Biological Surveillance Accountability Doctrine.

1. Introduction

The Biological Surveillance Accountability Doctrine is a legal and constitutional framework for regulating the collection, monitoring, analysis, storage, sharing, and use of biological information about individuals and populations. It requires governments, law-enforcement agencies, healthcare institutions, research organisations, and private companies to justify biological surveillance, protect sensitive information, prevent discriminatory uses, and remain accountable for unlawful or disproportionate interference with individual rights.

The expression is best understood as an emerging analytical doctrine rather than the name of a single, formally established legal doctrine recognised by courts. Its principles can be derived from established legal rules concerning privacy, bodily autonomy, data protection, informed consent, equality, administrative accountability, and procedural fairness.

In India, the principal constitutional foundation is the fundamental right to privacy recognised in Justice K.S. Puttaswamy (Retd.) v. Union of India (2017), together with the Supreme Court's subsequent decisions concerning Aadhaar and surveillance. These judgments provide important legal standards for evaluating biological surveillance systems. Indian Kanoon

What is biological surveillance?

Biological surveillance involves systematically collecting or analysing biological characteristics, biological samples, or health-related information to identify, classify, track, predict, or monitor individuals or populations.

It may include:

  1. Genetic surveillance: Collecting and analysing DNA profiles for identification, criminal investigation, ancestry analysis, or population studies.
  2. Biometric surveillance: Using fingerprints, iris patterns, facial characteristics, or other biological identifiers to verify identity or track individuals.
  3. Health surveillance: Monitoring medical records, infectious diseases, physiological measurements, or other health-related information.
  4. Reproductive surveillance: Collecting information about fertility, pregnancy, reproductive health, or genetic characteristics.
  5. Population-level biological surveillance: Monitoring disease outbreaks, pathogens, genetic variants, or biological indicators across communities.
  6. Algorithmic biological surveillance: Applying artificial intelligence to biological or medical data to predict disease risks, infer characteristics, classify individuals, or identify alleged threats.

Not every activity involving biological information is unlawful or intrusive to the same degree. Public-health surveillance conducted under appropriate legal safeguards may serve an important public interest, while indiscriminate genetic profiling or covert collection of intimate biological information may raise serious constitutional concerns.

The central legal question is therefore:

Under what circumstances may an organisation collect and use biological information, and what safeguards ensure that the activity remains lawful, necessary, proportionate, secure, and accountable?

2. Meaning and objectives of the accountability doctrine

The doctrine can be organised around six fundamental principles.

A. Legality

Biological surveillance must have an adequate legal basis, particularly where the State interferes with fundamental rights.

A government agency cannot automatically justify the collection of DNA, health records, or biometric information merely by asserting that the activity serves administrative efficiency or public security.

The legal authority should define, as appropriate:

  • The purpose of collection.
  • The categories of information that may be collected.
  • The persons or populations subject to surveillance.
  • The officials authorised to access the information.
  • The circumstances permitting disclosure.
  • The period for which records may be retained.
  • The procedures for review, challenge, and redress.

A system that permits unrestricted collection or gives officials uncontrolled discretion is more vulnerable to constitutional challenge.

B. Necessity and proportionality

The extent of surveillance must be justified by the importance of its objective and the degree of interference with individual rights.

For example, collecting limited epidemiological information to identify an infectious-disease outbreak may be justified under appropriate legislation. Collecting identifiable genetic information from an entire community without demonstrating a corresponding need raises substantially different concerns.

Proportionality requires attention to whether:

  1. The objective is legitimate.
  2. The measure is rationally connected to that objective.
  3. A reasonably available, less intrusive alternative could achieve the objective.
  4. The benefits justify the harm to privacy, autonomy, equality, and other protected interests.

These principles are particularly important when biological surveillance is conducted on a large scale or produces enduring records about individuals.

C. Transparency and explainability

Organisations should be able to explain why biological information is collected, how it is processed, and how decisions based on it are made.

Where an algorithm generates a risk score from genetic or medical information, accountability may require disclosure of the relevant decision-making criteria, limitations, error rates, and procedures for challenging the result.

