an unknown individual to DNA from known individuals to try and find a match.⁴⁴ To match one sample of DNA to another, scientists can create a “DNA fingerprint,” which isolates certain elements of the DNA in a sample to create a unique profile that can then be matched to other DNA samples.⁴⁵ To create a DNA fingerprint, the scientist must first have a sample to work from.⁴⁶ This sample can be from any DNA-containing material, including blood, saliva, or skin.⁴⁷

Once the scientist has a sample, he may choose from a variety of testing methods to create a DNA fingerprint. While older methods of DNA testing required a significant amount of DNA, the same is not true of more modern techniques. With modern DNA testing, even small amounts of DNA and degraded DNA can be tested using the polymerase chain reaction (PCR) technique.⁴⁸ PCR replicates certain sequences within the DNA molecule to create enough DNA material to test.⁴⁹

After a scientist has enough genetic material to test, there are a couple different modern testing methods that he can use to create the DNA fingerprint. One method is to test for “short tandem repeats” (STRs) within the DNA sample.⁵⁰ These STRs can repeat dozens or hundreds of times throughout the individual’s genome, and the number of times STRs repeat varies from person-to-person.⁵¹ Testing a variety of STRs can provide the scientist with enough unique information to reliably identify an individual.⁵² STRs are not genes, so they do not reveal much information about the individual; however, by testing for enough STRs, a scientist can create a profile that can be compared to other DNA samples for identity purposes.⁵³

Another method of testing DNA is to test for single-nucleotide polymorphisms (SNPs). SNPs do not vary as much as STRs, but by testing for enough SNPs, the scientist can create a reliable DNA fingerprint for an individual.⁵⁴ SNPs do, however, indicate what a person’s ancestry may be, and can provide insight into the individual’s probable eye color, race, and geographic ancestry.⁵⁵ SNPs can also provide insight into an individual’s medical history by showing the individual’s susceptibility to certain genetically-linked diseases.⁵⁶

Finally, a scientist may choose to “sequence” the DNA that he is testing.⁵⁷ Sequencing is more comprehensive than SNP or STR testing and involves determining the exact sequence of all or a portion of an individual’s genome.⁵⁸ However, this technology can be expensive and is therefore often unavailable on a large scale.⁵⁹ The price of this technology continues to fall, however, and the National Institute of Health’s National Human Genome Research Institute aims to one day bring the cost of this testing technique to under $1,000.⁶⁰

B. Law Enforcement DNA Collection and Retention

DNA testing was introduced relatively early in legal disputes to solve crimes and determine paternity.⁶¹ However, the large amount of DNA needed for early techniques limited the use of DNA testing in most cases.⁶² Today, law enforcement has extensive procedures and resources for using DNA to solve crimes.⁶³ The Federal Bureau of Investigation (FBI) maintains a national database known as the Combined DNA Index System (CODIS), which also includes a network of state databases and federal databases maintained by other federal entities, known as the National DNA Index System (NDIS).⁶⁴ States also frequently have their own internal databases.⁶⁵ Whose DNA goes into the database and how that DNA is retained, used, and tested has been the subject of much litigation.⁶⁶ This section discusses how law enforcement tests and stores data, who law enforcement may take DNA from, and how law enforcement uses familial DNA testing within its own databases.

1. Law enforcement DNA databases

With the expansion of DNA technology, law enforcement has now created DNA databases for internal use to solve crimes and locate criminals. On the federal level, there is CODIS.⁶⁷ CODIS is operated by the FBI, along with NDIS, which has 190 participating local laboratories around the country.⁶⁸ CODIS stores the DNA information of convicted offenders, some arrestees, and DNA samples from crime scenes.⁶⁹ CODIS is a federal database, but information from state DNA laboratories is also uploaded to CODIS through the NDIS partnership with local laboratories.⁷⁰ Initially, CODIS tested DNA at thirteen particular locations, known as loci, but the FBI added seven more loci in January 2017 to ensure the accuracy of DNA matches as the number of profiles uploaded to CODIS increased.⁷¹ The loci tested for the CODIS database are in non-coding regions of an individual’s DNA, meaning that they only establish a code that can be used to identify the individual and do not implicate any additional information about the individual’s appearance, ancestral origin, or medical information.⁷² State and local law enforcement have their own databases as well.⁷³ While state and local DNA databases were usually created to retain the DNA data of sex offenders, these databases have expanded to include other DNA profiles.⁷⁴ State databases also may be far broader and more inclusive of other DNA samples outside of what the state uploads to the federal system, NDIS.⁷⁵

2. Collection of DNA for inclusion in law enforcement databases

To maintain its databases, law enforcement must collect DNA from individuals. The FBI is authorized to create a DNA index consisting of DNA from “persons convicted of crimes,” “persons who have been charged in an indictment or information with a crime,” and “other persons whose DNA samples are collected under applicable legal authorities, provided that DNA samples that are voluntarily submitted solely for elimination purposes shall not be included in the National DNA Index System.”⁷⁶ The FBI is also authorized to include in the DNA index samples from crime scenes, unidentified human remains, and samples provided voluntarily by the relatives of missing persons.⁷⁷ The law also provides that to be included in CODIS, the DNA analyses must come from laboratories or state, local, or federal agencies that meet certain guidelines and, in the case of external laboratories, undergo external audits.⁷⁸

