Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The agreement states that physical saliva samples and extracted DNA are classified as Biological Samples and are excluded from the definition of Personal Information under this Privacy Statement, meaning GDPR and similar statutory personal data rights do not apply to them under Ancestry's framework.
This analysis describes what Ancestry's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision determines that the physical and extracted biological material submitted by users falls outside the scope of personal data protections established in this Privacy Statement, which may require evaluation against GDPR Recital 34 and Article 9 (special categories including genetic data), as well as Washington's My Health MY Data Act and state genetic privacy statutes that may define biological samples as protected consumer health or genetic data independently of how Ancestry classifies them.
Interpretive note: Whether the Biological Samples exclusion is consistent with GDPR Article 9 and applicable U.S. state genetic privacy statutes depends on regulatory interpretation in each jurisdiction and has not been definitively resolved by published enforcement guidance.
The updated Privacy Statement no longer displays a dedicated 'Do Not Sell or Share My Personal Information' link in the footer, which was previously accessible to California residents under CCPA requirements. This link allowed users to exercise data-sharing opt-out rights. The footer now lists 'Consumer Health Privacy' as a separate item but does not explicitly direct users to their CCPA controls. California residents may need to locate their opt-out rights through alternative navigation paths on the Ancestry site.
View change record →The updated privacy policy removes the 'Do Not Sell or Share My Personal Information' link from the footer navigation. This link previously provided direct access to Ancestry's data-sharing opt-out mechanism, which is a required disclosure under California's CCPA. While the removal does not eliminate the opt-out right itself, it may make the opt-out control less easily discoverable from the privacy policy page. Affected users may need to locate the opt-out mechanism through alternate navigation or search methods.
View change record →The updated Privacy Statement clarifies what uses of Ancestry services are permitted and prohibited, establishes that photo face-grouping in your gallery requires your express consent, and introduces SMS messaging as a communication channel for future opt-in communications. The statement now covers Ancestry, AncestryDNA, and Related Brands under a unified framework while noting that other services operated by the company use separate privacy statements. The removal of 'uploaded DNA data' from the account creation section reflects a narrowing of that specific provision's scope, though genetic information processing remains described elsewhere in the policy. You can review the full updated statement to understand how your personal information will be processed and manage your communication preferences when SMS opt-ins become available.
View change record →Under this clause, users seeking to invoke data rights such as access, correction, or deletion under GDPR or state privacy laws must contact Member Services specifically to request destruction of Biological Samples, as the standard online deletion tools apply to Personal Information and Genetic Information rather than to Biological Samples as defined in this document.
Cross-platform context
See how other platforms handle Biological Samples Exclusion from Personal Information and similar clauses.
Compare across platforms →Monitoring
Ancestry has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Your Sample and Extracted DNA. Neither the sample you provide using an AncestryDNA test kit nor the DNA extracted from your sample (together referred to as 'Biological Samples') are Personal Information under this Privacy Statement. You can consent to have your Biological Samples stored in our biobank for future testing at your option. Future testing and research may be done if you agree to our Informed Consent to Research or if you consent to other tests of your Biological Samples. If you do not consent to the storage of your Biological Samples, we will destroy them.Excerpt from Ancestry's Privacy Statement
REGULATORY LANDSCAPE: This provision requires evaluation under GDPR Article 9, which defines genetic data derived from biological samples as a special category of personal data subject to heightened protections. The classification of physical samples as non-Personal Information may not be consistent with how EU and UK data protection authorities interpret the scope of genetic data protections. Washington's My Health MY Data Act and Illinois GIPA may independently classify biological samples as consumer health or genetic data regardless of Ancestry's internal classification. GOVERNANCE EXPOSURE: High. The assertion that Biological Samples are not Personal Information under this Privacy Statement creates potential tension with GDPR Article 9 and analogous state genetic privacy frameworks. If regulators determine that biological samples or extracted DNA fall within the definition of personal or genetic data, the current classification may be assessed as inconsistent with applicable law. JURISDICTION FLAGS: EU and UK jurisdictions present the highest exposure given GDPR Article 9's broad definition of genetic data. Washington, Illinois, Texas, and California create additional exposure through state-specific genetic and consumer health data laws. Users in these jurisdictions may have rights that exceed what Ancestry's current classification framework provides. CONTRACT AND VENDOR IMPLICATIONS: Laboratory partners who receive and retain Biological Samples under CLIA regulations operate under a separate retention obligation that Ancestry cannot override upon user request, as stated in Section 10. Procurement teams engaging with Ancestry as a vendor should assess whether this arrangement creates a data management gap in their own compliance frameworks. COMPLIANCE CONSIDERATIONS: Legal teams should conduct a jurisdiction-by-jurisdiction assessment of whether the Biological Samples exclusion is consistent with applicable definitions of genetic data or consumer health data in each market where Ancestry operates. The biobank consent mechanism should be audited to confirm it meets GDPR Article 9(2) and analogous state law requirements for processing special category data.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision determines that the physical and extracted biological material submitted by users falls outside the scope of personal data protections established in this Privacy Statement, which may require evaluation against GDPR Recital 34 and Article 9 (special categories including genetic data), as well as Washington's My Health MY Data Act and state genetic privacy statutes that may define biological …
Under this clause, users seeking to invoke data rights such as access, correction, or deletion under GDPR or state privacy laws must contact Member Services specifically to request destruction of Biological Samples, as the standard online deletion tools apply to Personal Information and Genetic Information rather than to Biological Samples as defined in this document.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ancestry.