Your DNA, Your Privacy: How Identilab Handles Genetic Data 

In recent years, growing public concern around DNA privacy in Australia has been fuelled by stories of data misuse, large-scale breaches, and even the bankruptcy of major consumer DNA testing companies like 23andMe. For many people, handing over their DNA to a testing company now feels like a risk, and understandably so.

At Identilab, we want to be completely transparent about how we handle your personal and genetic information, and to reassure you that we are not in the business of data mining or selling your DNA.

We’re Not Like AncestryDNA or 23andMe

Companies like AncestryDNA and 23andMe market their tests as recreational tools to explore your ancestry or health traits, but behind the scenes, your DNA data may be stored long-term, shared with research partners, or even sold. This  can include partnerships with pharmaceutical companies and third-party researchers.

Identilab, by contrast, is a NATA-accredited DNA testing laboratory based in Australia, and we operate in a very different space. The majority of our work involves legal DNA testing and we are bound by strict requirements under both the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Here’s How We Handle Your DNA and Data

• Your DNA is not added to a database.
  Every case is treated individually. We do not store your DNA in a database alongside other people’s profiles, and we do not use your DNA for research. Your sample is used only for the specific purpose for which you’ve engaged us and nothing more.

• No data selling. No research deals. No third-party sharing.
  Your DNA data will never be shared, sold, or used for research purposes. Period.

• Samples are destroyed, not stored.
  Once testing is complete, your DNA samples and any amplified material are destroyed within two weeks of your report being issued. If you ask us to destroy them sooner, we’re happy to do so.

• We retain only what we must, and only for as long as necessary.
  Because our results are often used in legal matters, we retain your DNA profile and final report for a minimum of seven years. This ensures we can respond if a result is questioned in court, by a regulator, or for insurance purposes.

• Identifiable digital data can be deleted on request.
  While we must retain a paper-based record for compliance reasons, we can remove identifiable digital data from our systems if requested.

• Your information is stored securely.
  We take every reasonable step to protect your personal information, whether it’s stored in physical files or in our digital systems. Access is strictly limited to authorised team members, and we’ve put strong safeguards in place to protect your data from misuse, loss, or unauthorised access – because your privacy really does matter to us.

Privacy by Principle, Not Just Policy

We understand that sending your DNA to a lab is personal. That’s why we treat every sample and every data file with the same level of care and confidentiality we’d expect for ourselves or our families.

If you ever have questions about how your information is handled, we’re here to talk. To learn more, you can read our full Privacy Policy or get in touch with our team at [email protected].