A more controversial measure has been the inclusion of the DNA of individuals arrested for certain crimes in law enforcement DNA databases. In Maryland v. King,⁷⁹ the Supreme Court of the United States held that a Maryland law permitting police officers to take DNA samples from individuals arrested for, but not convicted of, serious crimes was permissible under the Fourth Amendment.⁸⁰

In light of the context of a valid arrest supported by probable cause respondent’s expectations of privacy were not offended by the minor intrusion of a brief swab of his cheeks. By contrast, that same context of arrest gives rise to significant state interests in identifying respondent not only so that the proper name can be attached to his charges but also so that the criminal justice system can make informed decisions concerning pretrial custody. Upon these considerations the Court concludes that DNA identification of arrestees is a reasonable search that can be considered part of a routine booking procedure.

Id. The Maryland law permitted the collection of DNA from individuals arrested for committing a burglary or crime of violence, or attempting to commit a burglary or crime of violence.⁸¹ Since the King decision, the federal government has also authorized the collection of DNA from individuals who have been “arrested, facing charges, or convicted” of a crime and individuals who are on “probation, parole, or supervised release.”⁸²

3. Familial DNA testing in law enforcement DNA databases

The federal government does not explicitly authorize familial DNA testing within its NDIS databases.⁸³ However, the FBI may perform a “moderate stringency search” of the NDIS system, which can be used to search the DNA database for a match to a sample that contains DNA from multiple individuals or is partially degraded.⁸⁴ Moderate stringency searches can also allow scientists to account for variations across different laboratories.⁸⁵ Law enforcement may use these moderate stringency tests to capture DNA profiles in the database that contain the same DNA as the sample but that might not show up on a higher stringency test.⁸⁶ For example, a moderate stringency search may help law enforcement by matching a suspect’s DNA to partially degraded DNA the same suspect left at a previous crime scene.⁸⁷ There is also a possibility that these moderate stringency tests may return a “partial match” result between two single source samples—two samples that are each known to include only one individual’s DNA. Such a result can indicate that the contributors of the two samples may be biologically related to one another, although the FBI notes that the likelihood of a true familial relationship based on a moderate stringency test is low.⁸⁸ The FBI may choose to disclose the partial match, and thus a possible familial relationship, to the law enforcement agency conducting the search.⁸⁹ However, the FBI considers the reporting of these partial matches not to be the same as familial DNA testing, as the test was not an “intentional or deliberate search” with the purpose of finding related individuals.⁹⁰

In some states, law enforcement uses familial DNA testing within its own databases.⁹¹ Twelve states have used familial DNA testing in their own DNA databases to track down suspects: Arizona, California, Colorado, Florida, Minnesota, New York, Ohio, Texas, Utah, Virginia, Wisconsin, and Wyoming.⁹² Very few of these laws have been challenged so far, and courts have generally not answered the question about the implications of familial DNA testing on an individual’s relatives.⁹³ Two jurisdictions, the District of Columbia and Maryland, explicitly forbid the use of familial DNA testing in state databases.⁹⁴ In academic circles, many argue that familial DNA testing violates Fourth Amendment protections and invades the privacy rights of individuals.⁹⁵

C. The Rise of Consumer Genetic Testing and Public DNA Databases

In recent years, DNA testing has become cheaper and expanded into other markets. Several private DNA testing companies have established a market for direct-to-consumer genetic tests, which provide users with information about their ancestry, potential for developing a genetically-linked disease, and carrier status for certain diseases that the user may pass on to his children.⁹⁶ This section explores the rapid expansion of these private genetic testing services, the establishment of public DNA databases, and how law enforcement has increasingly used this technology to solve cold cases.

1. Direct-to-consumer genetic testing services

Direct-to-consumer genetic testing services first appeared in the early 2000s but have rapidly become more accessible because of price reductions.⁹⁷ Direct-to-consumer DNA tests have risen drastically in popularity in recent years, and they are expected to continue to grow.⁹⁸ Ancestry, the largest consumer DNA database, now boasts that it has tested approximately 10 million people’s DNA.⁹⁹ The consumer DNA testing industry has also moved beyond testing for ancestry and now offers other services, such as DNA-specific skincare and fitness routines.¹⁰⁰ Many companies can now offer their genetic testing services for under sixty dollars.¹⁰¹ The industry took off in the summer of 2016, rapidly expanding from about 2.5 million people tested across the industry to over 12 million people in 2018.¹⁰²

Of the largest companies in the direct-to-consumer DNA testing market, most perform “autosomal” DNA testing to test consumers’ DNA samples.¹⁰³ Autosomal DNA is the DNA not involved in sex determination.¹⁰⁴ Generally, most companies perform SNP testing as outlined above, testing particular single-nucleotide polymorphisms that indicate a person’s ancestral origin.¹⁰⁵ Direct-to-consumer tests include a large number of SNPs in their testing process.¹⁰⁶ For instance, Ancestry purports to test the person’s “entire genome at over 700,000 locations.”¹⁰⁷ To determine an individual’s ancestral origins, these tests compare the individual’s DNA sample with other DNA samples to estimate an individual’s ancestral background.¹⁰⁸ The advantage to using SNP testing is that it captures the individual’s entire genetic background, instead of only certain family genetic lines.¹⁰⁹ This more comprehensive type of testing also allows the industry to offer many more types of DNA analyses, including everything from diet recommendations to advice regarding genetic health risks.¹¹⁰ While this Comment addresses privacy rights in the context of open source DNA databases, privately maintained DNA databases have also grappled with privacy rights concerns.¹¹¹

