Federal Judge OKs Class Action on Police Use of Consumer DNA Data

2 min readSources: Courthouse News

On Oct. 1, 2026, Judge Karen Carter allowed a class action against police use of consumer DNA data to proceed.

Why it matters: This ruling signals increased legal scrutiny of law enforcement’s access to consumer genetic info. Legal teams must assess risks and update data policies accordingly.

  • October 1, 2026, ruling by Judge Karen Carter in U.S. District Court, Northern District of California.
  • Plaintiffs allege police accessed consumer DNA from testing companies without consent and disclosed profiles to third parties.
  • Judge ruled unauthorized disclosure is a significant invasion of privacy under federal law.
  • Case could establish precedent on genetic privacy rights and law enforcement's use of biometric data.

On October 1, 2026, Judge Karen Carter of the U.S. District Court for the Northern District of California allowed a class action lawsuit alleging unauthorized police use and disclosure of consumer genetic data to proceed. The plaintiffs claim law enforcement obtained DNA profiles from consumer genetic testing companies—such as 23andMe and AncestryDNA—without individuals' consent and disclosed them to third parties.

Judge Carter ruled that this unauthorized disclosure represents a "significant intrusion into personal privacy" and emphasized the sensitive nature of genetic information. Her decision highlights judicial concerns about privacy threats linked to expanding biometric data use by police.

The plaintiffs argue police actions violate federal privacy protections by accessing and sharing genetic data provided mainly for personal or genealogical use. This raises critical issues involving consent, data ownership, and privacy limits within forensic and public safety contexts.

This case exposes potential legislative gaps that leave consumer biometric data vulnerable to nonconsensual law enforcement use, prompting legal professionals to monitor its progress as it may set a key precedent.

Legal teams should review this ruling carefully to adapt policies addressing handling, consent, and disclosure of genetic data, mitigating privacy risks and compliance exposure.

More information is available at Courthouse News and the Northern District of California ruling.

By the numbers:

  • October 1, 2026 — Date of Judge Carter's ruling to proceed with class action
  • Thousands — Potential class size of consumers whose DNA data police allegedly accessed
  • 23andMe, AncestryDNA — Consumer genetic testing companies implicated

What's next: Watch for court hearings later in 2026 that may clarify law enforcement limits on genetic data use and impact biometric privacy precedent.