Chapter 6: Privacy, Security & Ethics

6.1 GDPR Compliance

Right to access, rectification, erasure, data portability. Consent management system. Data minimization principles. Legitimate interest assessment for family reunion purposes.

6.2 Informed Consent

Explicit consent for DNA collection, photo use, data sharing. Age-appropriate consent for minors. Withdrawal of consent mechanisms. Culturally adapted consent forms.

6.3 Data Encryption

End-to-end encryption for sensitive data. AES-256 for data at rest. TLS 1.3 for data in transit. Key management with HSM (Hardware Security Modules).

6.4 Trauma-Informed Care

6.5 Ethical Guidelines

Respect cultural and religious sensitivities. Avoid exploitation of vulnerable populations. Transparent fee structures (free for refugees/displaced). Protection of children's best interests. Handling unexpected findings with care.