2. Open source DNA databases

Some DNA databases provide open source access to DNA profiles, including the now-famous GEDmatch used in the Golden State Killer investigation.¹¹² GEDmatch allows users to upload their DNA data generated by an earlier DNA test from a consumer genetic testing service like Ancestry or 23andMe.¹¹³ When GEDmatch users upload their genetic profile to the site, they have the option to designate the genetic profile as “private,” “public,” or “research.”¹¹⁴ Private DNA “is “available for comparison to any Raw Data in the GEDmatch database using the various tools provided for that purpose.”¹¹⁵ Research DNA may be used for a “one-to-one comparison to other Public or Research DNA.”¹¹⁶

GEDmatch notes that it does not guarantee the “confidentiality of any communication, material, or personal information provided to GEDmatch via the Site or email.”¹¹⁷ The site also provides the following information about what happens to data once it is uploaded to the site:

The original Raw DNA and GEDCOM data you provide to GEDmatch is not kept in its original form. It is converted to a form that makes it more efficient for the software to perform searches and comparisons. The Genealogical Data is loaded into a relational database that might still be recognizable as text. The Raw DNA is converted to a compressed binary format in a process we call “tokenization.” Although the Raw DNA is not encrypted in the usual sense of the word, it would be very difficult for a human to read it. Original uploaded files are deleted from the Site servers soon after they are processed and archived.¹¹⁸

GEDmatch also notes that it cannot guarantee users will not access the site for purposes other than genealogical research.¹¹⁹ GEDmatch states that users of the site may discover another user’s identity (even if that user has attempted to obscure the information), genetic relationships between individuals, or medical information.¹²⁰ Additionally, the site’s user agreement now states that law enforcement may upload DNA to “identify a perpetrator of a violent crime against another individual” or “identify remains of a deceased individual.”¹²¹ There is no indication as to how GEDmatch polices or enforces this rule.

3. Law enforcement use of private and public databases

In the Golden State Killer investigation, law enforcement found a particularly well-preserved sample of DNA from one of the crime scenes believed to be connected to the serial killer.¹²² Law enforcement uploaded the DNA data of the suspect’s sample to GEDmatch and obtained a partial match to an individual that law enforcement believed to be a relative of the suspect.¹²³ GEDmatch was unaware of this use of its website, and affiliates of the company state that law enforcement use was not part of the concept of the website itself.¹²⁴

Once a law enforcement agency has a partial match to a suspect’s profile on a public DNA database, they can use this information to identify likely suspects. Law enforcement can construct the family tree of the matched individual through public records to identify related individuals who fit the profile of the suspect.¹²⁵ Once law enforcement has narrowed down the search of the family tree to a particular individual, law enforcement may choose to get a warrant for a genetic sample from the suspect.¹²⁶ However, under the law established in California v. Greenwood,¹²⁷ law enforcement may also obtain the suspect’s DNA without a warrant.¹²⁸ In the Golden State Killer investigation, law enforcement used DNA found on items that DeAngelo had discarded and on public surfaces he had recently touched to determine that he was a match to original crime scene DNA.¹²⁹

Since the success in the Golden State Killer case, law enforcement agencies in other jurisdictions have used GEDmatch in other cases to turn up familial matches to unknown DNA samples left by suspects at crime scenes.¹³⁰ GEDmatch’s website now warns users that law enforcement may use the database.¹³¹ Some have recognized the opportunities in this field of investigation. For instance, Parabon Nanolabs was not involved in the Golden State Killer investigation, but the company now offers a service to help law enforcement conduct genetic testing and find a match in open source databases.¹³²

The growth of private and open source DNA databases and improvements in DNA technology also have significant implications for how law enforcement may use DNA databases in the future. A recent study found that approximately sixty percent of individuals of European descent could be identified through familial matching in a genetic database.¹³³ As consumer genetic testing expands, it is likely that nearly all individuals of European descent could be identified through familial matching in consumer DNA databases in the near future.¹³⁴ The study also had implications for the identity of individuals within genetic databases. Researchers in the study took a supposedly anonymous DNA sample from a public dataset and uploaded it to GEDmatch.¹³⁵ With one day of work, the researchers were able to identify the individual.¹³⁶ Separately, another group of researchers determined that it may be possible for law enforcement to use the data from its own databases and compare it against SNP profiles on sites like GEDmatch to identify close relatives.¹³⁷ If law enforcement took advantage of this technology, it could rapidly expand the reach of state and federally run DNA databases like CODIS.

