[Accujack]

> there is the reasonable expectation that that data is not and was never safe

This is key, and not everyone has this expectation when they use these services. Most people do not, and they're not entirely wrong. If you examine the various genetic testing corporations' user agreements, many of them place explicit limits on what happens to original DNA or replicated copies if the company is sold, merged, or otherwise changes. Companies do tend to hold to that kind of legal agreement provided it was sincere in the first place (there's no fine print providing loopholes) because it can get them sued.

Even the companies providing genetic data for research aren't providing the original DNA, only marker or SNP data, and it's probably de-identified to comply with HIPAA and other privacy laws.

The corporation