Evidence: historical governance case. Source-led synthesis; classifications are GeneticSecurity.org analysis, not findings by the source.
Case at a glance
- Case number
- 005
- Date / range
- 1951 / 2013
- Sector
- Biomedical research
- Genetic asset
- HeLa whole-genome sequence information and a persistent cell line
- Security principle
- Familial Genomic Consent
Event summary
HeLa cells were derived from Henrietta Lacks' tumor tissue in 1951 without her knowledge or consent. In 2013, after publication of HeLa whole-genome sequence information raised family privacy concerns, NIH and members of the Lacks family reached an agreement establishing controlled access to NIH-supported HeLa whole-genome sequence data.
Acquisition and processing
Whole-genome sequencing transformed the informational significance of retained cells
What became inferable or exposed
HeLa whole-genome sequence information and a persistent cell line
Genomic information derived from a long-established research cell line can reveal information relevant to biological relatives, raising privacy and governance questions that extend beyond the original specimen source.
Affected parties and consent
- Direct parties
- Henrietta Lacks as the original tissue source
- Indirect parties
- Biological relatives with shared inherited variation
- Direct count
- Unknown / not assigned
- Indirect count
- Unknown / not assigned
- Consent status
- Original tissue collection without her knowledge or consent; subsequent controlled-access governance
Security dimensions
Confidentiality
Scope assessed from the specific asset and access described; no broader raw-genome disclosure inferred.
Integrity
No demonstrated data alteration established by the cited material.
Availability
No outage or destruction established in this case.
Provenance
Complete custody and processing evidence is unavailable; no numeric GPI rating assigned.
Time changes what a specimen can reveal
A stored biological resource can remain in use while analytical methods change around it. The questions that become possible years later may differ from those considered at collection. In this case, the genomic-data issue makes that time dimension visible: long-standing research use did not eliminate the need to examine the implications of a new kind of information.
The site's persistence analysis focuses on that continuing potential for reuse and familial relevance. It is not a claim that every sequence derived from a cell line provides an exact representation of every relative. The asset, the analytical method, and the claimed inference still need to be specified.
Access rules are part of the response
The cited NIH guidance provides a concrete example of governing access to a defined class of genomic data. A reader should preserve that scope rather than treating the arrangement as a universal rule for all HeLa materials, all research outputs, or all historical specimens.
From a security perspective, the useful question is what decisions occur before data is made available: which requests are eligible, which conditions attach to access, and how those conditions are communicated. Governance can establish boundaries even where the underlying biological source cannot be replaced.
The lesson for retained collections
For another collection, a change in analytical capability is a reason to revisit the proposed use. It need not imply that all historical work must be reassessed in exactly the same way. Begin with the actual material, the new output, and the people whose interests could be affected.
That approach keeps the lesson specific. The security problem is the relationship between a persistent resource and changing uses, not an assumption that the passage of time either grants unlimited permission or makes all future research impossible.
GeneticSecurity.org analysis
Genetic Exposure Radius
Analysis: Biological relatives with shared inherited variation. The rating describes possible scope, not harm or a count of affected people.
Confidence: moderate. Classification: GeneticSecurity.org analysis.
Genetic Persistence Risk
Whole-genome information can retain future inference value and familial relevance.
Confidence: low. Classification: GeneticSecurity.org analysis.
Genetic Provenance Integrity
Not assessed: the public sources do not establish enough of the complete biological and digital chain to score it. Unknown is not proof of missing controls.
Confidence: not assigned. Classification: GeneticSecurity.org analysis.
What this case does not prove
The agreement is not blanket permission for every use of every HeLa-derived artifact.
Mitigations and lessons
Review new uses as analytical capability changes; govern access and include affected family perspectives.
Primary sources
- PRIMARY SOURCE NIH: HeLa whole-genome data guidance, 2013
Secondary sources
No additional source listed. See the evidence notes for limitations.
Policy and standards
Genetic Security Policy and StandardsReview and correction history
Last reviewed: September 19, 2026. Initial source synthesis; no substantive corrections recorded.
Correction policy and logCite this case
GS-CASE-005. Henrietta Lacks: When One Cell Line Became a Family Genomic Privacy Question. GeneticSecurity.org. https://geneticsecurity.org/cases/005-henrietta-lacks-hela-genomic-consent/