26 September 2023

Facing off: Does DNA facial prediction threaten our privacy?

Start the conversation

Caitlin Curtis and James Hereward say it will soon be possible to predict the physical appearance of an unknown person from DNA, with massive implications for protecting our privacy.


Photo: Sharon McCutcheon

Everywhere we go we leave behind bits of DNA.

We can already use this DNA to predict some traits, such as eye, skin and hair colour.

Soon it may be possible to accurately reconstruct your whole face from these traces.

This is the world of “DNA phenotyping” — reconstructing physical features from genetic data.

Research studies and companies like 23andMe sometimes share genetic data that has been “anonymised” by removing names.

But can we ensure its privacy if we can predict the face of its owner?

Predicting hair, eye and skin colour

DNA phenotyping has been an active area of research by academics for several years now.

Forensic biology researchers Manfred Kayser and Susan Walsh, among others, have pioneered several DNA phenotyping methods for forensics.

In 2010, they developed the IrisPlex system, which uses six DNA markers to determine whether someone has blue or brown eyes.

In 2012, additional markers were included to predict hair colour.

Last year the group added skin colour.

These tests have been made available via a website and anyone who has access to their genetic data can try it out.

The full picture

Research on DNA phenotyping has advanced rapidly in the past year with the application of machine learning approaches, but the extent of our current capabilities is still hotly debated.

Last year, researchers from American geneticist Craig Venter’s company, Human Longevity made detailed measurements of the physical attributes of around 1,000 people.

Whole genomes (our complete genetic code) were sequenced and the data combined to make models that predict 3D facial structure, voice, biological age, height, weight, body mass index, eye colour and skin colour.

The study received strong backlash from a number of prominent scientists, including Yaniv Erlich, aka the “genome hacker”.

The study seemed to predict average faces based on sex and ancestry, rather than specific faces of individuals.

The method of judging the predictions on small ethnically mixed cohorts was also criticised.

Even with accurate facial predictions, Erlich noted that for this approach to identify someone in the real world: “an adversary … would have to create [a] population scale database that includes height, face morphology, digital voice signatures and demographic data of every person they want to identify.”

Because without a detailed biometric database you can’t get from the physical predictions to a name.

A database to match?

It turns out that the Australian Government is in the process of building such a database.

“The Capability” is a proposed biometric and facial recognition system that will match CCTV footage to information from passports and driving licences.

Initially billed as a counter-terrorism measure, there are already reports the service may be provided for a fee to corporations.

At the same time, the Australian Tax Office has just initiated a voice recognition service.

It’s easy to imagine how this kind of system could be integrated with “The Capability”.

And it’s not only Australia establishing the capability to become a biometric, face-recognising surveillance state.

India is deploying the Aadhar system, and China leads the world in facial recognition.

DNA mugshots

At present, most forensic DNA profiling techniques rely on “anonymous” markers that match identity to a database, but reveal little else about a suspect.

With advances in genomic technology, forensic genetics is moving toward tests that can tell us much more about someone.

There are a number of companies that offer DNA phenotyping services for a fee.

One company, Parabon NanoLabs, claims to be able to accurately predict the physical appearance of an unknown person from DNA.

Police forces already use their services, including the Queensland Police in a recent case of a serial rapist.

The Parabon system is also based on a predictive model.

The company predicts skin colour, eye colour, hair colour, freckles, ancestry, and face shape from a DNA sample.

These predictions, the confidence around them, and a reconstruction made by a forensic artist are used to make a “Snapshot” profile.

As with any type of DNA evidence, there is a risk of miscarriages of justice, especially if the evidence is used in isolation.

Where will this all end up?

We only need to look at identical twins to see how much of our face is in our DNA.

The question is how many of the connections between DNA and our physical features will we be able to unlock in the future, and how long will it take us to get there?

Some features are relatively easy to predict.

Other traits will be more complicated because they are “polygenic”, meaning that many gene variants work together to produce the feature.

A recent study of hair colour genetics, for example, examined 300,000 people with European ancestry.

They found 110 new genetic markers linked to hair colour, but the prediction of some colours (black or red) is more reliable than others (blonde and brown).

The way that DNA codes our physical features might be different in people from different ancestral groups.

Currently, our ability to predict modern Europeans will be better than other groups — because our genetic databases are dominated by subjects with European ancestry.

As we employ increasingly sophisticated machine learning approaches on bigger (and more ethnically representative) databases, our ability to predict appearance from DNA is likely to improve dramatically.

Parabon’s services come with a disclaimer that the reconstructions should not be used with facial recognition systems.

The integration of these technologies is not impossible in the future, however, and raises questions about scope creep.

What does this mean for genetic privacy?

Despite the controversy around what we can do now, the science of DNA phenotyping is only going to get better.

The field shows us how much personal information is in our genetic data.

If you can reconstruct a mugshot from genetic data, removing the owner’s name won’t prevent re-identification.

Protecting the privacy of our genetic data in the future may mean that we have to come up with innovative ways of masking it — for example, genome cloaking, genome spiking, or encryption and blockchain-based platforms.

The more we understand about our genetic code the more difficult it will become to protect the privacy of our genetic data.

* Caitlin Curtis is a Research Fellow in the Centre for Policy Futures (Genomics) at the University of Queensland. She tweets at @DrCaitlinCurtis. James Hereward is a Research Fellow at the University of Queensland. He tweets at @HerewardJames.

This article first appeared at theconversation.com.

Start the conversation

Be among the first to get all the Public Sector and Defence news and views that matter.

Subscribe now and receive the latest news, delivered free to your inbox.

By submitting your email address you are agreeing to Region Group's terms and conditions and privacy policy.