Exclusive: Pentagon warns military members DNA kits pose ‘personal and operational risks’
WASHINGTON — The Pentagon is advising members of the military not to use consumer DNA kits, saying the information collected by private companies could pose a security risk, according to a memo co-signed by the Defense Department’s top intelligence official.
A growing number of companies like 23andMe and Ancestry sell testing kits that allow buyers to get a DNA profile by sending in a cheek swab or saliva sample. The DNA results provide consumers information on their ancestry, insights into possible medical risks and can even identify previously unknown family members.
The boom in popularity of such kits has raised ethical and legal issues, since some companies have shared this data with law enforcement or sold it to third parties. The Defense Department is now expressing its own concerns about these kits.
“Exposing sensitive genetic information to outside parties poses personal and operational risks to Service members,” says the Dec. 20 memo signed by Joseph D. Kernan, the undersecretary of defense for intelligence, and James N. Stewart, the assistant secretary of defense for manpower.
12月20日，国防部负责情报事务的副部长约瑟夫·D·科南(Joseph D.Kernan)和国防部负责人力事务的助理部长詹姆斯·N·斯图尔特(James N.Stewart)签署的备忘录称，“将敏感基因信息暴露给外界会给服役人员带来个人和操作风险。”
The memo — which says that some DNA kit companies have been targeting military personnel with discounts — appears to have been distributed widely within the Defense Department, though it has not previously been made public. The memo was obtained by Yahoo News.
“These [direct-to-consumer] genetic tests are largely unregulated and could expose personal and genetic information, and potentially create unintended security consequences and increased risk to the joint force and mission,” states the memo.
The memo provides little details on how genetic profiles could endanger security, other than noting that potential “inaccuracies” in health information could pose a risk to military personnel, who are required to report medical issues. Most of the health reports provided by DNA companies typically pertain to medical risks, though, such as a predisposition to cancer, rather than diagnosing a condition.
However, the involvement of the Pentagon’s intelligence chief in the issue points to broader concerns about biometrics — like DNA, fingerprints and facial recognition — which have been crucial in helping the U.S. identify potential enemies but also expose U.S. national security personnel to identification by other countries.
U.S. intelligence officials are increasingly concerned about how DNA testing will affect their ability to operate worldwide, says a former senior intelligence official, who pointed to the rise of DNA swab tests at some international airports as one factor in a decline in CIA personnel using aliases while travelling abroad.
Erin Murphy, a professor at New York University’s School of Law, says she’s heard about concerns that a foreign government with suspicions about someone operating inside their country — like a potential spy — could use a commercial genetic database to unmask the person. “It all boils down to the same basic idea,” she says. “In a world in which a few stray cells can be used to identify a person, there is no such thing as a covert action, and no such thing as anonymity.”
纽约大学法学院(New York University‘s School of Law)教授艾琳·墨菲(Erin Murphy)表示，她听说有人担心，怀疑某人在本国境内活动的外国政府-就像潜在的间谍-可能会利用商业基因数据库来揭开这个人的面纱。“归根结底，这都是一个基本理念，”她说。“在一个几个流浪细胞就可以用来识别一个人的世界里，没有隐蔽的行动，也没有匿名这回事。”
One possible scenario, Murphy says, would be for someone to use genetic information to track down covert operatives involved in a high-level foreign military operation, such as the killing of Osama bin Laden, in order to exact revenge. “It’s not hard to imagine a world where people are blithely sharing information online without realizing their third cousin is a Navy SEAL, or an operative of the CIA.”
墨菲说，一种可能的情况是，有人利用基因信息追踪参与高级别外国军事行动的秘密特工，例如击毙奥萨马·本·拉登(Osama Bin Laden)，以实施报复。“不难想象，在这样一个世界里，人们在没有意识到自己的第三个表弟是海豹突击队队员或中情局特工的情况下，在网上轻松地分享信息。”
The Pentagon did not respond to specific questions raised by Yahoo News about the memo, but offered a general statement about its purpose: "We want to ensure all service members are aware of the risks of Direct to Consumer (DTC) genetic testing," saidJessica Maxwell, a Defense Department spokesperson.
