What happens to your saliva sample after the analysis
The essentials at a glance
The saliva sample is read in the laboratory, the report is then generated, and the sample and the sequence that was read are subsequently destroyed after a promised period. The provider decides how long this period is. Under Article 9 of the General Data Protection Regulation, genetic data belong to a particularly protected category whose processing is generally prohibited.
The legal situation is different from what many people assume. The Genetic Diagnostics Act regulates genetic testing for medical purposes, for establishing parentage, in the insurance sector, and in employment. A purely nutritional and lifestyle analysis does not fall into these four areas, which is why the General Data Protection Regulation provides the framework there.
You will first read the direct answer. This is followed by the legal framework in its exact wording, the special status of genetic data, the sample's journey station by station, the destruction periods, what pseudonymization does, three common statements checked against the facts, the points to check before ordering, your rights, a comparison of three types of data, and the limitations.
What to expect in this article
1. DNA test and data protection: what happens to the saliva sample
2. Which law applies to a nutritional analysis
3. Why genetic data are a category of their own
4. The sample's journey, station by station
5. When the sample and sequence are destroyed
6. What pseudonymization does and does not achieve
7. Three common statements about data protection in genetic testing
8. What you can check before ordering
9. What rights you have with respect to the provider
10. Genetic data, blood values, and behavioral data compared
11. Limitations: what data protection cannot do
12. What really matters when it comes to data protection
Frequently asked questions
Sources
DNA test and data protection: what happens to the saliva sample
The sample is processed in the laboratory, the relevant positions in the genetic material are read, and the report is generated from them. Afterward, the saliva sample and DNA sequence at mybody®x (MYBODY Lab GmbH) are completely destroyed two months after the analysis is completed. The sample is pseudonymized throughout the entire process.
Two months is not an arbitrary period. It covers the time during which questions about the report or a technical repeat of the analysis are still possible. After that, the sample no longer serves a purpose, and a sample without a purpose is a risk with no corresponding benefit.
The DNA analysis is intended for nutritional and lifestyle counseling. It is not a diagnostic procedure, does not predict illness, and does not replace a medical examination or consultation. Genetic variants describe probabilities in population groups, not predetermined outcomes for individuals.
Key message
A sample that no longer serves a purpose is a risk with no corresponding benefit. That is why the retention period is the most meaningful piece of information on a product page.
Which law applies to a nutritional analysis
In discussions about genetic tests, the reference to the Genetic Diagnostics Act comes up regularly. This law does in fact contain a very clear rule on how samples are handled, and it reads as follows.
Documented source
“A genetic sample may be used only for the purposes for which it was collected.”
Genetic Diagnostics Act (GenDG)
Section 13(1), first sentence, Act of July 31, 2009
The same subsection obliges the responsible person to destroy the genetic sample without delay as soon as it is no longer needed for these purposes or the data subject has withdrawn their consent.
Why this paragraph nevertheless does not directly apply to a nutrition analysis
Section 2(1) of the Act itself describes what it covers: genetic examinations for medical purposes, to clarify parentage, and in the insurance and employment sectors. An analysis covering nutrition and lifestyle topics does not belong to any of these four areas.
This does not mean that there is a lawless area. It means that a different framework applies, namely the General Data Protection Regulation, and that the destruction period at a lifestyle provider is a voluntary commitment, not a statutory obligation.
This is the most important sentence in this article, and if read incorrectly, it argues against the product itself. Read correctly, it means: Check the promise instead of relying on a law that is not applicable here at all.
Where the boundary between the two worlds lies
The dividing line is the purpose of the examination, not the procedure. The same saliva sample may fall under the Genetic Diagnostics Act or not, depending on what it is analyzed for. An examination for a disease falls under it; an analysis of nutritional predispositions does not.
In practice, this leads to a clear expectation of a provider. Anyone selling a lifestyle analysis may not present it as a medical examination, because doing so would trigger precisely the requirements to which they are not subject. A provider that advertises diagnosis is thereby making a legal promise, not a marketing promise.