D. The Right to Privacy

The police practice of uploading a suspect’s DNA to a publicly available website raises significant concerns about whether law enforcement has infringed upon one or more of the suspect’s rights.¹³⁸ The Supreme Court has established that individuals do have a constitutional right to privacy, even though such a right is not explicitly enumerated within the text of the Constitution. In Griswold v. Connecticut,¹³⁹ the Court recognized that the Constitution has certain “penumbras” that emanate from other explicitly established rights and give those rights “life and substance.”¹⁴⁰ The Court recognized a right to privacy in Griswold emanating from the First Amendment’s right to association, the Third Amendment’s right to exclude soldiers from quartering in the home, the Fourth Amendment’s right to be free from unreasonable searches and seizures, and the Fifth Amendment’s right to be free from self-incrimination.¹⁴¹ Additionally, the Court noted that the Ninth Amendment provides that the enumerated rights of the Constitution “shall not be construed to deny or disparage others retained by the people,”¹⁴² and used the Due Process Clause of the Fourteenth Amendment to apply this right of privacy to the states.¹⁴³

The Court’s jurisprudence on the right to privacy protects two separate interests: an “individual interest in avoiding disclosure of personal matters” and an “interest in independence in making certain kinds of important decisions.”¹⁴⁴ In Whalen v. Roe,¹⁴⁵ the Court describes the right to avoid “disclosure of personal matters” as the interest protected by the Court in its Griswold decision.¹⁴⁶ In addition to the reasoning in Griswold, the Court in Whalen also cited Justice Brandeis’s dissent in Olmstead v. United States¹⁴⁷ as upholding a right to privacy that protects individuals from disclosure of certain personal information.¹⁴⁸ In his Olmstead dissent, Justice Brandeis referred to a “right to be let alone,” which he asserted was “the right most valued by civilized men.”¹⁴⁹

In dicta, the Court has also recognized certain privacy rights of family members. In National Archives and Records Administration v. Favish,¹⁵⁰ the Court stated that the family of a deceased individual has a privacy interest in the details of the deceased’s death under both “cultural tradition” and the common law.¹⁵¹ While the Court ultimately resolved the Favish case on procedural grounds, the dicta in this case provides insight into how the Court conceptualizes the privacy rights of family members.¹⁵² Additionally, in the Fourth Amendment context, courts generally recognize that where multiple individuals have a privacy interest, consent of all parties is required to waive a constitutional right.¹⁵³

The Court has stated that an individual does not have a privacy interest in certain areas, most notably in illegal activity.¹⁵⁴ However, in other areas, the Court has acknowledged an expanded privacy interest. In recent years, the Court has had to address privacy in the context of a changing world. Technology has drastically changed what information law enforcement can obtain and use in the criminal justice context. This section will address how the Court has handled expansions in technology in the Fourth Amendment context.¹⁵⁵ While this Comment addresses the right to privacy and not Fourth Amendment rights, the Court has explicitly noted that the right to privacy derives in part from the guarantees set forth in the Fourth Amendment.¹⁵⁶ Thus, the privacy interests protected by the Court in the Fourth Amendment context also implicate which interests are protected in the right to privacy context. This section then addresses the right to privacy in the context of the state disclosing sensitive information, particularly sensitive medical information.¹⁵⁷

1. Privacy and technology

In addition to famously recognizing the “right to be let alone,” Justice Brandeis’s dissent in Olmstead also warned that as technology develops, the “progress of science” could provide the government with more ways to violate the Fourth Amendment rights of its citizens.¹⁵⁸ As modern technology has developed, the Supreme Court has increasingly extended privacy rights to cover the privacy invasions presented by new technology.¹⁵⁹ In the Fourth Amendment context, the Supreme Court has expanded protections to cell phone location data provided to a third party, examining the contents of a cell phone, and scanning an individual’s home with a heat sensor.¹⁶⁰

In deciding each of these cases, the Supreme Court found that changes in technology—and the way that the technology is commonly used in society—can change how “private” society perceives the information. For instance, in Riley v. California,¹⁶¹ the Court noted that smartphones are now an integral part of most adults’ daily lives in a way that cell phones were not just a couple decades ago.¹⁶² Similarly, in Kyllo v. United States,¹⁶³ the Court found that while law enforcement may legally observe a home from a public street, enhancing the senses through the use of a heat detector was an impermissible invasion of privacy which required a warrant.¹⁶⁴ Taken together, these Fourth Amendment cases demonstrate that constitutional rights are interpreted in the context of modern technology, particularly where that technology presents a further invasion into the intimate parts of an individual’s life.¹⁶⁵

2. Privacy and DNA

The Supreme Court has thus far not dealt extensively with how expanding technology use applies in the context of DNA analysis. In one of only a handful of cases addressing DNA,King,¹⁶⁶ the Court held that law enforcement may take DNA from an individual arrested for a crime.¹⁶⁷ However, in King, the Court focused on the physical taking of the DNA itself via a buccal swab of the arrestee’s mouth as the “search” within the context of the Fourth Amendment, not the later DNA testing and analysis of that swab.¹⁶⁸ The Court also recognized that the DNA sample taken from the arrestee would only be used to establish the arrestee’s identity, not to explore further data that could potentially be revealed through DNA testing.¹⁶⁹

While some state courts have found that a DNA test is a search separate from the search collecting the DNA sample, federal courts have followed the reasoning set forth by the Court in King.¹⁷⁰ Some lower federal courts have reasoned that because suspects of crime do not have privacy rights to their identity, and traditional DNA testing used by law enforcement only reveals information related to a suspect’s identity, DNA testing is not a search for the purposes of the Fourth Amendment.¹⁷¹ Because law enforcement use of SNP testing is relatively new and has not yet faced legal challenges, courts have not ruled on how this more sophisticated and revealing form of DNA testing applies in the privacy or Fourth Amendment context.¹⁷²

