While watching the HLN special last night about the Golden State Killer, hubs noticed one of the advertising sponsors was 23 & Me. DNA testing for large populations has the potential to be a great law enforcement tool, but there's so much room for abuse. People who use these tests to check for inherited risks for diseases,etc. can potentially have that information used by employers, credit card companies, mortgage lenders, etc. to harm them. There are some real horror stories related to companies learning about customers and employees health care and genetic risk information. Current laws on the books (like HIPAA and GINA) don't cover third parties like genetic testing companies. They also offer little to no legal remedies to people who have been harmed.
There are already a couple of cases on record where familial DNA has caused LE to go after innocent people. Sure, they may be cleared later, but the damage to their reputation and cost of legal defense is high. Use of DNA and voluntary DNA databases should be very carefully monitored and they probably need to lay down some legal guidelines.
As for Ancestry.com's disclosure reports - what's the penalty if those reports are falsified? None.