Ancestry · Ancestry Privacy Statement · View original document ↗

Aggregate Research Data Persistence After Deletion

High severity Medium confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Ancestry recorded 3 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Ancestry Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Even if you delete your DNA data or close your Ancestry account, any contributions your genetic data has already made to aggregate research datasets will not be removed.

This analysis describes what Ancestry's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This carve-out means that deletion of your DNA data is not complete erasure — your genetic information may persist in research databases in aggregated form. This has particular significance for users who later change their mind about research participation.

Interpretive note: Whether the aggregate data retained meets the legal threshold for anonymization or de-identification under GDPR and applicable US law is not determinable from the policy text alone and depends on Ancestry's technical implementation.

Recent Activity

This document changed recently

Medium May 1, 2026

California residents lose direct navigation to the CCPA-mandated 'Do Not Sell or Share My Personal Information' disclosure page from Ancestry's privacy footer. While California law requires the compa…

Consumer impact (what this means for users)

Requesting deletion of your DNA removes your individual results and raw data, but data already incorporated into research aggregates persists. This limitation means consumers should carefully consider their research consent decision before agreeing, as it cannot be fully reversed.

How other platforms handle this

Mistral AI Medium

These Additional Terms apply only to the Mistral AI Products available on the Mistral AI Infrastructure and provided to customers located in the European Union that are subject to the EU Data Act (as defined below). These Additional Terms shall take effect on 12 September 2025 (the "Effective Date")...

WhatsApp Medium

Managing And Deleting Your Information. You have the right to access, correct, or delete your information in certain circumstances. We store information until it is no longer necessary to provide our Services or until your account is deleted, whichever comes first. You can delete your WhatsApp accou...

Perplexity AI Medium

Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, or delete your personal information, the right to data portability, and the right to opt out of certain data processing activities. To exercise these rights, please co...

See all platforms with this clause type →

Monitoring

Ancestry has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Please note that if you request deletion of your DNA data or close your account, we may retain de-identified or aggregated data that does not identify you and that has been incorporated into research or product development. Deletion of your DNA data means we will delete your DNA results, ethnicity estimate, and raw DNA data file from our systems, but data that has already been incorporated into research may not be fully removable.

— Excerpt from Ancestry's Ancestry Privacy Statement

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: This provision engages GDPR Article 17 (right to erasure), which permits retention of de-identified aggregate data but requires that data be genuinely de-identified to a standard where re-identification is not reasonably possible. The European Data Protection Board has issued guidance on anonymization standards that applies here. For California residents, CPRA Section 1798.105 governs deletion rights and includes exceptions for certain research uses. (2) GOVERNANCE EXPOSURE: High. The assertion that aggregate research data persists after deletion is legally permissible under both GDPR and CCPA only if the data is genuinely anonymous or de-identified. Given the sensitivity of genetic data and the known risks of genetic re-identification from aggregate datasets, this carve-out warrants careful technical and legal scrutiny. The FTC has taken enforcement positions on claims of de-identification that prove inadequate in practice. (3) JURISDICTION FLAGS: EU/EEA users have the strongest grounds to challenge this provision if the aggregate data is not demonstrably anonymous under GDPR standards. California residents may have rights under CPRA to contest research exceptions. Illinois and other states with genetic privacy laws may impose additional constraints on retention of aggregate genetic data post-deletion request. (4) CONTRACT AND VENDOR IMPLICATIONS: If research partner contracts permit partners to retain aggregate data after the user's deletion request, those agreements should be audited to ensure the data shared meets applicable anonymization standards and that partner data processing is consistent with user rights assertions in the policy. (5) COMPLIANCE CONSIDERATIONS: Legal and technical teams should document and verify the anonymization methodology applied to research aggregate data to ensure it meets GDPR and applicable US legal standards. A data flow map covering the research data lifecycle, from individual consent through aggregation and post-deletion persistence, is advisable. Consent language presented to users at the point of research opt-in should clearly disclose this persistence limitation.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC oversees whether de-identification claims are substantiated in practice and whether retention of aggregate data after deletion constitutes an unfair or deceptive practice
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
GDPR
European Union
HIPAA
United States Federal
Indiana Consumer Data Protection Act
US-IN

Provision details

Document information
Document
Ancestry Privacy Statement
Entity
Ancestry
Document last updated
May 5, 2026
Tracking information
First tracked
May 10, 2026
Last verified
May 10, 2026
Record ID
CA-P-009742
Document ID
CA-D-00224
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
6404a1de46dca19f4191a94a541520c718b42d6494fed8f445da90855dfa3641
Analysis generated
May 10, 2026 22:05 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Ancestry
Document: Ancestry Privacy Statement
Record ID: CA-P-009742
Captured: 2026-05-10 22:05:48 UTC
SHA-256: 6404a1de46dca19f…
URL: https://conductatlas.com/platform/ancestry/ancestry-privacy-statement/aggregate-research-data-persistence-after-deletion/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Ancestry's Aggregate Research Data Persistence After Deletion clause do?

This carve-out means that deletion of your DNA data is not complete erasure — your genetic information may persist in research databases in aggregated form. This has particular significance for users who later change their mind about research participation.

How does this clause affect you?

Requesting deletion of your DNA removes your individual results and raw data, but data already incorporated into research aggregates persists. This limitation means consumers should carefully consider their research consent decision before agreeing, as it cannot be fully reversed.

Is ConductAtlas affiliated with Ancestry?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ancestry.