3. Privacy and medical information

The Supreme Court has not specifically ruled upon the issue of public officials releasing private genetic information about a suspect.¹⁷³ However, precedent from the Court sheds light on how it conceptualizes government use of personal medical information. Additionally, lower court decisions regarding the release of medical information of prisoners present an analogue for how courts may conceptualize the release of an individual’s DNA data. While the Court acknowledges in many of the cases noted in this section that an individual has a reduced expectation of privacy in certain situations, the Court does not state in any case that a right is wholly inapplicable to a particular individual. This is because an individual still retains his constitutional rights even when he has a reduced expectation of privacy.¹⁷⁴

The Supreme Court jurisprudence regarding drug testing sheds light on how the Court handles cases where private information about an individual may be revealed through testing of bodily fluids. Generally, the Court has been more permissive of testing in situations where the individual has a reduced expectation of privacy or where the test is less invasive.¹⁷⁵ In Vernonia School District 47J v. Acton,¹⁷⁶ a case challenging a school district’s policy of drug-testing student athletes, the Court found for the school district, reasoning that the school’s custodial relationship with the students and the students’ diminished expectation of privacy at school made the drug testing policy reasonable under the Fourth Amendment.¹⁷⁷ The Court also found for the government in a case challenging a Federal Railroad Administration regulation that permitted drug testing of railroad employees.¹⁷⁸ In Skinner v. Railway Labor Executives Ass’n,¹⁷⁹ the Court recognized that the compelling interest in ensuring that employees were drug-free outweighed the potential intrusion on the employees’ privacy.¹⁸⁰ However, in a case involving breath testing and blood testing of drunk drivers during the course of arrest, the Court permitted the state to use breath testing during a search incident to arrest but required a warrant for a blood test due to the invasive nature of the testing.¹⁸¹

The Court has implicitly acknowledged that the government releasing private medical information about individuals may implicate a privacy right. In Whalen, the Supreme Court addressed the issue of the state compelling pharmacies to track purchases of otherwise legal drugs.¹⁸² The Court recognized a compelling state interest in tracking legal sales of drugs that may be used to make illegal substances.¹⁸³ Ultimately, the Court ruled in favor of the state, but acknowledged that the state computer files used to store the data were vulnerable, and declined to rule on any questions regarding the “disclosure of accumulated private data,” whether such disclosure was “intentional or unintentional.”¹⁸⁴

One area where lower courts have recognized a privacy interest is in the disclosure of a prisoner’s HIV or transgender status. For example, in 1994 the United States Court of Appeals for the Second Circuit first recognized a prisoner’s privacy interest in HIV status in Doe v. City of New York.¹⁸⁵ The Second Circuit later addressed that same right in Powell v. Schriver,¹⁸⁶ holding that a prisoner, while deprived of many constitutional freedoms when incarcerated, nonetheless retains a right to privacy in her HIV and transgender status.¹⁸⁷ Although the Second Circuit ultimately found that the government officials had qualified immunity for the release of information about the prisoner in Powell, the court acknowledged that a prisoner has some privacy interest in her HIV and transgender status that may remain protected even while she is incarcerated.¹⁸⁸ Other federal courts have also found disclosures of a prisoner’s HIV status to violate a prisoner’s right to privacy in his medical information, although most of these cases also resulted in qualified immunity for the prison officials.¹⁸⁹

Taken together, these cases indicate that while a diminished expectation of privacy in certain information can permit the government to collect certain personal information, the invasiveness of the testing process matters when analyzing the privacy interests of an individual. The cases concerning medical information build upon this rule by establishing that even in situations where an individual has a reduced expectation of privacy, such as in the case of imprisoned individuals, an individual retains at least some privacy interest which protects against the release of sensitive information to outside parties. Part II of this Comment addresses these rules in the context of law enforcement uploading the results of an invasive DNA test to a public website.

II. Analysis

As established in the previous sections, modern DNA testing allows law enforcement to learn far more information about an individual than simply the individual’s identity. This Comment argues that a suspect and his blood relatives have a right to privacy in the DNA data that goes beyond the individual’s identity to sensitive traits, and that law enforcement violates this privacy right by uploading the data to a public DNA database. This section will first explore how this law enforcement practice violates the right to privacy of the suspect himself by releasing sensitive information, particularly medical information, about the suspect.¹⁹⁰ This section will then address the privacy rights implications of this practice on individuals related to the suspect, whose medical history may also be disclosed through the uploading of a relative’s genetic data.¹⁹¹ Ultimately, this section will argue that because innocent third parties who are related to the suspect do not have a diminished expectation in their privacy, the practice of uploading a relative’s DNA violates the family’s right to privacy in their own genetic data because the family members share DNA with the suspect.¹⁹²

A. The Suspect’s Right to Privacy

When an individual is suspected of a crime and not yet convicted, he retains the rights guaranteed under the U.S. Constitution.¹⁹³ While the Supreme Court has recognized that there are areas and circumstances that reduce an individual’s right to privacy,¹⁹⁴ these circumstances do not extinguish this right entirely.¹⁹⁵ However, in the context of investigating an unknown DNA sample, the “suspect” and his rights are difficult to define, as the individual has not yet been identified by law enforcement. Law enforcement certainly has a compelling interest in finding the identity of that individual, but even compelling state interests have certain limits.¹⁹⁶ In the sections that follow, this Comment argues that a suspect has a privacy interest in the intimate information contained within sophisticated DNA test results, and that law enforcement violates this right to privacy by uploading the DNA data to a public website where an unknown number of users could obtain the data.

