No country makes every form of DNA testing illegal, but several countries where DNA testing is illegal for consumers do exist: France, Germany, and Israel all prohibit direct-to-consumer kits like those sold by 23andMe and AncestryDNA, and France attaches criminal penalties to the person who simply orders one. Other countries, including South Korea and China, restrict specific categories of genetic testing rather than banning consumer kits outright. Whether a test is legal usually depends on what kind it is (medical, forensic, ancestry, or paternity) and who is running it.
France Treats Ordering a Kit as a Crime
France has the strictest rules of any major country. Ordering a direct-to-consumer ancestry, health, or paternity kit is a criminal offense, punishable by a €3,750 fine for the person who orders it. Companies that provide such tests face fines up to €15,000. The unusual feature is that the criminal code targets the customer, not only the provider.
French law permits genetic testing in a narrow set of situations. A doctor can order a genetic test as part of medical care. A researcher can collect samples for a defined scientific study. A judge can order a paternity test during legal proceedings to establish or challenge a parent-child relationship, and police and the military can use genetic evidence in certain situations.1Service Public. In What Setting Can a Paternity Test Be Performed? Anything outside those channels is off-limits.
The reasoning combines privacy, paternalism, and family-law concerns. Legislators have worried that unsupervised testing could disrupt family structures through surprise paternity discoveries, and that consumers might misinterpret health results without professional guidance. France’s 2021 bioethics law expanded some medical access to relatives’ genetic results but left the consumer prohibition in place.2Library of Congress. France: President Macron Signs New Law on Bioethics
Germany Requires a Doctor for Every Genetic Test
Germany’s Gene Diagnostics Act (Gendiagnostikgesetz) effectively bans consumer genetic testing by requiring that all genetic examinations be conducted by a physician, and diagnostic tests specifically by a certified specialist in human genetics. Informed consent from the person tested is required, and the law reaches medical, insurance, and paternity contexts alike.
Secret paternity tests are singled out. Testing someone’s DNA without their knowledge and consent is illegal, with fines up to €5,000. A parent who quietly swabs a child’s cheek and mails the sample to a lab has committed an offense. Establishing paternity outside mutual agreement means going through the courts.
Insurance is limited too. Insurers generally cannot demand or use genetic test results, with a narrow exception for life insurance policies above a certain premium threshold, where an insurer may ask for results of tests the applicant has already had done.
Israel Sells Kits Only With a Prescription or Court Order
Israel’s Genetic Information Law prohibits selling direct-to-consumer DNA kits to the public. Ancestry kits that sit on U.S. pharmacy shelves cannot be bought in Israel without either a doctor’s prescription or a court order, and Israeli companies that manufacture DNA test products cannot sell them domestically either.
Any genetic testing must include a physician’s explanation and informed consent, and it must be performed in a recognized, licensed genetic laboratory. The court-order route involves a judge reviewing the reasons for the test and overseeing the process. Israelis who want to take part in the global consumer testing trend generally have to look outside the country.
South Korea Allows Only Wellness Traits
South Korea sits in the middle. The Bioethics and Safety Act does not ban direct-to-consumer testing outright, but it sharply limits what those tests can report. Consumer kits may cover wellness traits only: caffeine metabolism, body mass index, hair thickness, skin characteristics, exercise aptitude, and similar items. About 70 wellness items are approved.
Disease-susceptibility information is the line. A South Korean consumer kit cannot tell you your genetic risk for cancer, heart disease, or other serious conditions; that requires a medical institution. Regulators have considered expanding the approved categories but have moved slowly, citing worries about misinterpretation and data misuse.
China Controls Genetic Data as a National-Security Matter
China regulates human genetic material as a matter of national security rather than personal privacy alone. The Regulations on the Management of Human Genetic Resources, issued by the State Council, require ethics reviews, written informed consent, and adherence to technical standards set by government agencies for anyone collecting, preserving, or using human genetic resources.3THE STATE COUNCIL. Regulations on Management of Human Genetic Resources
The distinctive part is the export control. Providing Chinese citizens’ genetic resources abroad requires government approval, and the regulations state that no such activity may violate national security or the public interest. Foreign entities face particular scrutiny. These restrictions go well beyond what most countries impose.