For you as a reader, this is a useful distinguishing feature. Where diagnosis is mentioned, a medical framework applies. Where nutrition and lifestyle counseling is mentioned, the data protection framework applies, and the key question is then which deadlines have been promised.
Why genetic data are a separate category
In Article 9, the General Data Protection Regulation lists categories of data that receive special protection. Genetic data are expressly included, together with biometric data and health data, and their processing is in principle prohibited.
In principle, prohibited means that it is permitted only when one of the exceptions listed in the same article applies. The practically most important one is the explicit consent of the data subject, and that is precisely what every lifestyle analysis provider relies on.
For you, this has an immediate consequence. Your consent is the legal basis on which all processing rests, and you can withdraw it. This makes withdrawal not an exceptional case, but the built-in emergency exit.
The difference from any other health data
A blood value describes a condition that may be different in six months. A password can be replaced. A sequence remains, and it describes not only you but, in part, your relatives as well.
This second characteristic is rarely taken into account and is the real reason for the special status under Article 9. When someone makes decisions about their own genetic data, they are partly deciding about data they share with other people.
What distinguishes explicit consent from ordinary consent
Article 9 requires not just any consent for this category of data, but explicit consent. That is a higher standard than the implied consent sufficient for many other types of processing.
The difference is visible in the design. Explicit consent is a separate checkbox that must be actively selected, with clear text beside it—not a preselected box and not a reference to the general terms and conditions.
This makes the ordering process itself a checkpoint. Anyone who does not see a separate consent to the processing of genetic data when ordering should ask questions before sending in the sample.
The sample’s journey, station by station
The basic process is the same for DNA analyses using saliva, regardless of where they are performed. It has five stages, and at each one there is exactly one question to ask.
From ordering to destruction
Ordering and registration
The test kit is shipped with an identification number. The question at this stage is which personal details are actually requested and why.
Collection at home and return shipment
The saliva sample is collected at home and mailed in. From this point on, the sample bears an identification number rather than a name. The question is where the number and the person are linked.
Analysis in the laboratory
The predetermined positions in the genetic material are analyzed. The question is which laboratory carries this out and whether this information is provided at all.
Report and provision
The evaluation report is created from the raw data and made available to you digitally. The question is how the transmission is secured.
Destruction of the sample and sequence
At mybody®x, this happens two months after the analysis is completed. The question is whether any deadline is stated at all and whether it is based on a date or on a vague impression.
When the sample and sequence are destroyed
Three things are often lumped together in discussions, but they must be distinguished: the physical sample, the sequence that is read, and the completed report. They have different lifespans and different risks.
The physical sample is the tube containing the saliva. It is the only one of the three items that can be physically destroyed, and it is also the one from which the most additional information could subsequently be extracted.
The sequence is the dataset that was read. At mybody®x, it too is destroyed two months after the analysis is completed, together with the sample. The report, by contrast, is the result you keep and control.
Why the distinction matters in practice
A statement such as “your sample will be destroyed after the analysis” sounds comprehensive but leaves the sequence unspecified. That is where the more significant dataset lies, because it can be copied at will, whereas a tube exists physically.
The objection that this distinction seems overly subtle is understandable. It is not, because it determines whether anything usable for analysis still exists after two months. Destroying a tube while retaining the sequence does not change the data situation.
The third item, the report, is usually overlooked in discussions. It contains no raw data, but rather interpretations, and it is held by you. This makes it the only one of the three items whose protection is entirely in your hands.
Chapter at a glance
A DNA analysis produces three things with different lifespans. At mybody®x, the physical saliva sample and the sequence read from it are completely destroyed two months after the analysis is completed. The analysis report remains with you and is managed by you. Anyone who wants to assess a provider’s data protection must therefore ask separately about all three items, because a statement about the sample says nothing about the sequence.
What pseudonymization does and does not achieve
Pseudonymization means that the sample is processed in the laboratory under an identification number rather than your name. The association exists; it is simply kept elsewhere and secured separately.
This is genuine protection, not a label. Anyone who gains access to the laboratory’s systems sees genotypes linked to a number, and that number alone cannot identify anyone.
