Buzz
If you're diving into your family history through GEDmatch—formerly a lesser-known genealogy site—you should be aware that it has been acquired by a forensic genomics company, Verogen. Fortunately, the privacy policy has stayed unchanged.
GEDmatch shot to fame and sparked controversy after investigators utilized it to track down relatives of the Golden State Killer last year. Before that, it was simply a platform where users could upload DNA data from services like 23andMe or Ancestry to discover possible relatives.
Following that breakthrough, two genetic databases have become more frequently used by law enforcement. FamilyTreeDNA shares data with the FBI unless users opt out, while GEDmatch initially had no such policy but later required users to opt in to allow law enforcement access. In contrast, services like 23andMe and Ancestry don’t permit these searches.
If you're a GEDmatch user, you'll need to decide whether you're comfortable with your data being stored in their database. Sharing your data with law enforcement remains an opt-in choice, and your previous selection still stands. If you'd prefer to not engage with the company any longer, you can reject the updated terms and delete your data.
Additionally, some users have reported that if your email address is tied to an EU country, you'll be prompted with an extra form to confirm that the person whose DNA you're uploading has granted you permission to do so.
Has privacy truly been affected? At this point, not significantly. Verogen assures users that they will continue to uphold privacy protections and may even improve the user experience with new tools. Genealogist Leah Larkin shared with Buzzfeed that the site's original creators were likely weary of the constant scrutiny surrounding their data privacy issues, which seems plausible.
Recently, a Florida search warrant compelled GEDmatch to allow a search of its entire database. This is troubling. However, Verogen may have the resources to challenge legal efforts to access the data, which could be beneficial. They issued a statement: 'We are steadfast in our commitment to protecting users’ privacy and will fight any future attempts to access data of those who have not opted in.'
