Genealogy privacy sits at the intersection of family-history research, genetic testing, consumer data, and criminal investigations. The available measurements show both broad public interest in ancestry information and a complicated privacy landscape: users discover unexpected relatives, opinions on law-enforcement access are divided, and regulators have documented exposures and deceptive practices.
Contents
- How many people use DNA genealogy services
- What genealogy DNA users discover
- Public views on law-enforcement access
- Measured privacy exposures and enforcement actions
- Company disclosures about government requests
- The scale and safeguards of forensic genetic genealogy
How many people use DNA genealogy services
Pew Research Center found that 15% of U.S. adults had ever used a mail-in DNA testing service such as AncestryDNA or 23andMe during June 25–July 8, 2019. In a separate Pew survey conducted June 3–17, 2019, 16% of U.S. adults reported ever using one. These are survey measurements from 2019, not current estimates of the market.
Usage varied by household income and age. In the June 3–17 survey, 21% of adults in households earning at least $75,000 had used a mail-in DNA service, compared with 10% of adults in households earning under $30,000. Adults ages 65 and older reported usage of 24%, while 11% of adults ages 18–29 did so.
| Group measured by Pew | Ever used a mail-in DNA service |
|---|---|
| U.S. adults, June 25–July 8, 2019 | 15% |
| Households earning at least $75,000 | 21% |
| Households earning under $30,000 | 10% |
| Adults ages 65 and older | 24% |
| Adults ages 18–29 | 11% |
The same research shows that genealogy is a central reason for testing. Among mail-in DNA users, 87% said learning where their family came from was a reason for testing. Health or family medical history was a reason for 36%, and connecting with relatives they did not know about was also a reason for 36%. These motivations matter for privacy because one test can involve ancestry, health-related information, and relationships at the same time. (2019 Pew Research Center American Trends Panel Wave 50 Final Topline)
Family-history research also extends beyond commercial DNA kits. In February 2022, 34% of Black U.S. adults said they had gone online to research their family history, while 15% said they had used a mail-in DNA service to learn about family history. (Pew Research Center, “Black Americans’ family history, slavery and knowledge of Black history”)
What genealogy DNA users discover
DNA genealogy results can affect a person’s understanding of place, ancestry, identity, and family relationships. Among mail-in DNA users surveyed June 25–July 8, 2019, 38% were surprised by results about the countries or continents their ancestors came from. Another 27% were surprised by the racial or ethnic background indicated for their ancestors.
The findings could also change a family tree. Twenty-seven percent of mail-in DNA users learned about close relatives they did not know about from their results. Fifteen percent said the results changed how they thought about their racial or ethnic identity. Those figures describe reported experiences among users in that survey period; they should not be read as a forecast for all future test customers. (2019 Pew Research Center American Trends Panel Wave 50 Final Topline)
Pew’s February 2022 research also measured what Black adults said about slavery in their family history. Fifty-seven percent said their ancestors were enslaved, including 41% who said their ancestors were enslaved in the United States. Thirty-four percent were not sure whether their ancestors were enslaved.
Research method was associated with different reported knowledge. Among Black adults who researched family history online, 78% said their ancestors were enslaved. Among those who used none of the measured methods, 26% said so. The comparison describes survey groups and does not establish that online research caused the difference. (Pew Research Center, “Black Americans’ family history, slavery and knowledge of Black history”)
Public views on law-enforcement access
Public opinion on DNA-company data sharing was mixed in Pew’s June 3–17, 2019 survey. Forty-eight percent of U.S. adults said it was acceptable for DNA companies to share customers’ genetic data with law enforcement to solve crimes. Thirty-three percent said it was unacceptable, while 18% were unsure.
Views differed only modestly between users and nonusers. Fifty-one percent of adults who had used a mail-in DNA service approved of law-enforcement use of the data for crime-solving, compared with 48% of adults who had not used one. The survey measured approval of the described use; it did not measure approval of every possible government request or company policy.
