Learn how GA4GH helps expand responsible genomic data use to benefit human health.
Learn how GA4GH helps expand responsible genomic data use to benefit human health.
Our Strategic Road Map defines strategies, standards, and policy frameworks to support responsible global use of genomic and related health data.
Discover how a meeting of 50 leaders in genomics and medicine led to an alliance uniting more than 5,000 individuals and organisations to benefit human health.
GA4GH Inc. is a not-for-profit organisation that supports the global GA4GH community.
To guide our collaborative, globe-spanning alliance, GA4GH relies on a Standards Steering Committee and an Executive Committee.
The Funders Forum brings together organisations that offer both financial support and strategic guidance.
The EDI Advisory Group responds to issues raised in the GA4GH community, finding equitable, inclusive ways to build products that benefit diverse groups.
Distributed across four Host Institutions, our staff team supports the mission and operations of GA4GH.
Curious who we are? Meet the people and organisations across six continents who make up GA4GH.
More than 500 organisations connected to genomics — in healthcare, research, patient advocacy, industry, and beyond — have signed onto the mission and vision of GA4GH as Organisational Members.
These core Organisational Members are genomic data initiatives that have committed resources to guide GA4GH work and pilot our products.
This subset of Organisational Members whose networks or infrastructure align with GA4GH priorities has made a long-term commitment to engaging with our community.
Local and national organisations assign experts to spend at least 30% of their time building GA4GH products.
Anyone working in genomics and related fields is invited to participate in our inclusive community by creating and using new products.
Wondering what GA4GH does? Learn how we find and overcome challenges to expanding responsible genomic data use for the benefit of human health.
Study Groups define needs. Participants survey the landscape of the genomics and health community and determine whether GA4GH can help.
Work Streams create products. Community members join together to develop technical standards, policy frameworks, and policy tools that overcome hurdles to international genomic data use.
GIF solves problems. Organisations in the forum pilot GA4GH products in real-world situations. Along the way, they troubleshoot products, suggest updates, and flag additional needs.
NIF finds challenges and opportunities in genomics at a global scale. National programmes meet to share best practices, avoid incompatabilities, and help translate genomics into benefits for human health.
Communities of Interest find challenges and opportunities in areas such as rare disease, cancer, and infectious disease. Participants pinpoint real-world problems that would benefit from broad data use.
Find out what’s happening with up to the minute meeting schedules for the GA4GH community.
See all our products — always free and open-source. Do you work on cloud genomics, data discovery, user access, data security or regulatory policy and ethics? Need to represent genomic, phenotypic, or clinical data? We’ve got a solution for you.
All GA4GH standards, frameworks, and tools follow the Product Development and Approval Process before being officially adopted.
Learn how other organisations have implemented GA4GH products to solve real-world problems.
Help us transform the future of genomic data use! See how GA4GH can benefit you — whether you’re using our products, writing our standards, subscribing to a newsletter, or more.
Help create new global standards and frameworks for responsible genomic data use.
Align your organisation with the GA4GH mission and vision.
Want to advance both your career and responsible genomic data sharing at the same time? See our open leadership opportunities.
Join our international team and help us advance genomic data use for the benefit of human health.
Share your thoughts on all GA4GH products currently open for public comment.
Solve real problems by aligning your organisation with the world’s genomics standards. We offer software dvelopers both customisable and out-of-the-box solutions to help you get started.
Learn more about upcoming GA4GH events. See reports and recordings from our past events.
Speak directly to the global genomics and health community while supporting GA4GH strategy.
Be the first to hear about the latest GA4GH products, upcoming meetings, new initiatives, and more.
Questions? We would love to hear from you.
Read news, stories, and insights from the forefront of genomic and clinical data use.
Attend an upcoming GA4GH event, or view meeting reports from past events.
See new projects, updates, and calls for support from the Work Streams.
Read academic papers coauthored by GA4GH contributors.
Listen to our podcast OmicsXchange, featuring discussions from leaders in the world of genomics, health, and data sharing.
Check out our videos, then subscribe to our YouTube channel for more content.
View the latest GA4GH updates, Genomics and Health News, Implementation Notes, GDPR Briefs, and more.
Discover all things GA4GH: explore our news, events, videos, podcasts, announcements, publications, and newsletters.
