The expansion of DNA collection to include millions of people who have been arrested or detained but not convicted is raising privacy concerns.