Biological Surveillance Accountability.
1. Introduction
Biological Surveillance Accountability is a legal and constitutional framework concerned with the collection, monitoring, analysis, storage, sharing, and use of information derived from human biological characteristics. It examines how governments, law-enforcement agencies, healthcare institutions, research organisations, employers, and private technology companies should be held accountable when they use biological information to identify, classify, predict, or monitor individuals.
Biological surveillance may involve DNA profiling, biometric identification, facial recognition, fingerprint databases, genetic testing, physiological monitoring, and the use of biological information to predict health risks or behavioural characteristics.
The central legal question is:
How can society obtain the benefits of biological surveillance while preventing violations of privacy, human dignity, equality, bodily autonomy, and constitutional liberty?
For example, DNA profiling can help identify a criminal suspect or an unidentified deceased person. Biometric systems can help verify identity, and genetic surveillance can assist public-health investigations. However, the same technologies can be misused to monitor innocent people, discriminate against particular groups, expose familial relationships, or make consequential decisions based on inaccurate biological inferences.
Biological Surveillance Accountability therefore requires more than technological accuracy. It requires a lawful purpose, appropriate limits on data collection, independent oversight, transparent decision-making, effective remedies, and clear responsibility for misuse.
Important legal clarification: Biological Surveillance Accountability is an analytical legal concept rather than the name of a single, universally recognised statute or established legal doctrine. Its principles must be derived from existing constitutional provisions, privacy and data-protection laws, criminal-procedure rules, human-rights instruments, and judicial decisions.
This explanation primarily examines Indian law, with comparative reference to international case law.
2. Meaning and Scope of Biological Surveillance
2.1 Definition
Biological surveillance can be defined as the systematic collection, processing, examination, or use of information relating to a person's biological characteristics for identification, monitoring, investigation, prediction, classification, or administrative decision-making.
The concept encompasses several distinct activities.
| Form of surveillance | Example | Principal legal concern |
|---|---|---|
| DNA surveillance | Maintaining DNA profiles for criminal investigations | Genetic privacy and retention |
| Fingerprint surveillance | Searching fingerprint databases | Identification without appropriate safeguards |
| Facial recognition | Matching faces against surveillance databases | Privacy, accuracy, and mass monitoring |
| Iris and retinal scanning | Verifying identity through eye characteristics | Biometric security and consent |
| Genetic screening | Examining genetic predispositions | Discrimination and confidentiality |
| Physiological monitoring | Tracking heart rate or other bodily indicators | Bodily autonomy and sensitive information |
| Reproductive surveillance | Monitoring reproductive or pregnancy-related information | Reproductive autonomy and confidentiality |
| Public-health surveillance | Monitoring biological samples to identify infectious diseases | Public-health necessity and data minimisation |
| Familial DNA searching | Identifying suspects through genetic relationships | Privacy rights of relatives |
| Predictive biological profiling | Using biological indicators to estimate future risks | Scientific reliability, discrimination, and due process |
These categories should not be treated identically. A fingerprint used to unlock a personal device presents different issues from the compulsory collection of a DNA sample, the indefinite retention of genetic material, or the use of biological predictions to determine criminal liability.
The legal analysis must consider the nature of the information, the purpose of collection, the degree of intrusion, the consequences for the individual, and the safeguards available.
2.2 Biological surveillance versus ordinary surveillance
Ordinary surveillance may involve observing a person's movements, communications, or activities.
Biological surveillance can reveal additional information that is difficult or impossible to change. Genetic material may disclose information about ancestry, familial relationships, and aspects of health. Biometric identifiers can also permit persistent identification across different systems.
The distinction is particularly important where biological information is retained for future use beyond the original purpose for which it was collected.
The legal risk is not limited to what an authority knows today. It also includes what the authority might infer from the information in the future.
In S. and Marper v. the United Kingdom (2008), the European Court of Human Rights recognised the particularly sensitive nature of cellular samples and DNA profiles and held that their retention can interfere with the right to private life even when the retained information has not caused immediate harm. HUDOC
This principle is central to biological surveillance accountability: the absence of immediate injury does not automatically make the collection or retention of biological information lawful.
3. Constitutional Foundations of Biological Surveillance Accountability in India
Indian law does not establish a single constitutional provision specifically entitled Biological Surveillance Accountability. Instead, several constitutional guarantees govern the legality of biological surveillance.
3.1 Article 21: Right to life, personal liberty, and privacy
Article 21 of the Constitution of India provides that no person shall be deprived of life or personal liberty except according to a procedure established by law.
The protection of privacy under Article 21 is especially significant when the State collects or uses biological information.
Relevant interests include:
- Informational privacy: control over the collection and use of personal information.
- Bodily privacy: protection against unjustified physical intrusion.
- Genetic privacy: protection against unnecessary disclosure or exploitation of genetic information.
- Decisional autonomy: the ability to make important personal decisions without unjustified interference.
- Confidentiality: protection against unauthorised disclosure of sensitive information.
In Justice K.S. Puttaswamy (Retd.) v. Union of India (2017), a nine-judge bench of the Supreme Court unanimously recognised privacy as a fundamental right protected by the Constitution.
The judgment established that privacy is connected with dignity, liberty, autonomy, and the protection of personal information.
For biological surveillance, this means that the State cannot justify every form of biological monitoring merely by claiming that it serves administrative convenience or public security.