Transparency does not necessarily require publishing every technical detail or revealing confidential information that would compromise legitimate investigations. It does require meaningful scrutiny of the legal basis, purposes, safeguards, and consequences of surveillance.

D. Purpose limitation

Biological information collected for one legitimate purpose should not automatically be repurposed for an unrelated objective.

For example, information collected to diagnose a disease should not automatically become available for employment screening, commercial profiling, or unrelated criminal investigations.

Any secondary use must be assessed under the applicable law, including its legal authority, compatibility with the original purpose, safeguards, and effects on the individual.

E. Non-discrimination

Biological surveillance must not become a mechanism for unjustified discrimination based on genetic characteristics, disability, health status, sex, caste, ancestry, or other protected or sensitive characteristics.

Examples of problematic practices include:

  • Excluding people from employment because of a predicted genetic predisposition.
  • Using medical data to deny benefits without lawful justification.
  • Treating a statistical disease risk as proof that an individual is dangerous.
  • Using biological characteristics as a proxy for caste, ethnicity, or social status.
  • Applying facial-recognition systems without assessing unequal error rates or discriminatory effects.

The precise legal protections depend on the jurisdiction and the context in which the information is used.

F. Institutional accountability

An organisation should be able to demonstrate that its surveillance practices comply with applicable law.

Depending on the system, accountability may involve independent audits, access controls, accurate records of data use, security testing, complaints procedures, judicial review, regulatory investigations, and compensation or other remedies where legally available.

The fundamental principle is that biological surveillance must not become unreviewable simply because it involves complex science or advanced technology.

3. Constitutional foundation in India

The doctrine draws its principal support from the Constitution of India, particularly the following provisions.

A. Article 21: Right to life, personal liberty, and privacy

Article 21 provides that no person shall be deprived of life or personal liberty except according to procedure established by law.

The Supreme Court has interpreted this provision to protect privacy, dignity, and personal autonomy. Biological surveillance may interfere with these interests when it exposes intimate medical information, permits continuous monitoring, or enables the State to construct detailed profiles of individuals.

For example, a government database containing identifiable DNA profiles, medical histories, and predicted disease risks could reveal information that individuals reasonably expect to remain private.

However, Article 21 does not prohibit every form of biological surveillance. The constitutionality of a particular measure depends on its legal basis, objective, scope, safeguards, and proportionality.

B. Article 14: Equality before the law

Article 14 prohibits arbitrary State action and guarantees equality before the law and equal protection of the laws.

It is relevant where biological surveillance systems classify people according to genetic risk, health status, biometric characteristics, or algorithmically generated profiles.

Suppose a public authority uses a biological risk score to deny a group access to public services without a rational legal basis. The affected individuals could challenge the decision on grounds of arbitrariness, discriminatory treatment, and infringement of other applicable rights.

C. Article 19: Freedom of speech and expression

Surveillance can discourage people from participating in public debate, journalism, political activities, and peaceful assembly.

Biological surveillance may compound this problem when genetic, biometric, or medical identifiers are used to track people attending protests, visiting particular institutions, or associating with certain groups.

Restrictions affecting Article 19 rights must satisfy the requirements applicable to the particular freedom and constitutionally permissible grounds for restriction.

D. Article 20(3): Protection against compelled self-incrimination

Article 20(3) protects an accused person against being compelled to be a witness against himself or herself.

This provision becomes particularly important when authorities attempt to obtain incriminating information through scientific techniques involving a person's physiological responses, brain activity, or other biological processes.

The Supreme Court's decision in Selvi v. State of Karnataka provides a significant precedent on this issue.

E. Articles 32 and 226: Constitutional remedies

Article 32 enables individuals to approach the Supreme Court for enforcement of fundamental rights. Article 226 empowers High Courts to issue writs for the enforcement of fundamental rights and for other legal purposes within their jurisdiction.

These remedies may be relevant where biological surveillance involves unlawful collection, arbitrary classification, unconstitutional disclosure, or a failure by public authorities to comply with legal safeguards.

Depending on the circumstances and applicable law, a person may seek judicial review, directions to stop unlawful processing, protection of confidential information, or other appropriate relief.

