Regulating Information under the Privacy Act
Regulating Information under the Privacy Act
13 Nov 2008
Yet, despite the potential benefits of Genome Research and the hopes that this strand of research inspires in ill patients, there are many potential risks. Genome Research presents an array of ethical and legal challenges, and one of the key challenges facing modern regulators is how to properly deal with the impact of genetic research and novel innovative genetic technologies on the safety and privacy of our personal information.
Harvard University Medical School has recently launched a new project which aims to challenge some of our most fundamental conceptions about our personal genetic information. The Personal Genome Project – currently accessible at the public website – is recruiting volunteers who are willing to contribute their genome sequence and personal information to the research community and the general public at large. The Personal Genome Project aims to maximise the number of participants in the program so as to create a large and diverse database of participant genetic profiles.
To be eligible to participate in the research study, interested individuals are required to give informed consent. They then submit various 'trait questionnaires' which are designed to elicit information about the participant's allergies, immunisations, medical history, medications, physical traits and measurements, diet, ancestry, lifestyle, and environmental exposures. Finally, participants undergo various biological analyses and DNA sequencing tests which reveal their genetic information. This information becomes part of a detailed mosaic of information about the individual.
Participants in the Personal Genome Project may choose from three levels of transparency: default access, controlled access and public access. Default access allows only the participant and a select number of researchers access to the information, whilst controlled access makes the genetic information available to a wider circle of researchers. Public Access – the lowest level of privacy protection – enables any visitor to the website to view the information.
The possibility of creating detailed individual genetic profiles raises many moral and legal issues: Should participants in projects such as the Personal Genome Project be required to obtain the informed consent of their family members? How should the possible future uses of this information be regulated? Who should have access to the information, and at what cost? What are the implications of genetic discrimination at law? In choosing the desired level of privacy and transparency, should the participating individuals be required to consider the interests of their genetic relatives? The latter issue is particularly significant, given the potential for abuse of genetic information.
The basic foundation behind our current laws and rules governing privacy is the protection of personal information. The Privacy Act 1988 (Cth) aims to offer appropriate protection for 'personal information.' The latter has been broadly defined as '…information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion.' As the definition currently stands it could extend to cover 'genetic information' forming part of a database such as the Personal Genome Project.
The Act also contains a set of principles aimed at regulating the use of 'sensitive information' which extends to, inter alia, information relating to an individual's race, gender, political affiliation, ethnic origin and religious or philosophical beliefs. Importantly, however, the definition mentions 'genetic information.'
The Act reflects the fundamental principle that individuals as proprietors of personal information have a right to determine the uses of this information. The Act is premised on the notion that there need to be some safeguards for the protection of genetic information. However, the scope of legislative protection is not elaborately set out. This will require further and more detailed consideration in the future.
Although it is still early days, Genome Research is likely to expand and undergo growth. It is, therefore, crucial to have a social and political debate about the scientific, legal and moral implications of Genome Research. It is essential that this debate is an inclusive one which covers a broad spectrum of ethical issues stemming from Genome Research and encompasses a wide range of interested parties. Privacy is only one pertinent issue amongst many. Hopefully, this debate will facilitate better communication between the general public, at one end of the spectrum, and the scientific community and lawmaking bodies, at the other.