1. Modern technology

As discussed above, an individual’s DNA contains a vast amount of information because DNA is the “blueprint” for the human body to make the proteins that define how an individual’s body looks and functions.¹⁹⁷ The amount of information revealed by a DNA test, however, is dependent on the type of DNA test that is performed on the DNA sample.¹⁹⁸ A DNA test could solely target non-coding regions of DNA, which would help establish a code that can be compared for identity purposes with another DNA sample, but would not be useful in establishing any further information about the individual.¹⁹⁹ A more sophisticated DNA test, such as an SNP test, could reveal far more information, establishing not only a code that informs the tester of an individual’s identity, but also reveals sensitive information about the individual, such as race, ethnicity, or potential to develop a number of different genetically-linked diseases.²⁰⁰

Advances in technology can greatly impact how courts perceive a violation of privacy rights.²⁰¹ Something that previously held only some personal data, such as a cell phone’s location, can rapidly become far more significant in daily life and therefore present an area where society recognizes a privacy interest, even if there may not have been a privacy interest in that area before.²⁰² Thus, while DNA testing has been less intrusive in the past, modern technology permits law enforcement to intrude far more into a suspect’s medical and genetic information than ever before.²⁰³ Some of these SNP tests can reveal medical information, such as a risk for breast cancer, Parkinson’s disease, and diabetes, all of which may be linked to certain genetic traits.²⁰⁴ Additionally, even a basic DNA test can reveal the sex of an individual at birth.²⁰⁵ Given that the Second Circuit has already recognized a right to confidentiality with regard to an individual’s transgender identity, releasing information from a DNA sample could violate an individual’s right to privacy by releasing sensitive information about his gender identity.²⁰⁶

In Carpenter and Riley, the Supreme Court also recognized that cell phone technology will only continue to become more sophisticated in the future.²⁰⁷ The Court recognized that as cell phone technology becomes more integrated into people’s lives, the more sensitive information can be revealed by a search of the phone.²⁰⁸ In Carpenter, the Court explicitly stated that its ruling would only become more important as the ability to pinpoint an individual’s location via his cell phone becomes more sophisticated.²⁰⁹ The same is true for hackers targeting websites.²¹⁰ As companies develop new ways to protect information, individuals who seek to gain access learn new ways to unlawfully obtain the information.²¹¹ Additionally, a recent study indicates that it is possible, with some knowledge and expertise, for an outside individual to identify a previously “anonymous” set of genetic data.²¹² This indicates that if law enforcement can use a pubic database to identify a suspect, citizen sleuths may be able to in turn identify which set of genetic data belongs to a particular suspect, even if law enforcement attempted to conceal the identity of the suspect when uploading the DNA to a public website.

In a DNA database operated by law enforcement, there are protocols regarding how DNA is tested, who can test the DNA, and who has access to the information stored in the database.²¹³ Law enforcement databases are used to solve crimes and are not available to the general public.²¹⁴ Thus, while an individual cannot know for sure who is accessing his DNA stored in a law enforcement database, he can generally be sure that the information will only be viewed by authorized officials. However, when law enforcement turns over a suspect’s DNA data to a public open source DNA database such as GEDmatch, it turns over all of its ability to control who may have access to that information. Even though law enforcement may make its best effort to keep the data it uploads anonymous, it has no means of knowing if the data will be kept anonymous in the future. The protections regarding access and accountability that are established by statute in the case of state and federal DNA databases are simply not present in the world of open source data.

Advances in DNA technology, coupled with the rise of online DNA databases, allow law enforcement to obtain more sensitive data about a suspect than ever before. Yet, once law enforcement uploads a suspect’s DNA information to a public DNA website, they have little control over how the data is used or who may access it. However, if a suspect has no privacy right in the genetic information released by law enforcement, then there would be no violation of the suspect’s rights. The next section explores why a suspect has a privacy right in the genetic information uploaded by law enforcement.

2. A privacy interest in DNA test results

As discussed above, the technologies used to test DNA in preparation for uploading to GEDmatch are far more intrusive than the other forms of DNA testing used by law enforcement and go far beyond simply assisting law enforcement in identifying a suspect.²¹⁵ To prepare a DNA sample to be uploaded to a genetic database, law enforcement must test the DNA in a manner akin to that of private, direct-to-consumer companies like Ancestry or 23andMe.²¹⁶ The DNA loci used in this kind of SNP testing can reveal far more information than the traditional DNA tests run by law enforcement for inclusion in CODIS.²¹⁷ Exactly what tests law enforcement uses in preparation for uploading a DNA profile to a public website, and exactly which loci are used in the testing process, have not been publicly disclosed. Thus, DNA testing done by law enforcement when preparing to upload a DNA profile to an open source database can potentially reveal sensitive medical information. Due to a lack of law enforcement transparency, the extent of the information revealed by that test may be difficult for the public to determine.²¹⁸ However, even without knowing the full panel of loci used by law enforcement,²¹⁹ this more invasive DNA test would necessarily include information regarding the individual’s ancestry, and potentially information relating to genetically-linked diseases as well.²²⁰ This is in stark contrast to how law enforcement uses its own databases, where the DNA must be tested in a manner clearly delineated and made publicly available by federal agencies.²²¹ Additionally, the DNA loci tested by law enforcement for inclusion in a law enforcement database do not test for any sensitive information.²²²

