The Dark Side of DNA Tests: 23andMe and Your Genetic Testing
Bloods, Spit, Tears, and National Security
BLUF
Genetic testing has become increasingly popular in recent years, with companies like 23andMe offering soldiers the opportunity to uncover information about their ancestry, health predispositions, and genetic traits through simple at-home tests. However, recent events have raised concerns about the privacy and security of the genetic data collected by such companies. This article explores the potential risks associated with genetic testing, focusing on the case of 23andMe, a prominent player in the industry.
- Introduction: The Strategic Acquisition
- Red Team Exercise
- The Acquisition Process
- Leveraging the Data
- Implications for National Security
- The Double-Edged Sword of Genetic Testing: When Your DNA Becomes a Corporate Asset
- Genetic Testing: A Pandora’s Box
- What Are the Potential Risks of Sharing Genetic Information with Companies Like 23andMe?
- The Risks of Genetic Data Exposure
- Consumer Data as a Corporate Asset
- What Are the Implications of The Recent Changes Within 23andMe’s Leadership?
- The Consequences of Consumer Data Sales
- What Are the Legal and Ethical Considerations Surrounding Genetic Privacy?
- What Should Soldiers Consider Before Undergoing Genetic Testing?
- Safeguarding Genetic Privacy
- The Future of Genetic Privacy and Security
Introduction: The Strategic Acquisition
There was a time when a medical examiner on a one-hour crime show used DNA testing to track someone down. But here we are, where there is the potential for the Beijing Genomics Institute (BGI), a leading Chinese genetics research organization seeking to expand its capabilities and influence. To achieve this, BGI orchestrates a strategic acquisition of 23andMe, a prominent personal genomics and biotechnology company based in the United States, which has amassed a database containing over 15 million DNA records.
These records will likely contain soldier genetic data or results from the Department of the Army Civilians or contractors. The struggle is real as military-friendly discounts also easily convince soldiers and family members to go against the Department of Defense’s guidance on at-home DNA testing (Office of the Secretary of Defense 2020). 23andMe is not the only game in town; beware of the following:
- AncestryDNA
- PaternityLab
- Living DNA
- Gene by Gene
- MyMedLab
- Counsyl
- MyHeritage DNA
- MapmyGenome
- Nebula Genomics
- Revvity Omics
- FamilyTreeDNA
- Dante Labs
Remember, you can protect your genetic data by having your test go through a licensed medical practitioner, doctor, primary care physician, or local care clinic or hospital.
Red Team Exercise
While fictional, this exercise is crucial for assessing vulnerabilities in national security, particularly concerning China’s potential to exploit weak health privacy rules and corporate acquisitions. These exercises simulate adversarial tactics to provide a comprehensive understanding of the risks involved. By identifying how China might leverage inadequate health data protections and strategically acquire companies to access sensitive information, we hope the following simulation can help develop more robust countermeasures. This proactive approach ensures that policymakers and military strategists can address these threats, reinforcing national security and protecting your data from misuse.
The Acquisition Process
- Subsidiary Formation: BGI establishes a European subsidiary under a neutral-sounding name, “Genetic Horizons,” headquartered in Switzerland. They design this subsidiary to operate independently, masking its direct ties to BGI and allowing it to navigate Western regulatory frameworks more easily.
- Regulatory Maneuvering: Genetic Horizons makes a public offer to purchase 23andMe, presenting itself as a forward-thinking company focused on health and wellness. It assures regulators that it will maintain data privacy and adhere to all local laws.
- Genetic Horizons effectively persuades regulatory bodies to approve the acquisition by leveraging diplomatic channels and utilizing high-profile Western advisors.
- Acquisition Completion: The acquisition is finalized, granting Genetic Horizons and, by extension, BGI access to 23andMe’s extensive DNA database. This purchase includes not only individual records but also the genetic profiles of family members through shared data.
Leveraging the Data
- Data Integration and Analysis: BGI employs advanced AI algorithms to analyze the vast DNA database, identifying genetic patterns and vulnerabilities they could exploit. The focus is profiling individuals with high-value ties, such as military leaders, political figures, and influential business personalities.
- Relational Mapping: Using indirect genetic links, BGI maps out familial connections, uncovering potential leverage points or vulnerabilities among relatives of key figures in Western nations.
