Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The agreement states that users may designate a Legacy Contact in Account Settings who, upon verification of a qualifying event such as death, will receive full account access and assume ownership of the account including all Personal Information contained within it.
This analysis describes what Ancestry's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a mechanism for transferring full account ownership including DNA Data and Genetic Information to a third party upon the account holder's death or incapacitation, which creates considerations for posthumous data rights, estate planning, and the scope of consent applicable to transferred genetic data under GDPR and state privacy frameworks.
The updated Privacy Statement no longer displays a dedicated 'Do Not Sell or Share My Personal Information' link in the footer, which was previously accessible to California residents under CCPA requirements. This link allowed users to exercise data-sharing opt-out rights. The footer now lists 'Consumer Health Privacy' as a separate item but does not explicitly direct users to their CCPA controls. California residents may need to locate their opt-out rights through alternative navigation paths on the Ancestry site.
View change record →The updated privacy policy removes the 'Do Not Sell or Share My Personal Information' link from the footer navigation. This link previously provided direct access to Ancestry's data-sharing opt-out mechanism, which is a required disclosure under California's CCPA. While the removal does not eliminate the opt-out right itself, it may make the opt-out control less easily discoverable from the privacy policy page. Affected users may need to locate the opt-out mechanism through alternate navigation or search methods.
View change record →The updated Privacy Statement clarifies what uses of Ancestry services are permitted and prohibited, establishes that photo face-grouping in your gallery requires your express consent, and introduces SMS messaging as a communication channel for future opt-in communications. The statement now covers Ancestry, AncestryDNA, and Related Brands under a unified framework while noting that other services operated by the company use separate privacy statements. The removal of 'uploaded DNA data' from the account creation section reflects a narrowing of that specific provision's scope, though genetic information processing remains described elsewhere in the policy. You can review the full updated statement to understand how your personal information will be processed and manage your communication preferences when SMS opt-ins become available.
View change record →Under this clause, a designated Legacy Contact can assume full ownership of a user's Ancestry account including all Personal Information, DNA Data, and Genetic Information upon verification of a qualifying event, and the terms of the Privacy Statement continue to apply to the transferred account.
Cross-platform context
See how other platforms handle Legacy Contact and Account Transfer and similar clauses.
Compare across platforms →Monitoring
Ancestry has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"To help preserve your family history, you can designate a 'Legacy Contact' in your Account Settings to receive access to your account if you can't use it anymore. If a transfer request is made, we will verify the Legacy Contact's identity and require proof of the qualifying event (such as a death certificate) before granting access. Upon verification, we will share your account access and Personal Information with your designated contact. They will then assume ownership of the account.Excerpt from Ancestry's Privacy Statement
REGULATORY LANDSCAPE: This provision engages state digital estate laws and the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA), which governs fiduciary access to digital accounts. GDPR does not apply to deceased persons, but the transfer of account ownership to a living Legacy Contact creates a new processing relationship subject to applicable privacy law. State genetic privacy statutes may impose requirements on the transfer of genetic data to third parties. GOVERNANCE EXPOSURE: Low to Medium. The Legacy Contact mechanism is operationally defined and requires identity verification and proof of qualifying event. The primary exposure relates to whether the consent given by the original account holder extends to the Legacy Contact's subsequent use of the account, particularly for DNA Data and Genetic Information. JURISDICTION FLAGS: RUFADAA has been adopted in most U.S. states but with variations. EU users should note that GDPR rights do not extend to deceased persons, but the transfer to a living Legacy Contact may require evaluation under applicable national law. California's Proposition 24 and digital estate provisions may create additional requirements. CONTRACT AND VENDOR IMPLICATIONS: This provision does not create direct vendor implications but may be relevant to estate planning professionals and institutional customers who advise on digital asset management. COMPLIANCE CONSIDERATIONS: Legal teams should assess whether the Legacy Contact framework complies with RUFADAA requirements in all U.S. states where Ancestry operates and whether adequate disclosure of the genetic data transfer to Legacy Contacts is made at the point of designation.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes a mechanism for transferring full account ownership including DNA Data and Genetic Information to a third party upon the account holder's death or incapacitation, which creates considerations for posthumous data rights, estate planning, and the scope of consent applicable to transferred genetic data under GDPR and state privacy frameworks.
Under this clause, a designated Legacy Contact can assume full ownership of a user's Ancestry account including all Personal Information, DNA Data, and Genetic Information upon verification of a qualifying event, and the terms of the Privacy Statement continue to apply to the transferred account.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ancestry.