The privacy interests in information protected by the federal courts are analogous to the information at risk of disclosure when law enforcement uploads DNA data to a public website. In Doe and Powell, the Second Circuit recognized privacy interests of prisoners who were HIV positive.²²³ The Second Circuit in Doe reasoned that the right to privacy extended to “information about the state of one’s health.”²²⁴ The Second Circuit further recognized the stigma of HIV and transgender status and the potential for harassment or harm if that information released publicly in its decision in Powell.²²⁵ While DNA testing cannot definitively state that an individual will get a particular disease, it can establish that the individual has a higher likelihood of developing such a disease.²²⁶ Thus, under the reasoning of Doe and Powell, the individual has a privacy interest in that sensitive health information and should be permitted, within reason, to control when and to whom that information is disclosed.

While the government is permitted to possess sensitive information, this does not mean the government may freely release that information to the public. In Whalen, the Supreme Court recognized that the state government may mandate the disclosure to the state’s Department of Health of which individuals had been prescribed Schedule II substances.²²⁷ The Court reasoned that despite the appellees’ assertion that the data was insecure, there was no reason for the “assumption that the security provisions of the statute will be administered improperly.”²²⁸ However, the law enforcement practice of uploading a suspect’s DNA data to a public website is an explicit release of the suspect’s information. The entire practice is predicated on the release of the information, instead of a potential incidental effect of collecting the data. Thus, while law enforcement may have a right to test the crime scene DNA to collect additional data,²²⁹ the subsequent public release of that data would violate the suspect’s right to privacy.

A diminished privacy interest in some data does not give law enforcement a blanket license to release whatever information they want in pursuit of finding a suspect. In the school drug-testing case, Vernonia School District 47J v. Acton, the Court’s analysis of the students’ privacy interest relied in part on what the testing itself revealed.²³⁰ The Court stated that the drug testing procedure revealed only whether or not the student had used illegal drugs, and not whether the student was “for example, epileptic, pregnant, or diabetic.”²³¹ Similarly, in Skinner, a case concerning drug testing of public employees, the Court recognized that the urine testing may reveal medical facts about the individual, but nonetheless permitted the practice based on the need to test for drugs quickly and the dire consequences of allowing individuals under the influence of drugs operate railway equipment.²³² The privacy interest at risk in the uploading of a DNA test is distinguishable from these instances. While an individual who has committed a crime does not have a privacy right in his illegal activity,²³³ this does not preclude the individual from having a privacy right in other areas of his life. Unlike in Vernonia School District, where the testing only revealed the illegal activity of the students, the testing performed by law enforcement may reveal extensive information outside of law enforcement’s intended purpose to identify the suspect.²³⁴ Additionally, the purpose of the drug-testing policy in Skinner was to prevent railway accidents.²³⁵ However, in the case of crime scene DNA, the crime and the harm has already occurred. While law enforcement certainly has an interest in identifying a suspect as soon as possible, the courts may be more inclined to impose procedural safeguards in this instance.

Some may argue that the suspect, by leaving his DNA at the scene of a crime, has effectively “abandoned” the DNA sample or exposed the sample to the public and therefore does not retain any privacy interest in the DNA sample at all. While some states and lower federal courts have recognized this reasoning as the rule,²³⁶ the Supreme Court has not definitively answered whether a suspect releases all privacy in DNA shed at a crime scene. In addition, the reasoning behind the Court’s decision in Greenwood, which concerned trash in public view on the street, was that an individual’s trash is available and accessible to the public once placed curbside.²³⁷ While a DNA sample may be left behind, the information contained within the DNA sample is not readily viewable by the public and requires a significant amount of scientific testing which the average member of the public does not have access to. Additionally, SNP testing on a large commercial scale is a relatively recent occurrence.²³⁸ The fact that the loci used by law enforcement do not reveal any sensitive information about the suspect has been noted in some courts’ opinions on the abandonment issue as part of the court’s reasoning in permitting the practice of testing “abandoned” DNA.²³⁹ In this evolving area of technology, the Court’s precedents may not hold in the face of such invasive use of DNA testing technology.

Additionally, the practice of testing an individual’s DNA may lead to stigma or discrimination of other kinds. SNP testing can reveal very specific information about an individual’s race and ancestral national origin.²⁴⁰ This potentially opens the door for law enforcement officers to unfairly stereotype or profile individuals based on a suspect’s genetic profile.

An individual has a privacy interest in his medical information, and SNP testing is capable of revealing such information. While law enforcement may permissibly run such a genetic test on DNA found at a crime scene because of the suspect’s reduced expectation of privacy, law enforcement cannot upload the data to a public website without violating the privacy rights of the individual to whom the DNA belongs. Once uploaded, law enforcement loses all ability to control who may have access to that data and potentially shares sensitive genetic information about a suspect with the public.