A serious interference with privacy must be legally authorised and constitutionally justified.
3.2 The legality, legitimate-aim, and proportionality requirements
The privacy jurisprudence associated with Puttaswamy supports a structured examination of State surveillance.
First, legality: Is the surveillance authorised by valid law, and does that law adequately define the power being exercised?
Second, legitimate aim: Does the surveillance pursue a constitutionally permissible objective, such as investigating serious crime, protecting public health, or preventing a genuine security threat?
Third, proportionality: Is the measure appropriately connected to the objective, and is the intrusion justified in light of its benefits and the availability of less restrictive alternatives?
Procedural safeguards are also important. These may include independent authorisation, restrictions on access, retention limits, audit mechanisms, and remedies against misuse.
For example, collecting DNA evidence from a lawfully identified crime scene may be justified in an appropriate investigation. Creating a permanent genetic database of an entire population without adequate legal authority, necessity, and safeguards would raise substantially more serious constitutional concerns.
The existence of a legitimate objective does not, by itself, establish that every method of achieving it is constitutional.
3.3 Article 14: Equality and non-arbitrariness
Article 14 guarantees equality before the law and equal protection of the laws.
Biological surveillance may violate Article 14 when it results in arbitrary or discriminatory treatment.
Examples include:
- Subjecting particular communities to disproportionate biological monitoring without an adequate justification.
- Treating an algorithmic prediction of biological risk as conclusive evidence of misconduct.
- Using genetic characteristics to exclude individuals from public benefits without lawful and constitutionally sufficient grounds.
- Applying surveillance criteria inconsistently or without a rational connection to the stated objective.
A system can be technically accurate in identifying a biological characteristic and still be constitutionally objectionable if the decision made using that characteristic is arbitrary or discriminatory.
3.4 Article 20(3): Protection against compelled self-incrimination
Article 20(3) protects an accused person against being compelled to be a witness against themselves.
Biological evidence raises a difficult distinction between the collection of physical identifying material and compelled testimonial communication.
The constitutional treatment of fingerprints, handwriting samples, DNA samples, and compelled statements is not necessarily identical.
In State of Bombay v. Kathi Kalu Oghad (1961), the Supreme Court examined the meaning of being compelled to be a witness against oneself and distinguished testimonial evidence from certain forms of physical evidence.
The decision is relevant because it demonstrates that the constitutional analysis depends on the nature of the material obtained and the manner in which it is collected.
However, it should not be interpreted as giving the State unrestricted authority to collect biological material. Article 21, privacy, statutory restrictions, and other procedural protections remain relevant.
3.5 Article 20(3) and modern biological technology
Modern technologies complicate the distinction between physical evidence and personal information.
A DNA sample may be physical material, but its analysis can reveal information about family relationships or health-related characteristics. Similarly, physiological data may be collected from the body but later used to infer emotional states or behavioural tendencies.
Accordingly, the question is not merely whether biological evidence is testimonial. The legality of its acquisition, analysis, retention, and subsequent use must also be examined under the relevant constitutional and statutory framework.
4. Statutory Framework Governing Biological Surveillance in India
4.1 Criminal Procedure (Identification) Act, 2022
The Criminal Procedure (Identification) Act, 2022 is one of the most important Indian statutes for examining biological surveillance in criminal investigations.
The Act replaced the Identification of Prisoners Act, 1920, and authorises the collection of specified measurements for identification and criminal investigation.
The statutory definition of measurements includes fingerprints, palm prints, photographs, iris and retina scans, physical and biological samples and their analysis, and specified behavioural attributes. The Act also establishes a framework for the collection, storage, preservation, sharing, and destruction of records. India Code
Official statutory text: India Code — Criminal Procedure (Identification) Act, 2022
A. Section 3: Taking of measurements
Section 3 identifies categories of persons whose measurements may be taken, including convicted persons and persons arrested in connection with an offence, subject to the Act's provisions.
Its proviso contains a specific qualification concerning biological samples. A person arrested for an offence generally need not be obliged to provide biological samples under this provision unless the stated exceptions apply, including offences against women or children and offences punishable with imprisonment for a minimum period of seven years.
This provision must be read according to its precise statutory language. It should not be assumed that every arrested person may be subjected to every type of biological examination without restriction.
B. Section 4: Storage and management of records
Section 4 provides for the collection, storage, preservation, sharing, dissemination, destruction, and disposal of measurement records through the National Crime Records Bureau and the prescribed framework.
This creates important accountability questions:
- Who can access a person's biological or biometric records?
- For which investigations may those records be searched?
- How is access recorded and audited?
- What procedures govern correction of inaccurate records?
- When must records be destroyed?
- What safeguards prevent disclosure or use for unrelated purposes?
The existence of statutory storage powers does not eliminate the need to interpret their exercise consistently with constitutional privacy and other applicable laws.
C. Section 5: Magistrate's power
Section 5 provides a mechanism under which a Magistrate may direct a person to allow measurements to be taken for purposes connected with an investigation or proceeding, subject to the statutory conditions.
Judicial authorisation is an important safeguard, but its effectiveness depends on the legality and scope of the order, the reasons supporting the intrusion, and compliance with the applicable procedure.
D. Section 7: Protection against legal claims
Section 7 addresses the bar of suits under the Act. Its presence should not be interpreted as a blanket exemption from constitutional scrutiny or as automatically extinguishing every remedy potentially available under other applicable laws.
