The Border Meets the Base Pair: How Immigration Enforcement Is Edging Toward Genomic Data

For most of the twentieth century, the biometric record of an immigrant's encounter with the American state was written in ink and inked fingers. That record has since migrated to digital fingerprint repositories, facial recognition arrays, and iris-scan databases. Deoxyribonucleic acid — the most identifying biometric a person possesses — has so far played a smaller role in immigration enforcement. The question before policymakers is not whether the technical capability exists to change that, but whether the legal guardrails will arrive before the practice does.

The Existing Foothold: DNA in Family-Based Immigration

Federal law already contains one deliberate, narrow channel for genetics in immigration. Since 2019, the State Department has had authority to request DNA testing in certain family-based visa cases where documentary evidence of a relationship is deemed insufficient. Participation is formally voluntary: an applicant who declines testing does not automatically lose the visa, but the underlying relationship claim must then be proven by other means — a burden that falls hardest on applicants from regions where civil registries were destroyed by war or never functioned reliably.

Accredited laboratories affiliated with the American Association of Blood Banks (AABB) handle these tests, and results are supposed to be limited to confirming the claimed biological relationship. In practice, the arrangement establishes something consequential beyond any single case: a functioning pipeline in which federal agencies routinely receive, review, and retain genetic-derived findings about noncitizens and, implicitly, their citizen relatives.

Procurement Signals and the Biometric Expansion

The second channel is less visible and considerably less settled. U.S. Customs and Border Protection and U.S. Immigration and Customs Enforcement have spent two decades expanding biometric collection — first through the now-defunct IDENT and today through the Office of Biometric Identity Management (OBIM), which consolidates face, fingerprint, and iris records. DNA is conspicuously absent from that architecture today, but the absence is a matter of policy choice, not statutory prohibition.

Public procurement records and academic reporting have documented federal interest in rapid field-deployable DNA sequencing, including research supported through defense and homeland security channels. None of these programs targets immigration casework directly. Yet the same instruments — portable sequencers, kinship-analysis software, reference-panel databases — are precisely what a border agency would need if it chose to add genetic kinship verification to its toolkit. The Institute's prior work on data brokers between consumer genomics and insurance underwriting identified how commercial intermediaries move genetic inferences into new institutional contexts. Immigration enforcement presents a parallel pathway, with government demand rather than commercial demand as the pull.

What the Courts Have Said — and What They Haven't

The constitutional architecture here is thinner than most Americans assume. In Maryland v. King (2013), the Supreme Court upheld DNA collection from people arrested for serious crimes, treating DNA as an extension of legitimate booking identification. Riley v. California (2014) and later cases carved out heightened protection for the contents of digital devices, and Carpenter v. United States (2018) suggested that certain aggregations of personal data trigger Fourth Amendment scrutiny. But no controlling decision addresses compelled DNA collection from noncitizens at the border or in immigration detention, where courts have historically afforded the government substantial latitude under the border-search doctrine.

Equally important is what the statutes do not say. The Genetic Information Nondiscrimination Act (GINA) prohibits genetic discrimination in health insurance and employment — domains that do not cover immigration proceedings. The Privacy Act of 1974 governs federal recordkeeping but contains exceptions for law enforcement purposes that could swallow protection in an enforcement context. And the FBI's Combined DNA Index System (CODIS) restricts its forensic databases to criminal justice uses; there is currently no statutory bar on a separate immigration-linked genetic repository being created outside CODIS entirely.

Where the Line Should Be Drawn

Three governance failures stand out. First, there is no purpose-limitation statute: genetic material or data collected for a consensual visa kinship test carries no clear legal prohibition against reuse in enforcement or fraud investigations. Second, there is no meaningful transparency obligation: agencies are not required to publish what genetic-derived data they hold, from whom, or under what retention schedule. Third, there is no framework for the collateral exposure of family members — a genetic test undertaken by one visa applicant necessarily reveals information about relatives, including U.S. citizens, who gave no consent.

None of these gaps requires speculative technology to exploit. They could be closed with ordinary legislation: codified purpose limitations, retention and deletion mandates, audit requirements, and an express prohibition on transferring immigration-linked genetic data to criminal databases absent a warrant. Several state legislatures have begun experimenting with genetic privacy statutes of broader scope; a federal floor is the more durable solution for a domain the Constitution assigns to the national government.

The Stakes of Inaction

Genomic data differs from a fingerprint in one decisive respect: it is relational and permanent. A fingerprint identifies one person; a genome identifies a bloodline. A future in which a saliva swab becomes a routine element of an immigration file is not a future in which only noncitizens bear the risk — it is one in which American citizens with mixed-status families inherit a permanent, unconsented genetic record inside an enforcement database.

The window for establishing clear rules is open, and it is not guaranteed to stay open. As this Institute has argued in earlier work on self-auditing and federated data governance, institutional practice tends to outrun institutional constraint. Immigration genomics is the next frontier where that pattern will be tested — unless Congress chooses to write the boundary down first.