DNA, Genealogy, and Law Enforcement: All the Facts
Total Page:16
File Type:pdf, Size:1020Kb
DNA, Genealogy, and Law Enforcement: All the Facts Blaine T. Bettinger, Ph.D., J.D. [email protected] / www.DNA-Central.com NOTE: Law enforcement use of genetic genealogy is a rapidly changing area, and thus everything in this syllabus is subject to change at any point. The content is meant to be accurate as of December 2019. TERMINOLOGY: There are currently two terms used for law enforcement use of genetic genealogy: (1) Investigative Genetic Genealogy (IGG); and (2) Forensic [Genetic] Genealogy (FG or FGG). The preferred term among the people doing this the longest, and among genealogists familiar with the long-standing and very different field of forensic genealogy (genealogical research performed by a forensic genealogist to assist in legal matters, typically heir identification), is Investigative Genetic Genealogy (IGG). “Forensic Genetic Genealogy” or even worse “Forensic Genealogy” are misleading terms for law enforcement use of genealogy. What is Law Enforcement use of Genetic Genealogy? For purposes of this discussion, law enforcement use of genetic genealogy comprises two approaches: (1) using DNA obtained from a crime scene to query one or more genetic genealogy databases to identify genetic relatives, leading to identification of the human source of the crime scene DNA sample through genealogical research; and (2) using DNA obtained from unidentified remains to query one or more genetic genealogy databases to identify genetic relatives, ultimately leading to identification of the remains through genealogical research. What Methodology Does Law Enforcement Use? The identification methodology utilized by law enforcement to identify the source of a DNA sample is the same methodology utilized for many years by adoptees to identify biological family. The trees of close genetic matches identified from querying the genetic genealogy database(s) are reviewed and built out (potentially both backward to identify ancestors and forward to identify living people) in order to lead to an individual (i.e., that is a nexus of multiple trees, that is a known missing person or possible suspect, etc.). However, law enforcement typically has access to additional databases that can significantly facilitate the genealogical research of living and recently deceased individuals that is often much more difficult for genealogists (which helps minimize the impact of law enforcement on families identified as being closely related to the DNA source). How Does Law Enforcement Access a Genetic Genealogy Database? There are two main ways for law enforcement to query a genetic genealogy database. One, the genetic genealogy company or database may specifically allow law enforcement to submit or upload a SNP profile to query some or all of the database. Currently, only Family Tree DNA and GEDmatch have procedures in place to allow law enforcement to access some or all of their respective databases. This is the easiest and fastest method of access, and the only method recommended by the Department of Justice (discussed below). Two, law enforcement may submit a warrant or subpoena to compel the genetic genealogy company or database to allow a query of a law enforcement SNP profile against some or all of the database. To what extent a warrant or subpoena can be used, particularly the scope and boundaries for such a warrant or subpoena, is currently unknown/untested. Technically there is a third way for law enforcement to query a genetic genealogy database, namely unauthorized uploading of a SNP profile to a genetic genealogy database that allows uploads (such as MyHeritage or Family Tree DNA), or dosing a saliva sample with DNA for normal processing by the genetic genealogy company (such as 23andMe and Ancestry). Although there is no verified documentation, anecdotally it is widely believed that at least the upload approach has been utilized. The Big Four Genetic Genealogy Companies and Law Enforcement There are some very big differences in how the big four genetic genealogy companies (23andMe, AncestryDNA, Family Tree DNA, and MyHeritage) approach law enforcement use of their database. Each company is discussed individually below. i. 23andMe (www.23andMe.com) Quick Summary: 23andMe does not allow law enforcement to either upload SNP profiles to the 23andMe database or provide a sample for SNP analysis. 