The precise scope of any immunity or procedural restriction must be assessed from the statutory text and relevant judicial interpretation.
E. Section 8: Rule-making powers
Section 8 authorises the making of rules to implement the Act.
The Criminal Procedure (Identification) Rules, 2022 address operational matters concerning the collection and handling of measurement records. The rules are important because accountability depends not only on the authority to collect information but also on how that authority is exercised in practice. PRS Legislative Research
4.2 Constitutional scrutiny of the 2022 Act
The 2022 Act raises important questions about the balance between criminal investigation and individual liberty.
The relevant questions include:
- Is the collection authorised by the statute?
- Does the particular collection fall within the statutory category and circumstances?
- Is the information required for the legitimate investigative purpose?
- Are retention and access controlled by appropriate safeguards?
- Can the individual challenge an unlawful or arbitrary exercise of power?
- Is the practical operation of the measure consistent with constitutional privacy?
A law authorising the collection of biological information should not be confused with an unlimited power to collect every conceivable form of genetic or physiological data.
The statutory authority, purpose, and permitted procedures must be examined in each case.
4.3 Digital Personal Data Protection Act, 2023
The Digital Personal Data Protection Act, 2023 is relevant when biological or biometric information is processed as digital personal data within its scope.
Its application must be assessed alongside its commencement notifications, applicable rules, statutory definitions, exemptions, and any other governing legislation.
It is important not to assume that the Act treats all categories of biological information as a separately defined category of sensitive personal data. The legislation's actual text and applicable legal framework must determine the rights and obligations in a particular case.
Where the Act applies, issues of lawful processing, data security, permitted use, individual rights, and accountability may be relevant. Special statutory frameworks and applicable exemptions must also be considered.
Legal principle: The fact that biological information has been digitised does not make it less private, nor does digital storage automatically authorise its collection or use.
5. Leading Indian Case Laws
The following decisions provide the principal judicial foundations for biological surveillance accountability. Some concern biological material directly, while others establish constitutional principles that apply to surveillance more broadly.
Case 1: Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)
Citation: (2017) 10 SCC 1
Court: Supreme Court of India
Subject: Fundamental right to privacy
Facts and legal issue
The case arose from constitutional proceedings concerning the existence and scope of a fundamental right to privacy.
The Supreme Court considered whether privacy was protected under the Constitution, particularly in relation to life, personal liberty, dignity, and individual autonomy.
Judgment
A nine-judge bench unanimously recognised privacy as a constitutionally protected fundamental right.
The decision established that privacy is not confined to physical spaces. It also protects important aspects of personal information, identity, and individual choice.
Application to biological surveillance
The judgment provides the constitutional foundation for challenging unjustified biological monitoring.
For example, a government agency that collects DNA samples, retains biometric information, or links genetic data to a person's identity must be able to justify its actions under the applicable legal framework.
A legitimate purpose does not eliminate the requirement of proportionality.
Accountability principle
Public authorities should be able to demonstrate the legal basis, legitimate purpose, and proportionality of intrusive surveillance measures.
The judgment also supports scrutiny of safeguards against excessive collection, misuse, and unauthorised disclosure.
Legal significance: Puttaswamy is the foundational Indian authority for analysing the privacy implications of biological surveillance. The proportionality principles developed in the privacy jurisprudence are central to assessing whether such surveillance is constitutionally justified. Sci API
Case 2: Selvi v. State of Karnataka (2010)
Citation: (2010) 7 SCC 263
Court: Supreme Court of India
Subject: Involuntary narco-analysis, polygraph examinations, and brain electrical activation profile tests
Facts and legal issue
The case concerned the involuntary administration of investigative techniques designed to obtain information about a person's mental processes.
The principal constitutional issues concerned the privilege against self-incrimination under Article 20(3) and the protections of personal liberty under Article 21.
Judgment
The Supreme Court held that the involuntary administration of the techniques at issue violated the relevant constitutional protections.
The Court distinguished between certain forms of physical evidence and the compelled extraction of testimonial responses or personal knowledge.
Application to biological surveillance
The decision is relevant when surveillance extends beyond identification and attempts to extract information about a person's mental state or personal knowledge.
For example, a government agency cannot assume that a technology is constitutionally permissible merely because it claims to reveal information scientifically.
The method of obtaining information, the degree of compulsion, and the nature of the information must be considered.
However, Selvi did not establish that every compulsory medical or biological examination is prohibited. The legal treatment depends on the technique, the circumstances, and the applicable constitutional and statutory provisions.
Accountability principle
Authorities must not treat scientific technology as a substitute for constitutional safeguards.
Compulsory procedures that intrude into personal liberty or extract testimonial information require especially careful legal scrutiny.
Legal significance: Selvi establishes an important constitutional boundary between permissible evidence gathering and impermissible involuntary extraction of testimonial responses. Sci API
Case 3: Kathi Kalu Oghad v. State of Bombay (1961)
Citation: AIR 1961 SC 1808; (1962) 3 SCR 10
Court: Supreme Court of India
Subject: Physical evidence and self-incrimination
Legal issue
The case examined the meaning of being compelled to be a witness against oneself under Article 20(3).
The Court considered the constitutional significance of evidence such as fingerprints, handwriting, and other identifying characteristics.
Judgment and principle
The decision distinguished the giving of testimonial evidence from the provision of certain forms of physical identifying evidence.
This distinction remains important in criminal investigations involving bodily samples and biometric identification.
