A new model for genetic privacy: you don't have any

In a perspective piece in Nature Reviews Genetics (subscription required, I think), Personal Genome Project leader George Church and colleagues advocate a revolutionary new approach to research subject privacy. Essentially, they argue that "the reality of the new genetics and genomics urges us to abandon the traditional concept of medical confidentiality". In other words, research participants must learn to accept the fact that the privacy of their genetic and health information cannot be guaranteed.

When I first heard of this concept in the context of the Personal Genome Project it struck me as pure insanity - who would volunteer for a project if there is a significant risk of your genetic and health information being accessed by (say) insurance companies? Having thought it over, though, the need for such an approach is becoming more and more clear to me. The basic argument goes something like this:

1. Your DNA sequence (or any sufficiently large set of genetic markers, like those used in modern genome-wide association studies) is enough by itself to unambiguously identify you.

2. Thus even "anonymous" participants in large-scale genetic studies are vulnerable to having their identity revealed - all it would take is someone to have a sample of your DNA, and access to the individual data-points from the study, and they would then have access to any health or life-style information recorded about you as part of that study.

3. As such, there simply cannot be guarantees of anonymity given to participants in such studies, fundamentally undermining the traditional model of confidentiality.

4. The best solution to this problem is to abandon the illusion of research subject privacy, and instead recruit participants with the explicit condition that all of the data collected about them as part of the study may in fact be revealed to the public.

The authors aren't advocating a complete dump of participant genetic and health records on a publically accessible website - although volunteers in the Personal Genome Project have the option of doing just that, should they choose to. Rather, they argue for a strategy of "maximizing data protection while informing people about its limits". In other words, doing your best to limit disclosure of individual health data, while clearly informing participants of the fact that their privacy can't be guaranteed.

It certainly is an audacious paradigm shift, and I'm having trouble predicting its consequences. For instance, will such a policy discourage people with a clear family history of genetic disease from participating in large-scale cohort studies (for insurance reasons), thus reducing the power of such studies to detect disease-associated variants? Will it create a generation gap in research participation, with conservative older people shunning studies while the children of the Facebook era - who engage in public disclosure of information with a wilfulness that seems shocking to their elders - embrace participation? I don't know, but I guess we'll all find out sooner rather than later...

Anyone interested in the Personal Genome Project (which is calling for volunteers for whole-genome sequencing, by the way) should check out their informative web-site. Misha Angrist, one of the "First Ten" participants who will have their genomes sequenced by the PGP, also has a blog that's well worth adding to your RSS reader.

Subscribe to Genetic Future.