7 Jun 2021
In this brief, we discuss the provisions that allow for balancing of individual and familial interests under the GDPR and EU Member State law, and the legal uncertainty that remains.
The GDPR maintains EU data protection law’s focus on the individual data subject. However, in the genomics context, multiple individuals may be able to claim an interest (and data subject rights) in the same genetic data. In this brief, we discuss the provisions that allow for balancing of individual and familial interests under the GDPR and EU Member State law, and the legal uncertainty that remains.
Balancing data subject rights with relatives’ interests under the GDPR
Although not specific to the genomic context, various provisions within the GDPR recognise that there may be competing interests which require balancing, including:
For example, the UK has limited the disclosure of information under article 15 either if it is likely to cause serious harm to another individual or ‘to the extent that this would involve disclosing information relating to another individual who can be identified from the information’, unless the other individual has consented or ‘it is reasonable to disclose the information to the data subject without their consent’. There are a range of factors to be taken into account in assessing reasonableness, including the nature of the of information, steps taken to seek consent and any express refusal of consent by the other individual.1
Internationally, a variety of approaches have been adopted to reconciling familial contexts, individual preferences, and privacy in the genomics context. The GDPR enables this by providing Member States with the scope to set their own appropriate standards.
Limitations and remaining uncertainty
However, there are three notable causes of uncertainty and challenge with respect to balancing data subject rights with relatives’ interests:
First, data controllers must navigate a varied terrain of Member State law rather than a clear set of consistent and harmonised standards. This challenges international data sharing efforts and raises compliance costs.
Second, in countries such as the UK, such competing interests only need to be balanced in the case of a request to access data (or in provision of information under art 14). However, there is arguably a need to consider the potential rights and interests of relatives in relation to a much wider range of data subject rights and duties owed by data controllers and processors. For example, deletion of data or restriction of processing could have significant consequences for relatives if it impedes medical research and its consequent feedback into clinical care.
Third, the GDPR’s current approach doesn’t address the fundamental question of whether multiple relatives could be considered to be ‘data subjects’ in their own right in relation to the same genetic data and, if so, how competing rights and interests should be negotiated.
Are relatives also ‘data subjects’?
As scholars identified under the GDPR’s predecessor, it may be possible to connect the same genetic data to different members of a family in a way which would identify and relate to each of them in turn. For example, where the same rare variant is present in the genome of multiple family members cared for by the same service, each person’s medical records may be reasonably likely to be used to connect them with data about that variant. This could constitute their ‘personal data’ if the data can be said to ‘relate’ to them by “content”, “purpose” or “effect”. For example, as content which provides information about the health and physiology of that person; through their purpose in informing care and treatment, or; through their effect, leading them to be treated differently to others due to this information.
Were genetic data seen to be as applicable to more than one individual data subject and also include familial relatives, data subject rights and obligations with respect to the same data would simultaneously be allocated to multiple family members. Neither the GDPR nor guidance from the European Data Protection Board address this conundrum.
A way ahead?
One approach to obtaining greater consistency and clarity could be by developing best practice as a sector, for example, in the form of a code of conduct. This could first seek to address balancing rights and interests where required by the GDPR and Member State law. Second, it may be helpful to revisit the question of whether relatives may themselves be considered data subjects in relation to the same genetic data and if so, how competing views about processing of ‘their’ personal data can be reconciled. In the interim, genomics professionals should ensure they have processes in place to conduct the balancing required by the GDPR and relevant Member State laws. These may be slightly different to the requirements of other parts of the legal framework (e.g. confidentiality laws), meaning that existing systems may require some updating.
1 Data Protection Act 2018, sch 2 para 16; sch 3 para 3(3). This is discussed more fully in the PHG Foundation’s report, The GDPR and Genomic Data, at pp. 91–93.
2 Taylor, M. (2012). Data in common. In Genetic data and the law: critical perspective on privacy protection (pp. 103–130).
Relevant GDPR provisions
Colin Mitchell and Alison Hall work for the PHG Foundation, a think tank with a special focus on genomics and personalised medicine that is a part of the University of Cambridge.
See all previous briefs.
Please note that GDPR Briefs neither constitute nor should be relied upon as legal advice. Briefs represent a consensus position among Forum Members regarding the current understanding of the GDPR and its implications for genomic and health-related research. As such, they are no substitute for legal advice from a licensed practitioner in your jurisdiction.