Application
Suppose the police obtain a fingerprint or biological sample from a suspect. The constitutional question cannot be answered simply by asserting that the material is physical rather than testimonial.
The investigator must also consider whether the collection is authorised by law, whether the applicable procedure has been followed, and whether other constitutional rights are implicated.
Accountability principle
The physical nature of biological evidence does not remove the need for lawful collection and constitutional safeguards.
The decision should be read alongside Selvi and Puttaswamy, rather than as an independent authorisation for unrestricted biological surveillance.
Case 4: Kharak Singh v. State of Uttar Pradesh (1963)
Citation: AIR 1963 SC 1295; (1964) 1 SCR 332
Court: Supreme Court of India
Subject: Police surveillance and personal liberty
Facts
The case concerned police surveillance regulations that permitted monitoring of individuals suspected of criminal activity, including measures involving visits to their homes at night.
Judgment
The Court examined the constitutional validity of the surveillance practices under the guarantees of personal liberty and freedom.
Although the judgment did not recognise a general fundamental right to privacy in the form subsequently established in Puttaswamy, it remains an important early authority on the constitutional limits of police surveillance.
Application to biological surveillance
The decision provides historical context for judicial scrutiny of police powers.
Modern surveillance technologies can extend the reach of the State beyond physical observation. A biological database may allow the identification of a person across investigations, while genetic matching may reveal relationships with people who have never been suspects.
The constitutional analysis must therefore consider both the initial collection of information and the consequences of systematic monitoring.
Accountability principle
Police surveillance must be examined against constitutional limits; investigative convenience cannot be treated as an unrestricted justification for intrusive powers.
Case 5: Gobind v. State of Madhya Pradesh (1975)
Citation: (1975) 2 SCC 148
Court: Supreme Court of India
Subject: Privacy and police surveillance
Facts and legal issue
The case concerned police regulations providing for surveillance of certain persons.
The Court considered whether such regulations infringed constitutionally protected privacy interests.
Judgment
The Court recognised that privacy interests could arise under the Constitution, while acknowledging that privacy was not absolute and could be subject to justified restrictions.
The decision is an important stage in the development of Indian privacy jurisprudence before the nine-judge bench decision in Puttaswamy.
Application
Suppose a police department creates a database that links fingerprints, DNA profiles, facial images, and personal histories.
Even if the database serves a law-enforcement purpose, its operation may raise questions concerning the scope of surveillance, access to records, the use of information for unrelated purposes, and the possibility of arbitrary targeting.
Accountability principle
Surveillance powers must be assessed in light of constitutional protections and the justification for the particular intrusion.
Gobind is especially relevant when examining the relationship between legitimate police surveillance and the protection of personal privacy.
Case 6: Justice K.S. Puttaswamy (Retd.) v. Union of India (Aadhaar) (2018)
Citation: (2019) 1 SCC 1
Court: Supreme Court of India
Subject: Aadhaar, biometric identification, privacy, and proportionality
Background
The Aadhaar litigation concerned the constitutional validity of a system using biometric and demographic information for identity verification and the delivery of public services.
The case raised questions about the collection and use of fingerprints, iris scans, identity information, and the institutional safeguards governing the system.
Judgment
The Supreme Court upheld the Aadhaar framework in substantial part while invalidating or limiting certain provisions and uses.
The decision addressed proportionality, privacy, data security, and the relationship between identification systems and access to services.
Application to biological surveillance
Aadhaar illustrates the importance of distinguishing between biometric identification and the unrestricted use of biometric information.
A system designed to verify identity should not automatically become a general-purpose mechanism for unrelated surveillance.
Accountability questions include:
- Is biometric collection authorised for the particular purpose?
- Is the information being used within the legally permitted framework?
- Are authentication failures appropriately addressed?
- Are safeguards adequate to prevent unauthorised access?
- Does the system create unjustified exclusion from essential services?
- Are the statutory limitations and judicial restrictions being respected?
Accountability principle
Biometric identification systems require purpose limitations, appropriate safeguards, and constitutional scrutiny.
The decision should not be read as a blanket endorsement of all biometric databases or every possible use of biological information.
6. Comparative Case Law: International Standards
International decisions are particularly useful for understanding DNA databases, biological evidence, and the retention of sensitive personal information.
Case 7: S. and Marper v. United Kingdom (2008)
Citation: Applications Nos. 30562/04 and 30566/04, judgment of 4 December 2008
Court: European Court of Human Rights
Subject: Indefinite retention of DNA samples, DNA profiles, and fingerprints
Facts
The applicants had been arrested in separate criminal proceedings. One was acquitted, while the proceedings against the other were discontinued.
Nevertheless, the authorities retained their fingerprints, cellular samples, and DNA profiles.
The applicants challenged this retention as an unjustified interference with their privacy.
Judgment
The Grand Chamber found a violation of Article 8 of the European Convention on Human Rights, which protects the right to respect for private and family life.
The Court considered the blanket and indiscriminate retention of biological material and DNA profiles from persons who had not been convicted of the relevant offences disproportionate.
It emphasised that genetic material contains highly personal information, including information relevant to health and genetic relationships.
Application to India
The decision is not binding on Indian courts in the same way as an Indian Supreme Court judgment. Nevertheless, it provides persuasive comparative reasoning when assessing the proportionality of DNA retention and the need for safeguards.
