[steveitis]

I used to work in a mental hospital, and we were very serious about HIPAA.

Anyhow, HIPAA only covers personally identifiable patient information so I think they'd be cool as long as it couldn't be traced back to the original person.

Although theoretically the DNA itself could be considered personally identifiable. I guess it'd be up to the courts to decide really.