4. Leading case laws

The following judgments provide the principal judicial foundations for a Biological Surveillance Accountability Doctrine. Their significance varies: some directly concern privacy or biological information, while others establish broader principles that can be applied to biological surveillance.

Case 1. Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)

Citation: (2017) 10 SCC 1
Court: Supreme Court of India
Subject: Fundamental right to privacy.

Facts

The case arose from constitutional challenges involving the collection and use of personal and biometric information under the Aadhaar identification scheme. A nine-judge Constitution Bench considered whether privacy is protected as a fundamental right under the Indian Constitution.

Legal issue

Whether the Constitution protects an individual's right to privacy, including privacy interests associated with personal information and bodily autonomy.

Judgment

The Supreme Court unanimously recognised privacy as a constitutionally protected fundamental right. It held that privacy is intrinsic to life and personal liberty under Article 21 and is also protected as an element of the freedoms guaranteed by Part III of the Constitution.

The Court explained that privacy includes several dimensions, including bodily privacy, informational privacy, and the ability to make important personal choices.

It also established that restrictions on privacy must satisfy constitutional requirements, including legality, a legitimate State aim, and proportionality. Indian Kanoon

Application to biological surveillance

This judgment provides the strongest general constitutional foundation for the proposed doctrine.

Its principles apply to questions such as:

  • Can the government collect genetic information without adequate legal authority?
  • Can medical records be used for purposes unrelated to treatment?
  • Can biometric identifiers be combined with other databases to create detailed individual profiles?
  • Can a biological risk score determine access to public benefits?
  • What safeguards are necessary to prevent misuse of intimate biological information?

The judgment requires a distinction between collecting information for a legitimate purpose and establishing a surveillance system that permits excessive or unjustified interference with privacy.

Legal principle: Biological surveillance that infringes fundamental privacy rights must be supported by law and justified under the applicable constitutional standards.

Case 2. Justice K.S. Puttaswamy (Retd.) v. Union of India (2018) — Aadhaar judgment

Citation: (2019) 1 SCC 1
Court: Supreme Court of India
Subject: Biometric identification, informational privacy, and proportionality.

Facts

The Supreme Court considered constitutional challenges to the Aadhaar system, including the collection and retention of biometric and demographic information and the use of Aadhaar authentication for different purposes.

Legal issue

Whether the Aadhaar framework, including its biometric identification system and associated data-processing arrangements, complied with fundamental rights.

Judgment

The Court upheld the constitutional validity of Aadhaar in substantial part while invalidating or restricting certain provisions and uses.

The majority considered the legitimate purpose of Aadhaar, the proportionality of the identification system, and the safeguards against misuse. The judgment also restricted certain forms of compulsory use and commercial exploitation of Aadhaar information.

The opinions differed on aspects of the safeguards and constitutional analysis, so the judgment should not be read as establishing that every biometric database is lawful. Indian Kanoon

Application to biological surveillance

This decision illustrates the difference between a legally authorised identification system and an unrestricted surveillance infrastructure.

For instance, a biometric system used to verify eligibility for a legally authorised public benefit raises different questions from one that continuously tracks a person's movements or combines biometric records with unrelated health and behavioural information.

The judgment supports scrutiny of:

  1. The purpose for which biological information is collected.
  2. The necessity of the information requested.
  3. The safeguards against unauthorised disclosure.
  4. Restrictions on secondary use.
  5. The proportionality of compulsory identification.
  6. The consequences of expanding a database beyond its original purpose.

Legal principle: A legitimate identification objective does not automatically justify every use of biometric information.

Case 3. Selvi v. State of Karnataka (2010)

Citation: (2010) 7 SCC 263
Court: Supreme Court of India
Subject: Narcoanalysis, polygraph examination, brain-based testing, and constitutional rights.

Facts

The case concerned the involuntary administration of narcoanalysis, polygraph examinations, and the Brain Electrical Activation Profile (BEAP) test during criminal investigations.

The authorities argued that these techniques could assist investigators in obtaining information from suspects.

