A is the most durable a person carries and the only one they share with relatives.
Those two properties make it unlike any other personal data and unsuited to the frameworks written for the rest.
A password can be changed and a cannot.
A decision to publish is therefore permanent and is taken on behalf of siblings, children and people not yet born.
Consumer testing services made this concrete faster than any regulation anticipated.
Police forces have identified suspects by matching crime-scene material to distant relatives who uploaded their own results to a database.
Nobody in those cases had consented to that use, including the relative who uploaded.
Public opinion has been broadly supportive when the crime was severe, which is the pattern that makes the question difficult rather than easy.
Insurance is the application that most legal systems have addressed directly.
Several countries prohibit the use of genetic results in , with exceptions above a policy value.
The protects testing, since a patient who fears the insurance consequence declines the test that would have helped them.
Employment is less well covered and involves the same mechanism with fewer .
Research databases hold the largest collections and are the least discussed in public.
Their governance rests on consent forms signed when the analytical possibilities were narrower.
is impractical at scale and is the only honest answer where the purpose has genuinely changed.
, in which a participant sets standing permissions and can revise them, has worked in several cohorts.
It is administratively heavy and transfers a decision to the person whose data it is, which is the point.
Every alternative leaves that decision with an institution that will still exist when the participant does not.