DOD memo on DNA testing by Sharon Weinberger on Scribd
For consumers turning to commercial companies for DNA profiles, one of the primary concerns has been about privacy, and the potential for others to exploit personal data, or somehow use it in ways that wasn’t intended, particularly as the size of the private DNA databases has grown. Ancestry boasts some 15 million users, while 23andMe says it has 10 million.
In response to a query from Yahoo News, a spokesperson for Ancestry said the company does not offer military discounts. The spokesperson also said the company has taken a number of measures to protect users’ privacy.
“Protecting our customers’ privacy and being good stewards of their data is Ancestry’s highest priority. Ancestry does not share customer DNA data with insurers, employers, or third-party marketers,” the spokesperson said in an emailed statement. “Ancestry will also not share customer personal information with law enforcement unless compelled to by valid legal process, such as a court order or search warrant.”
23andMe also defended its privacy protection, and took issue with concerns over security. “All of our customers should be assured we take the utmost efforts to protect their privacy, and that the results we provide are highly accurate,” a spokesman wrote in a statement. “Our FDA-authorized health reports have been tested at over 99% accuracy. All of our testing is done in the U.S., and we do not share information with third parties without separate, explicit consent from our customers.”
Now even the Pentagon appears to recognize this potential threat. “[T]here is increased concern in the scientific community that outside parties are exploiting the use of genetic data for questionable purposes, including mass surveillance and the ability to track individuals without their authorization or awareness,” says the memo.
The Pentagon’s concerns about genetics and surveillance might be viewed by some as ironic, since the Defense Department has its own massive repository of DNA. Following the 1991 Gulf War, the Pentagon began a mandatory DNA collection program for members of the military in order to identify remains of someone killed in conflict.
The Pentagon also collects DNA samples from terrorists and others detained on the battlefield. Most famously, the U.S. military identified Osama bin Laden’s body after he was killed by Navy SEALS in 2011, reportedly using a sample collected from a family member of the Al Qaeda leader. (After bin Laden’s death, the New York Times revealed that the CIA had organized a phony vaccination program in Pakistan in an attempt to collect DNA from the compound where bin Laden was hiding.)
五角大楼还收集恐怖分子和其他被拘留在战场上的人的DNA样本。最著名的是，美国军方在2011年奥萨马·本·拉登(Osama Bin Laden)被海豹突击队击毙后确认了他的身体，据报道是使用从这位基地组织领导人的家人那里收集的样本。(在本·拉登死亡后，《纽约时报》爆料称，中情局在巴基斯坦组织了一项虚假的疫苗接种计划，试图从本·拉登藏身的院落收集DNA。)。
And earlier this year, the Pentagon said it used DNA testing to confirm the death of Abu Bakr al-Baghdadi, the leader of the Islamic State group. The U.S. government had collected al-Baghdadi’s DNA when he was detained by coalition forces in Iraq more than a decade ago.
今年早些时候，五角大楼表示，他们使用DNA测试确认了伊斯兰国组织头目阿布·巴克尔·巴格达迪(Abu Bakr al-Bagdadi)的死亡。十多年前，巴格达迪在伊拉克被联军拘留时，美国政府已经收集了他的DNA。
It may be that the Pentagon’s newfound concern over DNA kits is based on the belief that a hostile country or group could use DNA in the same manner that the U.S. government often uses it: to target enemies. Earlier this year, the chief of naval operations said at a public event that DNA from consumer testing kits might be used in the future for tailorable biological weapons, a concern that most experts regard as far-fetched.
In either case, the Defense Department appears to not want to take that chance.
“Until notified otherwise, DoD military personnel are advised to refrain from the purchase and/or use of DTC [direct to consumer] genetic services,” the memo says.