But it is not the same as anonymization. With anonymous data, the association can no longer be reconstructed; with pseudonymous data, it can be reconstructed using the key. Anyone who understands this difference reads privacy policies more carefully.
Why true anonymization does not work here
Without the association, you could not receive your own report, and you could not effectively withdraw your consent because no one would know which sample should be withdrawn. The association is therefore a prerequisite for exercising your rights.
More precisely: The risk is not the association itself, but retaining it beyond the purpose. That is why the retention period is the crucial detail—not the word “pseudonymized.”
How to find this in a privacy policy
Privacy policies are long and written in language that is too abstract for everyday use. A targeted search is therefore more useful than reading them in full, and three search terms are enough.
The first is the word “deletion” or “destruction.” If a period is specified, the question is answered. If it merely says that data will be deleted once the purpose no longer applies, the text repeats the law without making a commitment.
The second is the term “processor.” This refers to the service providers involved in the process. The third is the term “third country,” because it indicates whether data leave the European Union. Both terms are cumbersome, but in two minutes they answer what ten pages of prose cannot.
Three common statements about data protection in genetic testing
The following three statements appear in forums, comment sections, and occasionally in advice articles. All three are common enough to warrant examination.
Checked against the applicable law
Widespread
“The Genetic Diagnostics Act applies to all genetic tests.”
Substantiated
Under Section 2(1) of the Genetic Diagnostics Act, it applies to genetic examinations for medical purposes, for clarifying parentage, and in the insurance sector and the workplace (Act of July 31, 2009). Nutrition and lifestyle analyses are not covered by it.
Widespread
“My insurance company may ask about the result later.”
Substantiated
The German Federal Ministry of Health explains regarding the Genetic Diagnostics Act that, when concluding a contract, insurance companies are generally prohibited from requesting either the performance of a genetic examination or information about examinations already performed (as of 2025).
Widespread
“Pseudonymized means that no one can access my data anymore.”
Substantiated
Pseudonymization separates the identification number from the person, but does not eliminate the link between them. Only the destruction of the sample and sequence ends the processing. At mybody®x, this takes place two months after the analysis is completed.
The second point needs an addition so that the clarification does not become an overgeneralization. The rule in the Genetic Diagnostics Act concerns the insurance sector in Germany and is linked to the conclusion of a contract. For questions about your own contract, the insurance company itself is the right point of contact.
The first point also deserves some context, so that it does not lead to distrust of the entire category. The fact that the Genetic Diagnostics Act does not apply to lifestyle analyses does not mean that nobody is responsible. The data protection supervisory authority is responsible, and the applicable standard is the General Data Protection Regulation.
In practical terms, this means that anyone who believes a provider is not honoring its own commitments should not contact a medical authority, but rather the competent data protection supervisory authority. This address is listed in every privacy policy, usually at the very end.
What you can check before ordering
Three details are decisive, and all three appear on the page before purchase—or they do not. First, a deadline for destruction; second, a statement on whether the sequence is handled separately from the sample; third, information about transmission.
A sample that no longer serves a purpose is a risk without any benefit in return.
At mybody®x, the three answers are: two months after completion of the analysis for the sample and sequence together, pseudonymized processing in the laboratory, and SSL-encrypted transmission. These details can be checked because they specify a number and a procedure.
A fourth point is worth examining, although it is rarely discussed: disclosure to third parties. This does not mean selling data, but the everyday question of which service providers are involved in the process and what they can see. A shipping service provider sees an address; a laboratory sees an identification number.
The fifth point concerns purpose limitation. A privacy policy that, in addition to evaluation, mentions use for research or improvement purposes thereby describes a second processing activity. Whether you want this is your decision, but it should be a separate choice and not hidden in the same checkbox.
DNA analysis from saliva
WeightLoss | SLIM DNA test
More than 80 genetic variations from a saliva sample, evaluated in 24 analysis reports across 5 chapters. The sample and sequence are destroyed two months after completion of the analysis. What the test does not do: it does not provide a diagnosis, predict weight-loss success, or replace a medical examination.
Laboratory evaluation 15–25 business days after receipt of the sample
Product page details, accessed 12 August 2026
What rights you have vis-à-vis the provider
Because the processing is based on your consent, you have the right to withdraw it. The withdrawal takes effect for the future and ends processing from the time it reaches the provider.
