Evidence: well sourced. Imported from the supplied 65-Case Master Edition, dated September 19, 2026. Source links and classifications are retained as an attributed case account; import is not an independent source review.

Case at a glance

Case number
021
Date / range
2015
Sector
Re-identification and inference
Genetic asset
Sequence, genotype, and genealogical information
Security principle
Population Imputation Spillover

Event summary

Large Icelandic sequencing studies showed that genomes from consenting participants, combined with genotypes and genealogies, could support imputation across much of a closely connected population. Genetic participation can therefore generate information about nonparticipants.

Source: pubmed.ncbi.nlm.nih.gov — Icelandic Population Imputation source 1.

Source: genome.gov — Icelandic Population Imputation source 2.

The case in context

The Icelandic research illustrates the difference between sequencing a participant and inferring information across a connected population. Genotypes, reference information, and genealogical relationships can make the analytical reach wider than the group whose genomes were directly sequenced.

That reach creates a consent question without requiring a database intrusion. It also creates an accuracy question: an imputed result is not interchangeable with a direct measurement. Decisions about notification or further use should preserve that distinction, particularly when an inference concerns someone who did not enroll in the original research.

Acquisition and processing

participant genomes → reference haplotypes + genealogy → population imputation → disease-variant inference → notification/consent dilemma

The sequence of events

  1. participant genomes
  2. reference haplotypes + genealogy
  3. population imputation
  4. disease-variant inference
  5. notification/consent dilemma

What became inferable or exposed

Sequence, genotype, and genealogical information

Large Icelandic sequencing studies showed that genomes from consenting participants, combined with genotypes and genealogies, could support imputation across much of a closely connected population. Genetic participation can therefore generate information about nonparticipants.

Security dimensions

Confidentiality

The confidentiality question concerns sequence, genotype, and genealogical information. Exposure and further inference must be distinguished from the fact of collection or availability.

Integrity

The integrity question is whether the described material, permissions, processing, or interpretation can be relied upon. Population Imputation Spillover identifies the particular boundary examined here.

Availability

Access and continuity are assessed for the described event; potential effects are not presented as confirmed outages or losses.

Provenance

The relevant chain follows sequence, genotype, and genealogical information through the stages shown below. Missing public detail is not proof that internal records did not exist.

GeneticSecurity.org analysis

Genetic Exposure Radius

Not assessed

No single level is assigned where the supplied dossier gives a range, conditional outcome, or broad institutional consequence. The affected parties and proposed assessment are shown separately.

Confidence: not assigned. Classification: GeneticSecurity.org analysis.

Genetic Persistence Risk

Not assessed

Persistence depends on the specific biological material or information retained. A potential effect is not treated as an observed genomic disclosure.

Confidence: not assigned. Classification: GeneticSecurity.org analysis.

Genetic Provenance Integrity

Not assessed

A numeric provenance level is not inferred from the existence of a source or court record. It requires evidence of the relevant custody and processing controls.

Confidence: not assigned. Classification: GeneticSecurity.org analysis.

Proposed classification and its limits

Suggested GER: GER-4. Suggested GPR: GPR-5. Suggested GPI: GPI-4 for documented research pipelines.

These are proposed classifications from the supplied case dossier. Conditional scores describe an assumed exposure; they are not evidence that it occurred. A single numeric value is left unassigned when the asset or outcome is not sufficiently bounded.

What this case does not prove

Imputation is probabilistic and variant-dependent; it is not equivalent to directly sequencing every person.

Mitigations and lessons

  • Population-level ethics review
  • Nonparticipant risk analysis
  • Calibrated uncertainty
  • Notification policy
  • Opt-out mechanisms where feasible
  • Access controls
  • Separation of research inference from clinical action

Primary sources

Secondary sources

No additional source listed. See the evidence notes for limitations.

Policy and standards

Genetic Security Policy and Standards

Review and correction history

Source edition: September 19, 2026. Imported case account; no substantive corrections recorded.

Correction policy and log

Cite this case

GS-CASE-021. Iceland: Inferring Genomes of People Who Never Enrolled. GeneticSecurity.org. https://geneticsecurity.org/cases/021-iceland-genome-imputation-nonparticipants/