Ancestry collects DNA samples submitted through AncestryDNA and analyzes them to generate ethnicity estimates and genetic relative matches. Users who opt in to the research program consent to their DNA data and associated health or trait information being used for research and shared with third-party research partners.
This analysis describes what Ancestry's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a two-tier consent structure for DNA data: baseline collection required for service delivery and an optional research consent layer governing use and external sharing of genetic and health information. Compliance review should confirm the research consent mechanism satisfies requirements for explicit, specific, and withdrawable consent under applicable genetic privacy and data protection frameworks.
Interpretive note: The precise scope of the research consent mechanism and whether it satisfies GDPR Article 9 explicit consent standards is not fully determinable from the policy text alone; the AncestryDNA Terms and Conditions govern the specific consent flow.
The updated Privacy Statement no longer displays a dedicated 'Do Not Sell or Share My Personal Information' link in the footer, which was previously accessible to California residents under CCPA requirements. This link allowed users to exercise data-sharing opt-out rights. The footer now lists 'Consumer Health Privacy' as a separate item but does not explicitly direct users to their CCPA controls. California residents may need to locate their opt-out rights through alternative navigation paths on the Ancestry site.
View change record →The updated privacy policy removes the 'Do Not Sell or Share My Personal Information' link from the footer navigation. This link previously provided direct access to Ancestry's data-sharing opt-out mechanism, which is a required disclosure under California's CCPA. While the removal does not eliminate the opt-out right itself, it may make the opt-out control less easily discoverable from the privacy policy page. Affected users may need to locate the opt-out mechanism through alternate navigation or search methods.
View change record →The updated Privacy Statement clarifies what uses of Ancestry services are permitted and prohibited, establishes that photo face-grouping in your gallery requires your express consent, and introduces SMS messaging as a communication channel for future opt-in communications. The statement now covers Ancestry, AncestryDNA, and Related Brands under a unified framework while noting that other services operated by the company use separate privacy statements. The removal of 'uploaded DNA data' from the account creation section reflects a narrowing of that specific provision's scope, though genetic information processing remains described elsewhere in the policy. You can review the full updated statement to understand how your personal information will be processed and manage your communication preferences when SMS opt-ins become available.
View change record →Removed specific mention of saliva sample collection and destruction rights; expanded to include health conditions and physical traits; shifted from 'choose to participate' to 'opted in to our research program'.
View full change record →Under this provision, submitting a DNA sample to AncestryDNA results in collection and retention of genetic data for service purposes; users who separately opt in to research participation authorize Ancestry to use and share that genetic and health information with third-party research partners. Users can withdraw research consent through AncestryDNA account settings without affecting their access to genealogy matching features.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"When you use AncestryDNA, we collect the DNA you provide and the results of our analysis of your DNA. We may also collect other information about you in connection with the AncestryDNA service, such as information about health conditions or physical traits... If you have opted in to our research program, we may use your DNA data and any health and trait information you've provided for research purposes, including sharing with third-party research partners.Excerpt from Ancestry's Privacy Statement
REGULATORY LANDSCAPE: Collection and research use of genetic data implicates GDPR Article 9 (special category data requiring explicit consent), the California Genetic Information Privacy Act, and potentially state-level genetic privacy statutes in Illinois, Maryland, and …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes a two-tier consent structure for DNA data: baseline collection required for service delivery and an optional research consent layer governing use and external sharing of genetic and health information. Compliance review should confirm the research consent mechanism satisfies requirements for explicit, specific, and withdrawable consent under applicable genetic privacy and data protection frameworks.
Under this provision, submitting a DNA sample to AncestryDNA results in collection and retention of genetic data for service purposes; users who separately opt in to research participation authorize Ancestry to use and share that genetic and health information with third-party research partners. Users can withdraw research consent through AncestryDNA account settings without affecting their access to genealogy matching features.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ancestry.