Support 100 years of independent journalism.

  1. Science & Tech
12 May 2018updated 01 Jul 2021 11:53am

The new battle over genetic privacy: How DNA sites became a police weapon

Police are using sites such as to revive historic crime investigations.

By Sophie McBain

In 1981, a woman was found murdered in a roadside ditch in Ohio. The police believed she had been killed just hours earlier, but it took them 37 years to discover her name. On 12 April 2018, she was formally identified as 21-year-old Marcia King. The breakthrough was made thanks to the DNA Doe Project, a non-profit organisation founded by two volunteer forensic genealogists, Colleen Fitzpatrick and Margaret Press.

The DNA retained from King’s autopsy had degraded, but they were able to extract enough information to create a profile similar to those generated by commercial testing sites such as 23andme or They uploaded this information to, a database that allows users to share their DNA profiles and search for genealogical matches, where they identified one of King’s living relatives.

GEDMatch made the news again in late April, when police revealed they had identified a new suspect in the hunt for the Golden State Killer, who murdered at least 12 people and raped at least 50 in California between 1974 and 1986. Investigators used DNA extracted at the crime scenes to identify around a dozen of the killer’s distant relatives on GEDMatch. This led them eventually to Joseph James DeAngelo, a 72-year-old former police officer. He was arrested on 24 April, after police surreptitiously tested the DNA on an item he had discarded and found it matched the killer.

These cases reveal the dramatic potential for commercial DNA testing sites to revive dormant crime or missing persons investigations, but they also raise profound questions over genetic privacy. “There’s no doubt there are going to be many more cases like this. The door is open, that’s it,” genealogist Colleen Fitzpatrick told me. and 23andme say that they won’t grant governments access to their customers’ information without a court order. But this still gives the police considerable access to genetic information that is otherwise unavailable.

Sign up for The New Statesman’s newsletters Tick the boxes of the newsletters you would like to receive. Quick and essential guide to domestic and global politics from the New Statesman's politics team. A weekly newsletter helping you fit together the pieces of the global economic slowdown. The New Statesman’s global affairs newsletter, every Monday and Friday. The best of the New Statesman, delivered to your inbox every weekday morning. The New Statesman’s weekly environment email on the politics, business and culture of the climate and nature crises - in your inbox every Thursday. Our weekly culture newsletter – from books and art to pop culture and memes – sent every Friday. A weekly round-up of some of the best articles featured in the most recent issue of the New Statesman, sent each Saturday. A newsletter showcasing the finest writing from the ideas section and the NS archive, covering political ideas, philosophy, criticism and intellectual history - sent every Wednesday. Sign up to receive information regarding NS events, subscription offers & product updates.

In 2014, US detectives investigating a fatal stabbing subpoenaed to access the personal information of a user whose DNA was a close match to that found at the crime scene. Suspicion for the murder quickly fell on the user’s son, Michael Usry, a film-maker who had worked on violent horror movies. Usry submitted to DNA testing and spent a month wondering if he might suddenly be arrested, until the results proved his innocence.

Content from our partners
How to create a responsible form of “buy now, pay later”
“Unions are helping improve conditions for drivers like me”
Transport is the core of levelling up

It is no coincidence that the Golden State detectives and the DNA Doe Project both used GEDMatch. The site has just under a million users and operates differently from larger databases. In place of a long, legalistic privacy policy it states that “DNA and genealogical research, by its very nature, requires the sharing of information. Because of that, users participating in this site should expect that their information will be shared with other users.”

It warns of the dangers of identity theft and credit fraud and suggests that anyone who requires “absolute privacy and security” should not use the site.

Although British detectives are not thought to have ever used GEDMatch, one lawyer told me that since the information is already publicly available, there is no obvious legal barrier to them doing so in the future.

GEDMatch now faces significantly greater scrutiny. Initiatives such as the DNA Doe Project know that if stricter regulation is imposed, or if users begin withdrawing information, their cold-case work will become more difficult.

For now, however, the project welcomes the renewed public debate over genetic privacy. “The best outcome here is that people become aware of what can happen to their data on the internet, whether it’s their DNA or pictures of their grandchildren,” said genealogist Margaret Press.

The media attention has not hurt GEDMatch. Its co-founder, Curtis Rogers, told me that although user figures fell when detectives first revealed they had accessed the site (it was news to him, too), the numbers soon resumed their steady rise.

Topics in this article:

This article appears in the 10 May 2018 issue of the New Statesman, Israel vs Iran