23andMe will of course respond to legally valid requests such as a search warrant or written court order, but will resist such requests to the extent it can do so. Detailed Information: In a customer care article entitled “How 23andMe Responds To Law Enforcement Requests For Customer Information” (https://customercare.23andme.com/hc/en-us/articles/212271048- How-23andMe-responds-to-law-enforcement-requests-for-customer-information), 23andMe acknowledges that it can legally be forced to provide law enforcement access to the database: “We work very hard to protect your information from unauthorized access from law enforcement. However, under certain circumstances, your information may be subject to disclosure pursuant to a judicial or other government subpoena, warrant or order, or in coordination with regulatory authorities. If such a situation arises, we have to comply with valid governmental requests and we will notify the affected individual(s) unless the legal request prevents us from doing so.” However, 23andMe also indicates that it will fight such requests. The “23andMe Guide for Law Enforcement” (https://www.23andme.com/law-enforcement-guide/) states that: “23andMe chooses to use all practical legal and administrative resources to resist requests from law enforcement, and we do not share customer data with any public databases, or with entities that may increase the risk of law enforcement access.” Additionally, in a November 2019 New York Times article, 23andMe spokesman Christine Pai said in an emailed statement: “We never share customer data with law enforcement unless we receive a legally valid request such as a search warrant or written court order. Upon receipt of an inquiry from law enforcement, we use all practical legal measures to challenge such requests in order to protect our customers’ privacy.” “Your DNA Profile is Private? A Florida Judge Just Said Otherwise” (https://www.nytimes.com/2019/11/05/business/dna-database-search-warrant.html). 23andMe also maintains a Transparency Report (https://www.23andme.com/transparency-report/) which provides details on all law enforcement requests for user information that they receive. As of the date of this syllabus, 23andMe had received a total of seven (7) requests from the U.S. government for data that affected ten (10) user accounts. 23andMe did not provide data in response to any of those requests. ii. AncestryDNA (www.ancestry.com) Quick Summary: AncestryDNA does not allow law enforcement to either upload SNP profiles to the AncestryDNA database or provide a sample for SNP analysis. AncestryDNA will of course respond to legally valid requests such as a search warrant or written court order, but will resist such requests to the extent it can do so. Detailed Information: AncestryDNA provides an “Ancestry Guide for Law Enforcement” (https://www.ancestry.com/cs/legal/lawenforcement) that describes the company’s approach to law enforcement use of the database. The company acknowledges that it can legally be forced to provide law enforcement access to the database: “Contents of communications and any data relating to the DNA of an Ancestry user will be released only pursuant to a valid search warrant from a government agency with proper jurisdiction.” However, AncestryDNA indicates that it will resist such requests. The “Ancestry Guide for Law Enforcement” states that: “Ancestry does not voluntarily cooperate with law enforcement. To provide our Users with the greatest protection under the law, we require all government agencies seeking access to Ancestry customers’ data to follow valid legal process and do not allow law enforcement to use Ancestry’s services to investigate crimes or to identify human remains.” (emphasis in original). “Respect for the privacy and security of our users’ account data drives our approach to complying with legal requests for information. When we receive a request our team reviews it to make sure it satisfies legal requirements and our policies. If we believe a request is overly broad, we will try to narrow it to the extent legally permitted.” AncestryDNA also provides a yearly “Transparency Report” (https://www.ancestry.com/cs/transparency). The 2019 report is not yet available. However, according to the 2018 report, the company received ten (10) valid law enforcement requests for user information in 2018, and provided information in response to 7 of those 10 requests. All of those requests involved credit card misuse, fraud, and identity theft, and thus AncestryDNA has never (as of the 2018 report) received a valid request for information related to genetic information of any Ancestry member, and has never disclosed such information to law enforcement (again as of the 2018 report). iii. Family Tree DNA (www.familytreedna.com) Quick Summary: On a reviewed case-by-case basis, Family Tree DNA grants law enforcement and third parties working with law enforcement permission to upload a SNP profile for querying against the opt-in portion of the FTDNA database. Permission is only granted after the required documentation is submitted, reviewed, and approved. Family Tree DNA offers sample processing to law enforcement, and offers research services to law enforcement via its new Investigative Genetic Genealogy Unit. Detailed Information: Family Tree DNA maintains a “FamilyTreeDNA Law Enforcement Guide” (https://www.familytreedna.com/legal/law-enforcement-guide) which describes the process by which law enforcement may request access to the Family Tree DNA database. Per the Guide, every law enforcement use of the Family Tree DNA database must be specifically requested by law enforcement and approved by FTDNA: “As stated in Section 6.B.xii of our Terms of Service, you agree to not use the Services for any forensic examinations, criminal investigations, and/or similar purposes (“Law Enforcement Purposes”) without written permission from FamilyTreeDNA.