For example, where a person has been acquitted or criminal proceedings have ended, continued retention of biological information should be examined under the governing Indian statute and constitutional principles.
The outcome cannot automatically be determined by applying the foreign judgment. Indian legislation, the nature of the offence, applicable retention provisions, and the particular circumstances must be considered.
Accountability principle
Biological data should not be retained indefinitely merely because it was once lawfully collected.
Retention must be justified by the applicable law, the legitimate purpose, the individual's circumstances, and appropriate safeguards. HUDOC
Official judgment: European Court of Human Rights — S. and Marper v. United Kingdom
Case 8: Gaughran v. United Kingdom (2020)
Court: European Court of Human Rights
Subject: Retention of biometric data after a minor conviction
In Gaughran v. the United Kingdom, the Court examined the retention of biometric information, including photographs and fingerprints, and the retention of a DNA profile following a minor conviction.
The decision is relevant because it demonstrates that the proportionality of retention cannot always be resolved merely by pointing to the existence of a conviction.
The nature of the offence, the duration and scope of retention, the available safeguards, and the ability to review continued storage may all matter.
Application to biological surveillance accountability: Authorities should have a defensible legal basis for retaining biological records, and retention policies should be proportionate to the relevant circumstances.
The case complements S. and Marper: the accountability question concerns not only whether information was lawfully collected, but also whether its continued retention is justified.
Case 9: Carpenter v. United States (2018)
Citation: 585 U.S. 296 (2018)
Court: Supreme Court of the United States
Subject: Digital surveillance and informational privacy
Facts and judgment
The case concerned government access to historical cell-site location information held by telecommunications providers.
The Court held that obtaining the relevant historical location records in the circumstances of the case constituted a Fourth Amendment search and generally required a warrant supported by probable cause.
The decision did not concern DNA surveillance directly. Its relevance is analogical.
Application to biological surveillance
Modern biological information can be combined with other digital records to create detailed profiles of individuals.
For example, a biometric identifier might be linked to location records, medical information, and other databases. The combined information could reveal considerably more than any individual dataset.
Carpenter illustrates the importance of examining the practical consequences of aggregating information rather than evaluating each data point in isolation.
Accountability principle
The legal analysis should account for the depth, scale, and practical intrusiveness of technologically enabled surveillance.
Caution: Carpenter is a United States constitutional decision and does not establish the governing legal test in India.
7. Biological Surveillance Accountability and DNA Evidence
DNA surveillance requires particular attention because genetic material can reveal information beyond a person's identity.
7.1 Collection of DNA samples
The collection of biological material may be justified in a criminal investigation when authorised by law and conducted according to the applicable procedure.
However, the legality of collecting DNA must be distinguished from the legality of using it for additional purposes.
For example, a sample collected to identify a suspect should not automatically be treated as authority to investigate unrelated health characteristics or genetic relationships.
The legal analysis should address:
- The statutory authority for obtaining the sample.
- The purpose for which the sample is collected.
- The necessity of the particular examination.
- The reliability and relevance of the proposed analysis.
- The conditions governing storage and subsequent use.
- The individual's available legal remedies.
7.2 DNA profiling and genetic privacy
DNA profiling may be used to compare biological material obtained from a crime scene with a reference sample.
However, a DNA sample and a DNA profile are not identical.
A biological sample may contain extensive genetic information, whereas a forensic DNA profile may contain a more limited set of identifying information.
This distinction is important, but it does not eliminate privacy concerns. Even a limited profile may identify a person, reveal genetic relationships, or be linked with other information.
The principle in S. and Marper v. United Kingdom is particularly relevant because the Court recognised the privacy implications of retaining both cellular samples and DNA profiles.
7.3 Familial DNA searching
Familial DNA searching involves using partial genetic similarities to investigate whether an unknown biological sample may be associated with a relative of a person whose DNA is already recorded.
This technique can assist investigations, but it also creates risks for people who have never been suspected of wrongdoing.
Potential concerns include:
- Disclosure of family relationships.
- Unjustified suspicion directed towards relatives.
- Disproportionate monitoring of particular communities.
- Incorrect inferences from partial genetic matches.
- Use of family information beyond the original investigative purpose.
A familial match should therefore be treated as an investigative lead, not as conclusive proof of guilt.
The use of such techniques should be subject to clear legal authority, appropriate safeguards, scientific standards, and independent oversight.
7.4 DNA evidence and wrongful attribution
DNA evidence may be powerful, but its significance depends on the circumstances.
Investigators and courts must distinguish between the presence of biological material and proof that a particular person committed an offence.
Relevant questions include:
- Was the sample properly collected?
- Is the chain of custody documented?
- Is contamination reasonably excluded?
- Is the laboratory method scientifically reliable?
- Does the statistical interpretation accurately reflect the evidence?
- Could the biological material have been transferred indirectly?
- Does other evidence support the proposed interpretation?
Accountability requires the ability to examine the evidence and challenge its interpretation. Scientific evidence should not become immune from judicial scrutiny simply because it is expressed in technical language.
8. Biological Surveillance and Administrative Accountability
Biological surveillance is not limited to criminal investigations. Governments and private organisations may use biological information in healthcare, employment, education, insurance, public administration, and research.
Accountability requires examining both the collection of the information and the decisions made using it.
8.1 Public-health surveillance
Public-health authorities may need to collect biological samples or related information to identify infectious diseases, investigate outbreaks, and develop prevention strategies.