- Strategic Applications: BGI develops targeted biochemical agents that can affect individuals with specific genetic markers. These agents are designed for various applications, ranging from incapacitation to more severe measures, and are potentially usable in conflict scenarios.
Implications for National Security
- Targeted Threats: High-value military leaders and political figures become targets for precision operations, where adversaries can exploit their unique genetic vulnerabilities without leaving conventional traces.
- Psychological Warfare: The mere knowledge that one’s genetic information might be compromised creates an atmosphere of paranoia and distrust among military and government officials, disrupting operational cohesion.
- Global Impact: The acquisition raises alarms about the security of genetic data and potential misuse. Western nations scramble to strengthen data protection laws and seek international cooperation to curb similar threats in the future.
End State
Through the strategic acquisition of 23andMe via a European subsidiary, the Beijing Genomics Institute gains unprecedented access to sensitive genetic information. This scenario underscores the importance of robust data privacy regulations and international collaboration to prevent the weaponization of personal genetic data against national security interests.
The Double-Edged Sword of Genetic Testing: When Your DNA Becomes a Corporate Asset
Like your posts, likes, comments, photo metadata, and geolocation-tracking apps, your data is a valuable commodity. You are the commodity! Yet, amidst concerns about privacy and data security, a more intimate kind of data is at risk: genetic information. The potential bankruptcy of 23andMe, a pioneer in at-home DNA testing, has raised alarming questions about the fate of the genetic data of over 15 million individuals. As the company considers selling its assets, including this genetic data, it is a stark reminder of the dangers inherent in genetic testing and how corporations can utilize consumer data.
Genetic Testing: A Pandora’s Box
At-home genetic testing kits like those offered by 23andMe have become popular gifts and tools for unlocking ancestry secrets or uncovering health predispositions. For many, the allure lies in gaining insights into their genetic makeup with a simple saliva sample. However, the convenience comes with significant risks that are often overlooked.
What Are the Potential Risks of Sharing Genetic Information with Companies Like 23andMe?
Genetic information is sensitive and personal, containing details about an individual’s health, ancestry, and predispositions to certain diseases. When you share your data with companies like 23andMe, there is a risk they can expose it in the event of a data breach or unauthorized access. The recent data breach at 23andMe, which compromised customer passwords, highlights the vulnerability of such information (23andMe Inc. 2023).
The Risks of Genetic Data Exposure
- Privacy Concerns: When individuals submit their DNA for testing, they often overlook the fine print that allows companies to share their genetic data with third parties. This de-identified data can still be re-identified with other datasets, potentially exposing individuals to privacy breaches. In fact, “80% of [their] customers consent to participate in research (23andMe Inc. 2018).”
- Law Enforcement Access: Law enforcement agencies have increasingly used genetic data to solve crimes. While this has led to breakthroughs in cold cases, it raises ethical concerns about privacy and potential misuse. An individual’s genetic information can inadvertently implicate family members in criminal investigations.
- Pharmaceutical Exploitation: Companies like 23andMe have entered partnerships with pharmaceutical firms, selling access to genetic data for drug development (GSK 2018) (23andMe Inc. 2023). While this can advance medical research, you cannot control your data’s use or who benefits from it financially.
- Insurance Implications: In some regions, insurers can request genetic testing results to determine coverage eligibility and premiums. This additional requirement could lead to discrimination based on predisposed health conditions identified through genetic data. And, if Congress repeals the Genetic Information Nondiscrimination Act (GINA) and Affordable Care Act (ACA) to make way for a “smaller government,” insurers will have the freedom to discriminate and only cover healthy patients or severely limit coverage.
Consumer Data as a Corporate Asset
The case of 23andMe highlights a broader issue: in the corporate world, consumer data is an asset that can be bought and sold. If 23andMe sells its database due to financial distress, another entity will gain control over millions of DNA samples. This scenario underscores the importance of understanding how your data is treated in corporate transactions.
What Are the Implications of The Recent Changes Within 23andMe’s Leadership?
The resignation of the entire board of directors at 23andMe has raised questions about the company’s future and the fate of the genetic data it has collected (Botha, et al. 2024). Privacy advocates raised concerns about the possibility of 23andMe facing bankruptcy and the potential consequences for the millions of customers who have entrusted their genetic information to the company.
The Consequences of Consumer Data Sales
- Loss of Control: Once sold, genetic data can change hands multiple times, making it nearly impossible for individuals to track or control how their information is used.
