Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The agreement states that Ancestry requires valid legal process for any government or law enforcement access to user data, does not permit law enforcement to use the Services for investigative purposes, and commits to providing users advance notice of compelled disclosures where legally permitted.
This analysis describes what Ancestry's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that law enforcement access to DNA Data and Genetic Information requires a valid legal process rather than voluntary disclosure, and explicitly prohibits investigative use of the platform by law enforcement, which is a materially specific commitment given the sensitivity of genetic data and its forensic utility.
The updated Privacy Statement no longer displays a dedicated 'Do Not Sell or Share My Personal Information' link in the footer, which was previously accessible to California residents under CCPA requirements. This link allowed users to exercise data-sharing opt-out rights. The footer now lists 'Consumer Health Privacy' as a separate item but does not explicitly direct users to their CCPA controls. California residents may need to locate their opt-out rights through alternative navigation paths on the Ancestry site.
View change record →The updated privacy policy removes the 'Do Not Sell or Share My Personal Information' link from the footer navigation. This link previously provided direct access to Ancestry's data-sharing opt-out mechanism, which is a required disclosure under California's CCPA. While the removal does not eliminate the opt-out right itself, it may make the opt-out control less easily discoverable from the privacy policy page. Affected users may need to locate the opt-out mechanism through alternate navigation or search methods.
View change record →The updated Privacy Statement clarifies what uses of Ancestry services are permitted and prohibited, establishes that photo face-grouping in your gallery requires your express consent, and introduces SMS messaging as a communication channel for future opt-in communications. The statement now covers Ancestry, AncestryDNA, and Related Brands under a unified framework while noting that other services operated by the company use separate privacy statements. The removal of 'uploaded DNA data' from the account creation section reflects a narrowing of that specific provision's scope, though genetic information processing remains described elsewhere in the policy. You can review the full updated statement to understand how your personal information will be processed and manage your communication preferences when SMS opt-ins become available.
View change record →Under this clause, Ancestry will not voluntarily share user data including DNA Data and Genetic Information with law enforcement agencies and requires a court order, subpoena, or warrant before complying with government data requests, with a stated commitment to advance user notice unless legally prohibited.
Cross-platform context
See how other platforms handle Law Enforcement Data Access and Legal Process Requirement and similar clauses.
Compare across platforms →Monitoring
Ancestry has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Ancestry does not voluntarily provide access to user data to governmental or judicial bodies or to law enforcement agencies. To provide our users with the greatest protection under the law, we require all government agencies seeking access to Ancestry customers' data to follow a valid legal process as detailed in Ancestry's Guide for Law Enforcement. We do not allow law enforcement or anyone working on their behalf to use the Services to investigate crimes or to identify human remains. If we are compelled to disclose your Personal Information to law enforcement, we will do our best to provide you with advance notice, unless we are prohibited under the law from doing so.Excerpt from Ancestry's Privacy Statement
REGULATORY LANDSCAPE: This provision engages the Fourth Amendment, the Stored Communications Act (18 U.S.C. Chapter 121), the Electronic Communications Privacy Act, and applicable state wiretapping and privacy statutes. The FTC has jurisdiction over material representations about law enforcement data sharing practices. GDPR Article 23 governs lawful restrictions on data subject rights for law enforcement purposes for EU users. GOVERNANCE EXPOSURE: Medium. The stated policy of requiring valid legal process and providing advance notice where legally permitted reflects a defined operational posture. However, the effectiveness of this commitment depends on the scope of legal processes Ancestry deems sufficient and the jurisdictions in which national security letters or similar non-disclosure orders may preclude advance notice. JURISDICTION FLAGS: U.S. federal law enforcement requests including NSLs may preclude advance notice regardless of Ancestry's policy commitment. EU users benefit from GDPR Article 23 limitations on Member State derogations. The prohibition on law enforcement use of the Services for investigations may face challenges in jurisdictions where platform use restrictions conflict with law enforcement investigative authority. CONTRACT AND VENDOR IMPLICATIONS: Organizations that have integrated Ancestry data or APIs into their platforms should assess whether this law enforcement policy is consistent with their own legal obligations and data processing agreements. The prohibition on investigative platform use by law enforcement should be reflected in any enterprise agreements. COMPLIANCE CONSIDERATIONS: Legal teams should review the Ancestry Guide for Law Enforcement referenced in this provision to assess what types of legal process Ancestry deems sufficient. The Transparency Report referenced in Section 7 should be reviewed annually to assess the volume and nature of law enforcement requests. For EU users, legal teams should assess whether this provision satisfies GDPR Article 23 requirements for lawful restrictions.
This provision establishes that law enforcement access to DNA Data and Genetic Information requires a valid legal process rather than voluntary disclosure, and explicitly prohibits investigative use of the platform by law enforcement, which is a materially specific commitment given the sensitivity of genetic data and its forensic utility.
Under this clause, Ancestry will not voluntarily share user data including DNA Data and Genetic Information with law enforcement agencies and requires a court order, subpoena, or warrant before complying with government data requests, with a stated commitment to advance user notice unless legally prohibited.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ancestry.