Such surveillance can serve an important public interest.
However, the existence of a public-health objective does not necessarily justify collecting every available category of personal information.
A proportionate system should consider whether the information can be anonymised or aggregated, whether individual identification is necessary, and how long identifiable information must be retained.
Where identifiable biological information is required, access and disclosure should be limited according to applicable law.
Accountability principle: Public-health surveillance should be scientifically justified, legally authorised, and limited to what is reasonably necessary for its legitimate purpose.
8.2 Employment and genetic discrimination
An employer might seek genetic information to estimate whether an applicant is likely to develop a particular disease or to assess a perceived biological risk.
This raises questions of privacy, equality, confidentiality, and the lawful use of health information.
A person's genetic predisposition does not necessarily establish that the person will develop a condition or be unable to perform a job.
Using genetic information to make employment decisions can therefore raise serious ethical and legal concerns.
An organisation should not assume that biological information is relevant merely because it can be measured.
8.3 Insurance and biological risk profiling
Biological information might be used to classify people according to predicted health risks.
Such practices can create problems where predictions are uncertain, where the data are inaccurate, or where the system unfairly disadvantages individuals because of characteristics outside their control.
The legal analysis depends on the applicable insurance, privacy, equality, and sector-specific laws.
Accountability may require explaining the role of biological information in a decision, identifying the evidence supporting the classification, and providing an appropriate mechanism for challenging an incorrect or unlawful outcome.
8.4 Automated biological decision-making
Artificial intelligence can combine biological measurements with demographic, behavioural, and medical information to generate predictions.
Examples include systems that estimate disease risk, interpret physiological signals, or classify individuals according to predicted health outcomes.
Such systems raise several legal questions:
- Is the data scientifically suitable for the intended purpose?
- Has the system been validated for the population in which it is used?
- Does the output reflect uncertainty?
- Can the decision be independently reviewed?
- Is responsibility assigned when the system causes harm?
- Can an affected individual challenge an adverse decision?
An algorithmic prediction should not automatically be treated as a fact about an individual.
Where a biological prediction affects liberty, employment, healthcare, or access to public benefits, the need for procedural fairness and meaningful review becomes particularly important.
9. The Seven Pillars of Biological Surveillance Accountability
A practical accountability framework can be organised around seven principles.
Pillar 1: Legality
Every intrusive surveillance activity must have an appropriate legal basis.
A government agency should be able to identify the statute or other valid legal authority under which it collects and uses biological information.
A private organisation must likewise comply with applicable privacy, data-protection, confidentiality, and sector-specific requirements.
Relevant case law: Justice K.S. Puttaswamy v. Union of India (2017).
Pillar 2: Necessity and proportionality
The extent of surveillance must be justified by its purpose.
For example, if a less intrusive identification method can reasonably achieve the same objective, the authority should consider whether extensive genetic collection is necessary.
Proportionality also requires examining the severity of the intrusion, the consequences for affected individuals, and the effectiveness of the proposed safeguards.
Relevant case law: Puttaswamy (2017); S. and Marper v. United Kingdom (2008).
Pillar 3: Purpose limitation
Biological information should not be used indiscriminately for purposes unrelated to those for which it was collected.
For example, a sample collected for a specific criminal investigation should not automatically become a general source of information about an individual's health, ancestry, or relatives.
Any secondary use must be assessed under the governing law and applicable safeguards.
Pillar 4: Data security and controlled access
Biological databases should have appropriate technical and organisational safeguards.
These may include:
- Role-based access controls.
- Authentication and access logging.
- Encryption where appropriate.
- Secure storage and transfer.
- Procedures for responding to breaches.
- Independent security assessments.
- Restrictions on unauthorised copying or disclosure.
Security measures should be proportionate to the sensitivity of the information and the consequences of its misuse.
Pillar 5: Retention and destruction
Retention should have a defensible legal basis and should not be longer than permitted or justified by the applicable framework.
A responsible system should establish procedures for reviewing records, correcting errors, and destroying or disposing of information when the relevant legal requirements are satisfied.
The analysis must distinguish between the original biological sample, the derived profile, and any other associated record.
Relevant case law: S. and Marper v. United Kingdom (2008).
Pillar 6: Transparency and independent oversight
An accountable institution should maintain records of important decisions concerning biological surveillance.
Depending on the legal context, oversight may involve courts, statutory regulators, independent review bodies, or internal compliance mechanisms.
Meaningful oversight should examine the legality of collection, access permissions, data retention, the handling of complaints, and the effectiveness of safeguards.
Transparency does not necessarily require public disclosure of every investigative detail. It requires sufficient information and oversight to ensure that the system operates within legal limits.
Pillar 7: Remedies and responsibility
Accountability is incomplete if a person cannot challenge unlawful surveillance.
Depending on the circumstances and applicable law, potential remedies may include:
- Constitutional judicial review.
- A challenge to an unlawful collection or retention decision.
- Appropriate statutory complaints.
- Correction or deletion of information where legally available.
- Disciplinary action against responsible officials.
- Compensation where a recognised legal basis exists.
- Criminal or civil proceedings where the relevant legal requirements are met.
The availability of any particular remedy depends on the facts, the governing statute, jurisdiction, and applicable procedural rules.