- Regulatory Challenges: Different jurisdictions have varying regulations regarding genetic data privacy, complicating international efforts to protect consumer rights.
- Ethical Dilemmas: Companies holding genetic data may prioritize profit over ethical considerations, leading to potential misuse or exploitation of sensitive information.
What Are the Legal and Ethical Considerations Surrounding Genetic Privacy?
Unlike traditional healthcare providers, companies like 23andMe operate outside federal health privacy protections like the Health Insurance Portability and Accountability Act (HIPAA). This lack of regulation raises concerns about how companies handle, store, and share your genetic data. While some states have specific laws protecting genetic privacy, the landscape remains complex and potentially risky for consumers like you (Electronic Frontier Foundation 2015).
What Should Soldiers Consider Before Undergoing Genetic Testing?
Don’t be part of the problem. Don’t subject yourself and, by expansion, your family to commercial DNA testing (Jillson 2024). Before undergoing genetic testing with companies like 23andMe, you should carefully review the terms of service and privacy policies to understand how their data will be used and protected. It is essential to weigh the potential benefits of genetic testing against the risks of privacy breaches and unauthorized access to sensitive information.
Safeguarding Genetic Privacy
As you become more aware of the implications of sharing their genetic data, you can take several measures to mitigate risks:
- Informed Consent: Individuals should thoroughly review consent forms and privacy policies before submitting their DNA for testing. Understanding what rights you relinquish is crucial.
- Advocacy for Regulation: There is a growing need for robust regulations that protect genetic privacy and limit how companies can use and share genetic information.
- Awareness and Education: Educating the public about the potential risks and ethical considerations associated with genetic testing can empower individuals to make informed decisions.
Conclusion: The Future of Genetic Privacy and Security
The rapid growth of genetic testing services like 23andMe highlights the potential benefits and significant risks of sharing personal genetic information. As we move forward, addressing the risk of exposing your genetic data through more robust data protection laws and international cooperation is crucial. Soldiers must remain vigilant and fully informed about the implications of sharing their DNA and advocate for enhanced privacy safeguards. By doing so, you can ensure that genetic testing is safe and ethical without compromising individual privacy or national security. The conversation around genetic privacy must evolve as technology advances, emphasizing the need for transparency, regulation, and education to protect consumers and their genetic data in this complex landscape.
Sources / Credit
- Hero Photo Credit: Image-Source
- Body Photo Credit: iLexx
- 23andMe Inc. 2023. 23andMe Announces Collaboration Extension with a New Data Licensing Agreement with GSK. October 30. https://investors.23andme.com/news-releases/news-release-details/23andme-announces-collaboration-extension-new-data-licensing.
- —. 2018. 23andMe for Healthcare Professionals. June 28. https://medical.23andme.com/.
- —. 2023. Addressing Data Security Concerns. December 5. https://blog.23andme.com/articles/addressing-data-security-concerns?utm_medium=search_brand&utm_source=google&gad_source=1&gclid=Cj0KCQiA5fetBhC9ARIsAP1UMgHA1SwBdGqLqQ2XflwUPSX1LJTtjPef363ewQf9ZA8eK-8URHmUSecaAtGwEALw_wcB&gclsrc=aw.ds.
- Botha, Roelof, Patrick Chung, Sandra Hernandez, Neal Mohan, Valerie Montgomery Rice, Richard Scheller, and Peter Taylor. 2024. Independent Directors of 23andMe Resign from Board. September 17. https://investors.23andme.com/news-releases/news-release-details/independent-directors-23andme-resign-board.
- Electronic Frontier Foundation. 2015. Genetic Information Privacy. November. https://www.eff.org/issues/genetic-information-privacy.
- GSK. 2018. GSK and 23andMe sign agreement to leverage genetic insights for the development of novel medicines . July 25. https://www.gsk.com/en-gb/media/press-releases/gsk-and-23andme-sign-agreement-to-leverage-genetic-insights-for-the-development-of-novel-medicines/.
- Jillson, Elisa. 2024. The DNA of privacy and the privacy of DNA. January 5. https://www.ftc.gov/business-guidance/blog/2024/01/dna-privacy-privacy-dna.
- Office of the Secretary of Defense. 2020. OSD advises service members against using DTC genetic testing. February 5. https://www.army.mil/article/232314/osd_advises_service_members_against_using_dtc_genetic_testing.