DNA data is available even if users opt-out in a landmark ruling that could have serious privacy implications.