Countries That Ban Prenatal Sex-Determination Testing
A separate category of restriction targets prenatal sex identification, driven by concerns about sex-selective abortion and skewed population ratios.
India has the most comprehensive regime. The Pre-Conception and Pre-Natal Diagnostic Techniques Act, originally passed in 1994 and strengthened in 2002, prohibits healthcare providers from disclosing a fetus’s sex during pregnancy except to detect sex-linked genetic conditions. The amended law imposed penalties on medical practitioners, required ultrasound equipment to be registered, and gave authorities extensive search-and-seizure powers. Violators face suspension of registration and criminal prosecution.
China’s Population and Family Planning Law, enacted in 2002, prohibits the use of ultrasound or other techniques to identify fetal sex for non-medical purposes. Authorities have also banned mailing blood samples overseas for sex determination and directed search engines to block advertisements for such services.
How EU Data Protection Shapes What Is Available
Even in European countries without an outright ban, the EU’s General Data Protection Regulation constrains genetic testing. GDPR treats genetic data as a “special category” of personal data, and processing it is prohibited by default. Companies must fit within a narrow exemption, such as the individual’s explicit consent, a substantial public interest defined by law, or scientific research with proper safeguards.
Member states can layer their own restrictions on top of GDPR. A test that is legal in one EU country may not satisfy the rules in another, and a company that operates lawfully in one market may not offer the same product in the next. The practical effect for consumers is that even where kits are available in Europe, the providers face much tighter data-handling obligations than their U.S. counterparts, and those obligations shape which products actually reach the shelves.
When DNA Testing Is Still Allowed in Restrictive Countries
Almost every country that limits consumer testing still permits it in controlled circumstances. The exceptions follow a predictable pattern.
- Medical diagnosis ordered by a physician is legal in essentially every jurisdiction that bans consumer kits, including France, Germany, and Israel, though informed-consent and counseling requirements vary.
- Court-ordered paternity tests are the only legal route in France, where a judge must order the test to establish or challenge a parent-child relationship.1Service Public. In What Setting Can a Paternity Test Be Performed?
- Criminal forensic testing by law enforcement is generally permitted with judicial oversight and chain-of-custody rules.
- Immigration testing is accepted by the U.S. Department of State to prove a biological relationship when documentary evidence is insufficient for a visa or citizenship application. The lab must be accredited by the American Association of Blood Banks (AABB), and results must be sent directly from the lab to the embassy or consulate.4U.S. Department of State. DNA Relationship Testing Procedures
- Surrogacy and assisted reproduction often rely on DNA testing to prove a genetic relationship for citizenship. The U.S. requires that at least one parent show a genetic or gestational connection to the child when applying for a Consular Report of Birth Abroad.5U.S. Department of State. Assisted Reproductive Technology (ART) and Surrogacy Abroad
- Scientific research is generally permitted subject to ethics board review and participant consent.
What Happens if You Try to Order a Kit From a Restricted Country
The major testing companies enforce country-level rules on their own. 23andMe only ships to a listed set of countries and territories. If your country is not on the list, the company refuses the sale and states that it “cannot recommend our service to you or endorse alternative ways for you to receive our service.”623andMe. What Countries Do You Ship To?
Geography follows the kit even where sales are permitted. A kit bought through the U.S. store must be used and returned from within the United States. A Canadian kit stays in Canada. A European kit must be used and returned from the same country it shipped to. Companies impose these rules because they have to comply with local law in each market, and mixing jurisdictions creates regulatory risk on both sides.623andMe. What Countries Do You Ship To?
Shipping biological samples across borders is also a customs matter. The United States requires all imported biological materials to be properly documented, labeled, packaged, and declared, and noncompliance can bring delays, seizure, or civil and criminal penalties.7U.S. Customs and Border Protection. Importing Biological Materials into the United States If you live in a country that bans consumer kits, trying to route a sample through a friend abroad doesn’t sidestep the ban; it adds a second set of laws to the problem.