There is also the right of access. You can ask which data concerning you are processed, for what purpose, and for how long. The answer is a practical test of whether a privacy policy corresponds to what actually happens.
The timing of the withdrawal makes a difference. Before analysis, it means that the sample will not be evaluated. After analysis, the report already exists, and the withdrawal concerns the further processing of the sample and sequence.
A practical note on wording
Withdrawal does not require a reason or any particular form. It is nevertheless useful to provide the kit’s identification number, as this allows the sample to be clearly assigned.
Anyone who wants to be sure asks for written confirmation of the destruction. A provider that supplies this confirmation without further questions has a functioning process. One that evades the request may not.
Two More Rights That Are Rarely Used
The first is the right to rectification. It sounds pointless for genetic data, but it is not: What is affected are the details surrounding the finding, such as date of birth, sex, and contact details, which are incorporated into a report and can influence it.
The second is the right to data portability. It allows you to obtain the data stored about you in a commonly used format. For an analysis whose raw data are deleted after two months anyway, the timing of the request is therefore decisive.
In other words, anyone who wants to use both does so early, not a year later. Once the period has expired, the answer is brief because nothing remains, and that is the intended state.
Genetic data, blood values, and behavioral data compared
The special status of genetic data becomes clearer when it is compared with two other types of data that also arise in the healthcare sector. The table compares them according to the same four criteria.
| Criterion | Genetic data | Blood values | Behavioral data |
|---|---|---|---|
| What they describe | An immutable predisposition that also affects relatives in part | A condition at the time of sampling | Actions over a period of time, such as diet or exercise |
| How long they remain valid | For life | Weeks to months | Only for the period covered |
| Whether they can be changed | No | Yes, through time and lifestyle | Yes, starting the next day |
| Classification under Article 9 of the GDPR | Explicitly identified; processing is generally prohibited | Explicitly identified as health data | Generally not mentioned unless it becomes health-related |
The third row explains the second special characteristic. Someone with an unfavorable blood value may be able to change it. Someone who carries a particular genetic variant still carries it even if they make different choices.
What This Means for Retention
For blood values, longer retention is even useful because a trend can be identified from a series of measurements. A single value says little; three values over eighteen months say significantly more.
The opposite is true for genetic data. A second measurement would produce the same result, so longer retention provides no additional insight. What it creates is solely additional time during which something can go wrong.
This asymmetry leads to a simple expectation: For blood data, a retention period is an option; for genetic data, a short period is a quality feature. A provider that treats both the same has failed to recognize the difference.
Boundaries: What Data Protection Cannot Deliver
A destruction deadline does not prove that destruction took place. It is a commitment whose compliance you cannot verify externally, and this applies to every provider in this market.
Verification tools are still available, but only indirectly. Written confirmation upon request, a privacy policy with figures instead of adjectives, and information that is consistent with the explanation together provide a useful indication.
A second limitation concerns the report. Once it is in your possession, you determine what happens to it, which means part of the risk lies with you. Anyone who places the file in a shared folder has created a data protection problem that no deadline can prevent.
The third limitation is substantive. Data protection says nothing about the validity of a test’s results. An analysis can handle data exemplary well and still produce results that are less meaningful than the advertising promises. How reliable these results are is explained in the article on how credible DNA tests are.
A fourth limitation concerns the future
A commitment applies to the provider that made it. What happens if a company is sold or files for bankruptcy is covered in hardly any privacy policy, and for the affected person, it is the worst-case scenario.
A short destruction period is the most effective precaution available here. What no longer exists after two months cannot appear in any future scenario, regardless of who operates which systems then.
This list reads like an argument against every commitment. It is an argument for checking commitments rather than believing them or rejecting them wholesale.
What really matters when it comes to data protection
If you take away one action from this article, let it be this: Open the privacy policy of the provider you are considering and look for a number. A deadline, a period, or a date.
The reason is unremarkable. Adjectives such as “highest security standards” cost nothing and say nothing. A deadline is a commitment against which a provider can be measured, and anyone who does not specify one has made no commitment.
