When a database match identifies a third cousin of an unknown person, that match reveals information about the third cousin’s family connections that the cousin has not chosen to share with law enforcement or investigators. The relative in this case is typically not a suspect, not a witness, and not any kind of party to the investigation; they are simply someone whose DNA happens to share segments with the person being identified. Their data, voluntarily shared for personal purposes, becomes part of an investigative process they did not consent to.
The Lori Ruff case was an identification case rather than a criminal investigation — there was no prosecution, no accusation, no consequence for anyone connected to Kimberly McLean. The use of DNA in this context raised fewer ethical concerns than its use in criminal investigations, where the stakes of identification are more severe. But the method is the same, and the questions it raises apply equally.
The development of guidelines for forensic genetic genealogy has been ongoing since the method gained public attention after 2018. The FBI issued interim guidelines in 2019 limiting the use of the technique in federal investigations to cases involving violent crimes or unidentified human remains. Several states have enacted legislation establishing parameters for law enforcement use of consumer DNA databases. The conversations about appropriate scope, consent, and oversight continue in academic, policy, and legal forums.
The Lori Ruff case was an early use of the method, conducted before most of these guidelines existed, in a context — the identification of an unidentified deceased person — that most stakeholders view as among the most legitimate applications of forensic genetic genealogy. It is also a case that illustrates how the method works, what it can accomplish, and what it requires from the people whose DNA is searched.