BNSF: Secret Genetic Testing in a Workplace Injury Program

Case at a glance

Case number

037

Date / range

2001–2002

Sector

Discrimination and institutional use

Genetic asset

Employee samples and hereditary-condition testing

Security principle

Genetic Testing as Institutional Power

Event summary

BNSF tested or sought to test employees pursuing carpal-tunnel injury claims for a hereditary condition without adequate knowledge or consent, producing an early landmark enforcement action against workplace genetic testing.

Source: eeoc.gov — Burlington Northern Santa Fe Genetic Testing source 1.

Source: genome.gov — Burlington Northern Santa Fe Genetic Testing source 2.

The case in context

The BNSF matter placed genetic testing inside an employment-related medical process. The dispute concerned what employees understood about the examination and how test information could serve an institutional interest beyond their immediate care. The EEOC action preceded GINA and arose under the ADA.

An examination's general label does not explain every assay performed within it. Clear test names, purposes, recipients, and retention rules make the actual information flow visible. The settlement is evidence of agreed enforcement relief, not an adjudication of every disputed allegation.

Acquisition and processing

injury claim → employer-directed medical exam → undisclosed genetic test → liability narrative → employee resistance → enforcement and settlement

The sequence of events

1. injury claim
2. employer-directed medical exam
3. undisclosed genetic test
4. liability narrative
5. employee resistance
6. enforcement and settlement

What became inferable or exposed

Employee samples and hereditary-condition testing

BNSF tested or sought to test employees pursuing carpal-tunnel injury claims for a hereditary condition without adequate knowledge or consent, producing an early landmark enforcement action against workplace genetic testing.

Affected parties and consent

Direct parties

Employees included in the testing dispute

Indirect parties

Connected institutions, communities, or resource users; no affected-person total is assigned.

Direct count

Unknown / not assigned

Indirect count

Unknown / not assigned

Consent status

The employment relationship can constrain a person’s choice. A general medical examination does not explain or authorize every genetic-information request.

Security dimensions

Confidentiality

The confidentiality question concerns employee samples and hereditary-condition testing. Exposure and further inference must be distinguished from the fact of collection or availability.

Integrity

The integrity question is whether the described material, permissions, processing, or interpretation can be relied upon. Genetic Testing as Institutional Power identifies the particular boundary examined here.

Availability

Access and continuity are assessed for the described event; potential effects are not presented as confirmed outages or losses.

Provenance

The relevant chain follows employee samples and hereditary-condition testing through the stages shown below. Missing public detail is not proof that internal records did not exist.

Consent, persistence, and relational exposure

Consent

The employment relationship can constrain a person’s choice. A general medical examination does not explain or authorize every genetic-information request.

Persistence

Later reuse depends on the actual asset and links to other records; no future misuse is asserted.

Relational exposure

Connected institutions, communities, or resource users; no affected-person total is assigned.

Case-specific assessment

confidentiality high; integrity moderate; consent critical; discrimination high; persistence high.

GeneticSecurity.org analysis

Proposed classification and its limits

Suggested GER: GER-1. Suggested GPR: GPR-4. Suggested GPI: GPI-3 if testing records survive.

These are proposed classifications from the supplied case dossier. Conditional scores describe an assumed exposure; they are not evidence that it occurred. A single numeric value is left unassigned when the asset or outcome is not sufficiently bounded.

What this case does not prove

The settlement did not adjudicate every disputed fact, and the tested variant was not a simple “carpal tunnel gene.”

Mitigations and lessons

• Purpose-specific consent
• Separation of occupational health from claims investigation
• No genetic testing absent lawful necessity
• Disclosure of test names
• Restricted results
• Deletion
• Anti-retaliation safeguards

Primary sources

• PRIMARY SOURCE eeoc.gov — Burlington Northern Santa Fe Genetic Testing source 1
• PRIMARY SOURCE genome.gov — Burlington Northern Santa Fe Genetic Testing source 2

Secondary sources

No additional source listed. See the evidence notes for limitations.

Related concepts

• Genetic Exposure Radius — Scope of relational exposure
• Genetic Persistence Risk — Durability after compromise
• Genetic Provenance Integrity — Verifiability of the chain of custody

Related cases

• Case 038 — Compare Lowe v. Atlas Logistics for genetic protection is not limited to disease risk. This case focuses on genetic testing as institutional power.
• Case 039 — Compare Fabricut And The First EEOC GINA Settlement for family history is genetic information. This case focuses on genetic testing as institutional power.
• Case 040 — Compare Norman-Bloodsaw v. Lawrence Berkeley Laboratory for general consent is not specific consent. This case focuses on genetic testing as institutional power.

Policy and standards

Review and correction history

Source edition: September 19, 2026. Imported case account; no substantive corrections recorded.

Cite this case

GS-CASE-037. BNSF: Secret Genetic Testing in a Workplace Injury Program. GeneticSecurity.org. https://geneticsecurity.org/cases/037-bnsf-secret-employee-genetic-testing/