Institute of DNA

Law Enforcement Access to DNA Databases

How police use forensic genealogy to solve cold cases, and which consumer DNA databases they have access to.

The Golden State Killer was identified not by a suspect's DNA match, but by his third cousins uploading their 23andMe and AncestryDNA raw data to a public database called GEDmatch. This watershed moment in 2018 permanently altered the privacy landscape of direct-to-consumer genetics.

The GEDmatch Loophole

When you test with a major provider like AncestryDNA, your sample remains in their walled garden. Ancestry has historically fought subpoenas and requires a valid warrant to release user data. However, the open-source genealogy community built third-party tools like GEDmatch to allow cross-platform matching.

Table: Database Law Enforcement Policies (2025)

CompanyDefault StanceWarrant Required?
23andMeResists RequestsYes
AncestryDNAResists RequestsYes
FamilyTreeDNACooperative (Opt-out available)No (for violent crimes)
GEDmatchCooperative (Opt-in required)No

Common Mistakes

A common misconception is that police are sequencing DNA found at crime scenes using 23andMe kits. They are not. They are generating forensic profiles and uploading them disguised as standard users to see who they match with, a process known as Investigative Genetic Genealogy (IGG).

Frequently Asked Questions

  • Can I be implicated by a relative? Yes. If a second cousin uploads their DNA, police can build a family tree downward to you.
  • Does deleting my kit help? Only if you delete it before a snapshot is taken. Once your match data is used in an investigation, deleting your source file cannot undo the genealogical research already conducted.

Next Step: Check our Privacy Checklist to secure your genetic data.