If DNA test kits are on your holiday shopping list

A personalized holiday gift used to mean a shirt with a monogram. But the popularity of at-home DNA test kits suggests that personalized presents have gotten a lot more personal. If genetic test kits are on your shopping list for family or friends – or if you’re buying one for yourself – the FTC has three things to think about first.

Take a close look at the company’s privacy promises. Price and performance are only two of the comparison points in deciding which kit to buy. Also consider privacy. That tiny swab contains volumes of highly sensitive information. Visit the company’s website and see what it says about its privacy practices. Do they share users’ information with other companies? Do they offer dashboards or other tools where users can select options that offer more privacy? Can you delete your information if you want to?

Help the recipient navigate privacy choices. If you give a DNA test kit to a family member who doesn’t have your knowledge about privacy settings, add a bonus gift: a 15-minute phone call with you to help them customize their account. They’ll need a strong password they haven’t used on any other website. Also, see if the company’s site uses what’s called “multifactor authentication” – a way of offering added security by having consumers use a password plus another verification method to get access. For example, some sites will text a security code to the person’s phone or will use an app that offers verification. Don’t just settle for out-of-the-box defaults. They may not offer the most protection. The wiser strategy is to start with the most secure privacy settings.

Recognize what’s at risk. Keep in mind that DNA is sensitive stuff. It tells a story not just about you, but also about people you’re related to. Even if a company promises not to share data with others, hack attacks still happen. How would you feel if your DNA results or a family member’s ended up in the hands of cybercriminals? Of course, all companies – online businesses and brick-and-mortar stores – have to defend against data theft. What’s different here is the uniquely personal nature of the information at risk.

If you think a genetic testing company isn’t living up to its promises, report your concern to the FTC.