The Data Inspectorate decided to open an investigation on the society MyHeritage after receiving a report by the Consumer Council.
According to the report, the informations used by the user are not so clear and they can breach the Privacy Regulation.
The Consumer Council evaluated those informations provided to MyHeritage users by the company’s terms of use and privacy policy.
The report underlines the length, language and inadequate informations on what the society wants to use, like DNA informations.
Information and transparency
Clear information are a prerequisite for an informed choice about personal information. This is also the reason why the GDPR has strict conditions on how the company must provide information in a short time and how to treat personal data.
Possible breaches of the obligation to process personal data in an open manner are serious.
DNA information is particularly sensitive, as it not only reveals something about the person undergoing the gene test, but can also have consequences for his or her family.
On the basis of the report, the Danish Data Protection Agency has now opened proceedings against Myheritage and will review the information provided to users of the service.