10. Who Should Be Held Accountable?
Biological surveillance may involve several institutions. Responsibility should be allocated according to their respective roles.
| Institution or actor | Potential responsibility |
|---|---|
| Police and investigating agencies | Lawful collection, authorised use, accurate records, and compliance with procedural requirements |
| Government departments | Lawful policy design, appropriate safeguards, and oversight of delegated powers |
| National Crime Records Bureau | Compliance with its statutory responsibilities concerning measurement records |
| Forensic laboratories | Scientific reliability, sample integrity, documented procedures, and accurate reporting |
| Healthcare institutions | Confidentiality, lawful processing, and appropriate protection of medical information |
| Technology companies | Compliance with applicable law, security obligations, and contractual responsibilities |
| Data controllers or fiduciaries | Compliance with applicable data-protection duties |
| Courts | Independent review of legality, evidence, and constitutional challenges |
| Regulators and oversight bodies | Monitoring compliance within their statutory powers |
Responsibility should not be assigned automatically to the person or institution that physically collected the sample.
For example, a laboratory might conduct a scientifically valid test, while a separate government agency subsequently uses the result for an unauthorised purpose. The legal responsibility of each actor would depend on its own conduct, duties, and role in the resulting harm.
11. Hypothetical Case Study: Indefinite DNA Retention After Acquittal
Consider the following hypothetical situation.
A person is arrested in connection with a criminal offence. The police lawfully collect a DNA sample under the applicable statutory framework. The person is subsequently acquitted, but the authority retains the biological sample indefinitely and continues to use it in unrelated investigations.
The person challenges the retention before a court.
Legal issues
Issue 1: Was the original collection lawful?
The court would examine the statutory authority, the circumstances of collection, and compliance with the applicable procedure.
Issue 2: Is continued retention lawful?
The court would examine the relevant retention provisions and any applicable constitutional requirements. Lawful initial collection does not automatically establish the legality of indefinite retention.
Issue 3: Is the continued use proportionate?
The court would consider the purpose of retention, its duration, the nature of the information, and the available safeguards.
Issue 4: Does the use interfere with privacy?
Under Puttaswamy, privacy is a fundamental right. Under the comparative reasoning of S. and Marper, retaining DNA information can itself interfere with privacy.
Issue 5: What remedy is available?
Depending on the governing statute and circumstances, the person might seek judicial review, appropriate directions concerning retention or destruction, or another legally available remedy.
Possible judicial approach
The court would not necessarily order destruction merely because an acquittal occurred. The governing statutory provisions and the particular circumstances must be examined.
However, the authority should be required to identify the legal basis for continued retention and demonstrate compliance with the applicable safeguards.
The central accountability question is whether the continued retention is legally authorised and constitutionally justified, not simply whether the original sample was lawfully collected.
12. Major Legal Challenges
Despite the development of privacy jurisprudence and data-protection frameworks, biological surveillance creates several continuing challenges.
12.1 Scientific uncertainty
Biological evidence can be misinterpreted or overstated. An apparent genetic match, for example, must be evaluated according to the scientific method, statistical significance, and circumstances of the case.
12.2 Function creep
Information collected for one purpose may gradually be used for additional purposes.
A database created to identify individuals in criminal investigations might be proposed for broader population monitoring or unrelated administrative decisions.
Clear purpose limitations and independent review can help prevent unjustified expansion.
12.3 Discriminatory effects
Surveillance may disproportionately affect certain communities or individuals.
Even where a system does not explicitly use a protected characteristic, its design or implementation may produce unjustified unequal effects.
12.4 Weak oversight
An institution that collects, stores, analyses, and uses biological information without effective external scrutiny may be poorly positioned to identify its own errors or misuse.
12.5 Long-term privacy risks
Biological information may remain useful for decades. Future analytical methods may also reveal information that was not available when the sample was first collected.
This makes data minimisation, security, purpose limitation, and retention rules particularly important.
12.6 Fragmented legal responsibility
Biological surveillance often involves police, laboratories, database operators, and technology providers.
Where responsibilities are unclear, a person may struggle to identify the institution responsible for an unlawful disclosure or inaccurate decision.
Effective accountability requires clear allocation of duties and accessible procedures for complaints.
13. Recommendations for Strengthening Biological Surveillance Accountability in India
A robust legal framework should address the entire lifecycle of biological information.
A. Before collection
- Identify the legal authority for collecting the information.
- Define the specific purpose of collection.
- Assess whether the proposed intrusion is necessary and proportionate.
- Establish appropriate authorisation and documentation procedures.
B. During processing
- Restrict access to authorised personnel.
- Maintain reliable records of access and use.
- Apply appropriate scientific and technical quality standards.
- Protect the information against unauthorised disclosure.
- Ensure that consequential decisions can be reviewed where required.
C. During retention
- Establish clear retention periods consistent with the governing law.
- Distinguish biological samples from derived profiles and associated records.
- Provide procedures for reviewing continued retention.
- Correct inaccurate records and implement destruction requirements where applicable.
D. When information is shared
- Identify the legal basis for disclosure.
- Limit sharing to authorised recipients and purposes.
- Document transfers and access.
- Establish appropriate safeguards for cross-agency and cross-border transfers.
E. After misuse or error
- Provide accessible complaint procedures.
- Preserve evidence needed to investigate the incident.
- Investigate unauthorised access or disclosure.
- Apply disciplinary, civil, criminal, or regulatory consequences where legally justified.
- Provide appropriate remedies to affected individuals.
F. For AI-assisted biological surveillance
- Document the system's intended use.