B. The Suspect’s Family’s Right to Privacy

In addition to the suspect’s right to privacy in his own genetic material, the process of uploading a suspect’s DNA may also implicate members of his family. This section first describes the implications of the unavoidable sharing of DNA between family members,²⁴¹ and then argues that the family members’ privacy rights in their own genetic material is violated when law enforcement uploads the genetic testing data of a relative.²⁴²

1. Shared DNA between biologically related individuals

As noted above, related individuals can share a significant amount of the same DNA.²⁴³ Parents and children share exactly half of the same DNA, and close relatives share a substantial percentage of the same DNA as well.²⁴⁴ Thus, knowing the genetic background of one individual can implicate the genetic background of his close relatives. Additionally, some medical diseases often run in families and are genetically linked.²⁴⁵ An individual’s likelihood of getting these genetically-linked diseases can be detected by testing DNA.²⁴⁶

In the context of uploading a suspect’s DNA to a public website, law enforcement must also find a match to one of the suspect’s genetic relatives in order to trace the suspect’s family tree.²⁴⁷ These genetic relatives have made an active choice to upload their own DNA profiles to an open source website, functionally placing their genetic information in “public view” and, thus, opening their DNA profile to police scrutiny under the reasoning of Greenwood.²⁴⁸ However, after matching a suspect’s DNA to a genetic relative, law enforcement will use public records to investigate the known match’s family tree and identify the suspect.²⁴⁹ While currently an opaque process, this would likely involve law enforcement identifying many other individuals related to the suspect, including close relatives such as parents or children of the suspect.²⁵⁰ These other genetic relatives may have never openly released their DNA to public or law enforcement scrutiny. The consent of the genetic relative who uploaded his DNA sample cannot also be used as consent for all members of his family to release information about the family genetic line.²⁵¹ Nevertheless, this may allow law enforcement to obtain sensitive information about the relative’s genetic makeup, by virtue of analyzing the genetic makeup of the suspect, without ever possessing the relative’s DNA.

Additionally, as law enforcement uses the practice of uploading a suspect’s DNA to a publicly available database grows, questions of consent become even further complicated. It is unclear right now whether law enforcement deletes the DNA information of the suspect from the public database once law enforcement has obtained the familial information it needs to identify the suspect. If law enforcement leaves the suspect’s genetic profile on the public database, then that profile becomes public information for other law enforcement agencies to search when looking for a suspect. If a second law enforcement agency makes an arrest based on genetic information uploaded by the first law enforcement agency that the suspect never consented to making public, the same consent argument noted above would not hold. Should this practice become commonplace, the further use of uploaded genetic information for other purposes is an important consideration for law enforcement.

2. Privacy rights of innocent third parties

Relatives of a criminal suspect do not give up their privacy rights simply because of a genetic link to the suspect. Thus, innocent third parties do not have a diminished expectation of privacy in their genetic data in the same way that someone who has committed an illegal act would.²⁵² In most other instances, such as drug-testing or revealing an individual’s HIV status, the information is generally specific to one person and does not implicate any outside parties. However, this is not the case in the context of genetic material. Knowing that a woman has a genetic marker that increases risk for breast cancer, for instance, necessarily indicates that her daughter may have inherited the same gene.²⁵³

While not every relative will share every trait with the suspect, the implication of shared genetic material alone could be enough to damage the reputation of a related individual. In Favish, the Supreme Court recognized a family’s privacy interest in information about a deceased relative.²⁵⁴ The family members in Favish sought to protect their own interests in securing “refuge from a sensation-seeking culture for their own peace of mind and tranquility.”²⁵⁵ While the Court ultimately drew its conclusions regarding privacy in Favish from the text of the statute, the Court also recognized that intrusions on these privacy rights were “long deemed impermissible under the common law and in our cultural traditions.”²⁵⁶ Favish indicates that family members, in a situation where public pressure is applied to them based on the actions of a related individual, have a privacy right in protecting their lives from outside scrutiny.²⁵⁷ When officers release an individual’s DNA to the public, they invite scrutiny of those closely related to the accused in one of the most sensitive ways possible by revealing information that may bear on the family’s collective medical history.

Thus, when law enforcement uploads a suspect’s DNA to a public open source DNA database, law enforcement also reveals information regarding the suspect’s relatives.²⁵⁸ Because the privacy rights of innocent family members not suspected of a crime are not tempered by any diminished expectation of privacy, the release of this information violates a privacy right in the relatives’ genetic data.

Conclusion

DNA testing technology has grown vastly more sophisticated in recent years, and law enforcement has chosen to use this newly available technology to track down suspects in cold cases. Additionally, given the success of this technology in solving cold cases, law enforcement may decide to use this technology in more types of cases. While the goal of bringing criminals to justice is certainly laudable, law enforcement must exercise caution when using open source DNA databases and not abuse the powerful information that it can now obtain. The technology used by law enforcement currently presents a significant intrusion into not only the potential suspect’s right to privacy, but the right to privacy of individuals related to him as well. Uploading a suspect’s genetic information to a website that cannot guarantee privacy of that data is a violation of both the suspect’s right to privacy in his medical information as well as the right to privacy of individuals related to that suspect.

DNA and Law Enforcement: How the Use of Open Source DNA Databases Violates Privacy Rights

Share this post

Contact Us

Join Our Mailing List