Your Genome Is Already for Sale — You Just Don't Know Who's Buying

For around $99 and a tube of spit, you can unlock the secrets of your ancestry, your health predispositions, maybe even your personality quirks. Millions of Americans have done exactly that, shipping off their DNA to companies like 23andMe and AncestryDNA with the casual enthusiasm of ordering something off Amazon. It feels personal. It feels empowering. What it actually is, in many cases, is a data transaction — and you're not the one getting paid.

Welcome to the genetic data economy, one of the fastest-growing and least-regulated markets in the country. While Washington debates AI policy and Silicon Valley obsesses over large language models, a quieter revolution is happening at the molecular level. Your genome — the 3.2 billion base pairs that make you, fundamentally, you — is being cataloged, aggregated, analyzed, and in some cases traded in ways that would make even seasoned privacy advocates uncomfortable.

The Price of a Genome Has Collapsed. The Value Hasn't.

Sequencing a full human genome cost roughly $100 million in 2001, when the Human Genome Project wrapped up its landmark work. By 2007, that figure had dropped to about $10 million. Today, you can sequence a genome for under $200 — and some clinical providers do it for even less. The cost curve looks almost identical to what happened with computing power, and the implications are just as profound.

As sequencing has gotten cheaper, the datasets have gotten bigger. Biobanks — massive repositories of genetic information linked to health records — now hold the DNA of tens of millions of people. The UK Biobank alone has over 500,000 participants. In the US, the National Institutes of Health's All of Us program is working toward one million participants. Private companies, meanwhile, have quietly assembled their own troves. 23andMe, before its recent financial turbulence, had genotyped more than 14 million customers. That's a dataset that pharmaceutical companies, academic researchers, and yes, data brokers, would pay handsomely to access.

And access they do. When you read the fine print on most consumer DNA testing agreements, you'll typically find language that allows the company to share "de-identified" genetic data with third parties for research purposes. The opt-out exists, but it's buried. Most people never find it.

Who's Actually Buying?

The buyers operate across a surprisingly wide spectrum — and not all of them have your best interests at heart.

Pharmaceutical companies are the most straightforward. Drug development is brutally expensive, and genetic data accelerates the process of identifying which molecular targets are worth pursuing. GlaxoSmithKline famously paid $300 million for access to 23andMe's database back in 2018. That deal raised eyebrows at the time. In hindsight, it was just the beginning.

Insurance actuaries represent a murkier category. The Genetic Information Nondiscrimination Act, or GINA, technically prohibits health insurers from using genetic data to set premiums or deny coverage. But GINA has significant gaps — it doesn't cover life insurance, disability insurance, or long-term care insurance. If you've uploaded your DNA to a consumer platform and you carry a variant associated with early-onset Alzheimer's or hereditary heart disease, there's a real legal pathway for that information to influence the coverage you're offered, or denied, outside of traditional health plans.

Data brokers are perhaps the least visible but most aggressive players. Several companies now operate specifically in the genetic data brokerage space, purchasing datasets, stripping identifiers, and reselling aggregated information to anyone from marketing firms to financial institutions. The "de-identification" these brokers rely on is also far less ironclad than advertised — researchers have demonstrated repeatedly that genetic data can be re-identified using publicly available information, even when names and addresses are removed.

Then there's the national security dimension, which is where things get genuinely unsettling.

The Foreign Government Problem

In 2023, the Department of Justice proposed new rules specifically targeting the sale of Americans' sensitive personal data — including genomic data — to foreign adversaries. The concern isn't hypothetical. Chinese genomics giant BGI, which operated prenatal testing programs in dozens of countries, was flagged by US intelligence officials for potentially funneling genetic data back to the Chinese government. The company denied the allegations, but the Pentagon had already added it to a list of companies allegedly working with China's military.

The strategic value of population-level genetic data is hard to overstate. Genomic information can reveal disease vulnerabilities in specific ethnic populations, inform the development of targeted biological agents, and provide intelligence about a nation's demographic health in ways that no spy satellite can match. For the intelligence community, this isn't science fiction — it's an active threat vector.

Some of the wealthiest Americans have apparently gotten the memo. Privacy attorneys and genetic counselors who work with high-net-worth clients report growing demand for what amounts to "genetic hygiene" — strategies to keep DNA off commercial databases entirely. That means avoiding consumer testing services, using legal pseudonyms where possible, and in some cases opting out of hospital biobank programs. One prominent Silicon Valley investor, speaking anonymously, described it as "the new offshore banking — except what you're protecting is way more personal than money."

The Regulation Gap Is Enormous

Here's the uncomfortable truth: the legal framework governing genetic data in the US is a patchwork at best. GINA covers some scenarios. HIPAA covers data held by healthcare providers. But consumer genetic testing companies don't neatly fit either category, and the Federal Trade Commission's oversight of data practices in this space has been limited.

A handful of states have moved to fill the gap. Texas, California, and Illinois have passed laws with varying levels of genetic data protection, but there's no federal standard. Meanwhile, the industry continues to evolve faster than any regulatory body can track.

The American Civil Liberties Union and several bioethics organizations have pushed for a comprehensive federal genetic privacy law — something with teeth, something that treats genomic data as a fundamentally different category of personal information rather than just another row in a spreadsheet. So far, Congress hasn't moved with any urgency.

What You Can Actually Do Right Now

If you've already submitted your DNA to a consumer testing service, you have options — though none of them are perfect. Most major platforms allow you to request deletion of your genetic data and destruction of your physical sample. Whether the downstream third parties who may have already received your data honor those deletions is a different question.

If you haven't tested yet and you're still curious about ancestry or health markers, consider working with a physician or genetic counselor who operates under HIPAA protections rather than a consumer app. The data doesn't disappear, but the legal protections are meaningfully stronger.

More broadly, pay attention to what's coming. The genomic data economy is still in its early innings. As personalized medicine matures and genetic information becomes increasingly central to healthcare decisions, the pressure to share DNA data — from employers, insurers, and even well-meaning public health programs — is only going to increase.

Your genome is the most intimate dataset that exists about you. It predates your birth and, in some senses, outlasts your death. Treating it with the same casualness as a loyalty card signup might be one of the more consequential mistakes a person can make in the next decade. The market for your biological blueprint is already open. The question is whether you get any say in how it's used.