| Website | https://deepdna.ai |
| What | AI-powered raw DNA analysis |
| Data | GDPR-native. EU servers only. |
Reports of DNA sample collection at the US-Canada border raise a fundamental question: genetic data is not just identification. It reveals health predispositions, family relationships, ethnicity, and ancestry.
Unlike fingerprints, DNA can be re-analyzed as science advances. Data collected today will say more about you in 10 years than it does now. And unlike a password, you cannot change it.
The 23andMe Canadian settlement ($3.25M for ~affected users) highlights a structural problem: the breach happened via credential stuffing combined with the DNA Relatives feature. One compromised account exposed family members who never reused a password.
Genetic data is uniquely non-revocable. You cannot change your genome like a password. And your DNA reveals information about your siblings, parents, and future kids too.
Before you use any DNA analysis service, ask three questions:
1. Where are the servers physically located?
2. Under which legal jurisdiction does your data fall?
3. Can you export and permanently delete your raw data?
If the answers aren't clear, that's your answer.
#GeneticPrivacy #DataSovereignty #GDPR
[AI-generated content]
GDPR Article 44-49 restricts transfers of personal data outside the EU/EEA. But genetic data processed before those protections existed? It's already out there.
This is why data sovereignty matters for genomics more than almost any other category of personal data:
- Your DNA cannot be changed if compromised
- It identifies not just you, but your biological relatives
- It reveals predispositions you may not even know about yet
Here's a question most people never think to ask: in which country is your DNA data stored right now?
When you spit into a tube and send it off, your raw genetic sequence — the most uniquely identifying data you will ever produce — lands on a server somewhere. Often in a jurisdiction where your privacy rights are weaker than where you live. 🧵