It started with the question of what happens to the saliva sample. The most honest answer is this: The law that everyone cites does not apply here at all. What remains is the provider’s commitment, which you can read before placing an order.
Frequently asked questions
What happens to my saliva sample after the analysis?
At mybody®x, the saliva sample and DNA sequence are completely destroyed two months after the analysis is completed. During processing, the sample is pseudonymized using an identification number rather than your name, and the transfer is SSL-encrypted. The evaluation report is not affected, as you retain control over it.
Does the Genetic Diagnostics Act apply to a DNA test for nutrition?
Not directly. Under Section 2(1), the law applies to genetic examinations for medical purposes, to clarify parentage, and in the insurance and employment sectors. A nutrition and lifestyle analysis does not fall into any of these four areas. The General Data Protection Regulation applies there, and the provider's retention period is a voluntary commitment.
Can my insurance company require the results of a DNA test?
The Federal Ministry of Health explains regarding the Genetic Diagnostics Act that, when concluding a contract, insurance companies generally may neither require a genetic examination to be performed nor request information about examinations already performed (as of 2025). The rule applies to the conclusion of the contract. For questions about your own existing contract, the insurance company itself is the right point of contact.
What is the difference between pseudonymized and anonymous?
With pseudonymized data, the sample is processed under an identification number, while the link to your identity continues to exist separately. With anonymous data, this link can no longer be established. Genuine anonymization is not possible for a DNA analysis, because otherwise you could neither receive your report nor effectively withdraw your consent.
Can I withdraw my consent afterward?
Yes. Because the processing of genetic data under Article 9 of the General Data Protection Regulation is based on your explicit consent, you can withdraw it, and the withdrawal applies going forward. Before the analysis, this means that the sample will not be evaluated. Afterward, it applies to the further processing of the sample and sequence. Be sure to state your kit's identification number and ask for written confirmation.
Next step
Find the deadline first, then decide
If you have found a number in the privacy policy and it is sufficient for you, the next question concerns the content. How reliable the results of an analysis are is explained in the accompanying article.
To WeightLoss SLIM How reliable are DNA tests?Read more
You might also be interested in
An overview of the Swiss legal situation, supplementing the German framework here.
The practical process of sample collection, described here only as a step.
Sources
- Act on Genetic Examinations in Humans (Genetic Diagnostics Act – GenDG) of July 31, 2009, Sections 2 and 13 – legislative text as PDF
- Federal Ministry of Health: Genetic Diagnostics Act, definition of terms, as of December 18, 2025 – bundesgesundheitsministerium.de
- Regulation (EU) 2016/679 (General Data Protection Regulation), Article 9 – dsgvo-gesetz.de
The verbatim quotation concerning the use of genetic samples for a specific purpose, the obligation to destroy them without delay, and the scope of application with the four stated purposes are taken from source [1]. The information on the prohibition against providing information to insurance companies comes from [2]. The classification of genetic data as a special category of personal data and the general prohibition on processing, subject to the exception of explicit consent, are based on [3]. Information on price, scope, sample type, laboratory, pseudonymization, encryption, and the destruction of the sample and sequence after two months was provided by mybody®x, accessed on August 12, 2026; processing times follow the central specification for DNA tests. This article is an editorial assessment, not legal advice. All sources were accessed and reviewed on August 12, 2026.
mybody®x Editorial & Subject-Matter Team
Nutrigenetics Laboratory diagnostics Nutritional science Blood analysis interpretation
This article was created by the mybody®x editorial and subject-matter team. The team combines nutrigenetics, laboratory diagnostics, and nutritional science. Contributors are listed on the authors page.
Published on August 12, 2026 · Last updated on August 12, 2026
The DNA analysis is intended for nutritional and lifestyle counseling. It is not a diagnostic procedure, does not predict illness, and does not replace a medical examination or consultation. Genetic variants describe probabilities in population groups, not predetermined outcomes for individuals.
Share now:
DNA tests for weight loss: what the evidence shows and what it doesn’t
Understanding liver values: which ones matter and what they show