- Validate its scientific and technical reliability.
- Assess potential discriminatory effects.
- Provide meaningful human oversight where necessary.
- Avoid treating probabilistic predictions as conclusive proof.
- Establish procedures to challenge consequential errors.
These recommendations are proposed governance measures. Their legal status varies: some reflect existing legal obligations, while others represent reforms that may require additional legislation, rules, or institutional policies.
14. Relationship Between Biological Surveillance Accountability and Other Legal Doctrines
Biological surveillance accountability overlaps with several important areas of law.
| Legal doctrine | Relationship |
|---|---|
| Right to privacy | Protects personal and biological information against unjustified intrusion |
| Bodily autonomy | Addresses physical interference and control over bodily material |
| Constitutional proportionality | Tests whether intrusive surveillance is justified |
| Equality and non-arbitrariness | Addresses discriminatory or arbitrary surveillance practices |
| Self-incrimination | Governs compelled testimonial evidence and related constitutional issues |
| Evidence law | Addresses admissibility, reliability, and evidentiary weight |
| Data protection | Governs applicable obligations concerning the processing of personal data |
| Administrative law | Provides standards for lawful decision-making, procedural fairness, and review |
| Medical confidentiality | Protects confidential healthcare information under applicable law |
| Institutional accountability | Allocates responsibility for collection, storage, disclosure, and misuse |
The doctrines are related but not interchangeable. For example, an intrusion may violate privacy even when the resulting evidence is scientifically reliable. Conversely, evidence may be scientifically unreliable even where the original collection was lawful.
A complete legal assessment must address both questions.
15. Critical Evaluation
Biological surveillance presents a genuine tension between public safety and individual liberty.
On one side, biological evidence can identify perpetrators, exclude innocent suspects, identify deceased persons, and assist public-health investigations.
On the other side, biological databases can enable persistent identification, reveal familial information, facilitate discriminatory classification, and create long-term risks if information is retained or shared without adequate safeguards.
The correct legal response is neither to prohibit every form of biological surveillance nor to accept every use merely because it serves an official objective.
Instead, surveillance must be assessed according to its legal basis, purpose, necessity, proportionality, scientific reliability, and available safeguards.
Three distinctions are especially important:
- Collection versus retention: Lawful collection does not automatically justify indefinite storage.
- Identification versus prediction: Identifying a biological match does not necessarily establish behaviour, intention, or guilt.
- Technical capability versus legal authority: The ability to derive information from biological material does not itself confer permission to do so.
The framework must also be adaptable. Scientific developments can change the information obtainable from a sample, while technological integration can make previously separate datasets much more revealing.
Accordingly, accountability should be an ongoing obligation rather than a one-time authorisation.
16. Conclusion
Biological Surveillance Accountability is the principle that every institution collecting, processing, storing, or using biological information must be able to justify its actions under the applicable law and remain answerable for misuse, error, disproportionate intrusion, or unlawful discrimination.
In India, its constitutional foundation lies principally in Article 21's protection of life and personal liberty, the fundamental right to privacy recognised in Justice K.S. Puttaswamy v. Union of India (2017), the protections against compelled self-incrimination under Article 20(3), and the equality guarantee in Article 14.
The Criminal Procedure (Identification) Act, 2022, provides an important statutory framework for collecting and managing identifying measurements in criminal matters. Its operation must be examined alongside applicable constitutional requirements and other relevant legislation.
The decisions in Selvi v. State of Karnataka, Kathi Kalu Oghad v. State of Bombay, Gobind v. State of Madhya Pradesh, and Kharak Singh v. State of Uttar Pradesh help explain the constitutional limits of investigative and surveillance powers. Internationally, S. and Marper v. United Kingdom offers particularly important reasoning concerning DNA retention and genetic privacy.
Ultimately, a legitimate investigative purpose cannot by itself justify unlimited biological monitoring. Effective accountability requires lawful authority, necessity, proportionality, scientific reliability, appropriate retention limits, independent oversight, and meaningful remedies.
The governing principle is simple: biological information may serve legitimate public purposes, but the power to collect and analyse it must remain subject to constitutional liberty, human dignity, and the rule of law.
Selected Legal Authorities and Official Resources
- Constitution of India — Articles 14, 20(3), and 21.
- Justice K.S. Puttaswamy (Retd.) v. Union of India (2017) 10 SCC 1.
- Selvi v. State of Karnataka (2010) 7 SCC 263.
- Kathi Kalu Oghad v. State of Bombay AIR 1961 SC 1808.
- Kharak Singh v. State of Uttar Pradesh AIR 1963 SC 1295.
- Gobind v. State of Madhya Pradesh (1975) 2 SCC 148.
- Justice K.S. Puttaswamy (Retd.) v. Union of India (Aadhaar judgment) (2019) 1 SCC 1.
- S. and Marper v. United Kingdom (2008), European Court of Human Rights.
- Gaughran v. United Kingdom (2020), European Court of Human Rights.
- Carpenter v. United States (2018), 585 U.S. 296.
- India Code — Criminal Procedure (Identification) Act, 2022.
Academic note: The cases above support the underlying constitutional, privacy, surveillance, and evidentiary principles. They do not all establish a single doctrine bearing the title “Biological Surveillance Accountability.” For litigation or formal legal research, verify the full judgments, current statutory provisions, subsequent judicial treatment, and applicable rules before relying on a particular proposition.

comments