Age and political affiliation were also associated with different responses. Fifty-six percent of adults ages 50 and older approved of DNA-company data sharing with law enforcement, compared with 42% of adults under 50. Fifty-two percent of Republicans and Republican-leaning independents approved, compared with 47% of Democrats and Democratic-leaning independents. The survey’s reported DNA-service usage rate was 16% of U.S. adults. (Pew Research Center, “About half of Americans are OK with DNA testing companies sharing user data with law enforcement”)
Measured privacy exposures and enforcement actions
Regulatory records provide concrete examples of what privacy risk can look like. In a 2023 consumer alert, the Federal Trade Commission said nearly 2,400 consumers’ detailed health reports were exposed in the Vitagene cloud-storage incident. At least 227 consumers’ raw genetic data were exposed in the same incident described by the FTC. (FTC, “Keep people’s sensitive DNA information private”)
In September 2024, the FTC sent refunds to 2,432 consumers in the 1Health.io genetic-data privacy matter. The refund payments totaled more than $49,500. The FTC said a 2020 policy change expanded the third parties with which already-collected health and genetic data could be shared. These are enforcement and refund figures reported by the FTC, not an estimate of all affected genetic-testing consumers. (FTC, “FTC Sends Refunds to Consumers Deceived by Genetic Testing Firm 1Health.io Over Data Deletion and Security Practices”)
The FTC and California imposed a $700,000 civil penalty on CRI Genetics in November 2023 over deceptive DNA-ancestry marketing practices. The action concerns alleged marketing and representation practices, so it should not be treated as a measurement of the number of consumers whose genetic data were exposed. (FTC and California, order against CRI Genetics)
Older oversight work also documented how limited a small test can be. From June 2009 through June 2010, the Government Accountability Office contacted 15 direct-to-consumer genetic-testing companies about reliability and privacy policies. GAO purchased 10 tests from each of 4 companies. Those figures describe the scope of that historical review; they do not establish present-day performance or privacy practices. (GAO, “Direct-To-Consumer Genetic Tests”)
Company disclosures about government requests
Ancestry’s transparency reports distinguish requests for customer DNA data from other law-enforcement requests. For July 1–December 31, 2023, Ancestry reported 0 valid requests for customer DNA data. It reported 2 valid non-DNA law-enforcement requests and provided data for 1. For January 1–June 30, 2024, it again reported 0 valid requests for customer DNA data, alongside 5 valid non-DNA requests and data provided for 4.
For July 1–December 31, 2024, Ancestry reported 0 valid DNA-data requests, 5 valid non-DNA requests, and data provided for 2. During calendar year 2025, it reported 0 valid requests for customer DNA data and 9 valid non-DNA law-enforcement requests, providing data for 7. Its 2025 report recorded 4 state and 5 federal U.S. requests, with 0 international requests.
| Ancestry reporting period | Valid DNA-data requests | Valid non-DNA requests | Data provided for non-DNA requests |
|---|---|---|---|
| Jul–Dec 2023 | 0 | 2 | 1 |
| Jan–Jun 2024 | 0 | 5 | 4 |
| Jul–Dec 2024 | 0 | 5 | 2 |
| Calendar year 2025 | 0 | 9 | 7 |
These figures are company disclosures for the named periods. They do not imply that every genealogy service had the same request volume or response policy. Ancestry’s EU Digital Services Act report recorded 34 complaints from EU-located individuals in 2024; that is a complaint count, not a count of government data requests. (Ancestry 2023 transparency report, Ancestry 2024 first-half transparency report, Ancestry 2024 law-enforcement report, Ancestry law-enforcement transparency report, Ancestry EU Digital Services Act report)
The scale and safeguards of forensic genetic genealogy
Forensic genetic genealogy is a distinct investigative use of genetic information. The U.S. Department of Justice interim policy says the analysis examines more than 500,000 single-nucleotide polymorphisms. The policy, effective November 1, 2019, contains 9 sections governing forensic genetic genealogy use. It also states that relevant account records may be preserved for 90 days while valid legal process is served. (U.S. Department of Justice, Interim Policy)
The National Missing and Unidentified Persons System (NamUs) reported 169 forensic genetic genealogy requests approved for processing in fiscal year 2024. Another 199 forensic genetic genealogy cases were in queue because of resource constraints. NamUs confirmed 15 cases with investigative leads generated using forensic genetic genealogy and secondary methods during that fiscal year.
For context within the same NamUs report, the program processed 295 traditional-DNA requests and helped law-enforcement agencies collect 170 family reference samples in FY 2024. Cumulatively through FY 2024, NamUs had resolved 61,492 missing, unidentified, and unclaimed-person cases. More than 11,300 identifications were attributed to DNA, forensic genetic genealogy, dental, fingerprint, anthropological, or radiograph comparisons. The cumulative attribution combines multiple methods and should not be interpreted as a forensic-genetic-genealogy-only total. (NamUs Fiscal Year 2024 Annual Report)
Together, these measurements show why genealogy privacy is broader than a single question about whether a company shares DNA. It includes what users learn about relatives and identity, how companies describe access and deletion, the scale of documented exposures, the handling of non-DNA records, and the safeguards applied when genetic genealogy enters a criminal investigation.