Legal issues

The Court considered whether the involuntary use of these techniques violated:

  • Article 20(3), protecting against compelled self-incrimination.
  • Article 21, protecting life, personal liberty, and individual autonomy.

Judgment

The Supreme Court held that the involuntary administration of the impugned techniques violated the protections against testimonial compulsion and the right to personal liberty.

The Court distinguished the involuntary administration of these techniques from genuinely voluntary testing conducted in accordance with the required safeguards. It also explained that information subsequently discovered through a voluntary test must be assessed under the applicable rules of evidence.

Application to biological surveillance

Selvi is especially important because it addresses the use of physiological and neurological processes to obtain information during criminal investigations.

Consider a hypothetical system that uses neural measurements or physiological responses to infer whether a suspect remembers a crime. The scientific character of the test does not, by itself, eliminate constitutional protections.

The judgment also cautions against treating information produced by biological testing as inherently reliable or constitutionally unobjectionable.

However, its holding should not be extended mechanically to every DNA sample, fingerprint, medical test, or biometric identification procedure. Those practices raise distinct questions about physical evidence, bodily intrusion, consent, statutory authority, and evidentiary admissibility.

Legal principle: Investigative convenience does not override constitutional protections against compelled testimonial evidence or unjustified interference with personal liberty. Indian Kanoon

Case 4. People's Union for Civil Liberties (PUCL) v. Union of India (1997)

Citation: (1997) 1 SCC 301
Court: Supreme Court of India
Subject: Telephone interception and procedural safeguards.

Facts

The case challenged telephone interception and the risk of arbitrary surveillance by government authorities.

Although the case did not concern genetic or biometric databases, it established important principles for regulating intrusive surveillance.

Legal issue

Whether telephone interception could be carried out without adequate procedures protecting privacy and preventing arbitrary exercises of executive power.

Judgment

The Supreme Court recognised telephone tapping as a serious invasion of privacy and prescribed procedural safeguards governing interception under the law then applicable.

The safeguards addressed matters such as authorisation by competent officials, recorded reasons, limited duration, and review of interception orders. The Court emphasised that surveillance powers could not be exercised arbitrarily. Indian Kanoon

Application to biological surveillance

The decision offers a procedural model for accountability in biological surveillance.

For example, a law authorising a law-enforcement agency to collect biological information should identify who can approve the collection, the circumstances in which it is permitted, the duration of retention, and the mechanism for reviewing its use.

A system that allows officials to search a national genetic database without adequate controls presents the same general concern about unchecked surveillance powers, although the precise legal rules governing genetic data must come from the applicable legislation and constitutional principles.

Legal principle: Intrusive surveillance requires effective procedural safeguards against arbitrary exercise of public power.

Case 5. Manohar Lal Sharma v. Union of India (2021) — Pegasus surveillance case

Court: Supreme Court of India
Date: 27 October 2021
Subject: Spyware, privacy, independent scrutiny, and State accountability.

Facts

Petitioners raised allegations concerning the use of Pegasus spyware to target mobile phones belonging to journalists, activists, and other individuals.

The proceedings concerned allegations of unauthorised surveillance and the need for an effective investigation into the claims.

Legal issue

Whether the allegations warranted independent scrutiny and whether national-security considerations could be invoked without meaningful engagement with the alleged interference with citizens' rights.

Judgment

The Supreme Court established an independent technical committee to investigate the allegations, under the oversight of a retired Supreme Court judge.

The Court emphasised the importance of protecting citizens from violations of privacy and expressed concern about the government's limited response to the allegations before it.

The establishment of the committee was not a final judicial finding that every allegation of spyware use had been proved. Rather, it provided an institutional mechanism for investigating serious claims. National Digital Library of India

Application to biological surveillance

The case is relevant where surveillance systems depend on sophisticated technical infrastructure that individuals cannot independently inspect.

Examples include:

  • Remote collection of biological or health-related information.
  • Unauthorised access to medical databases.
  • Covert use of biometric identification systems.
  • Integration of biological identifiers with intelligence databases.
  • Surveillance technologies whose operation is concealed from affected persons.

The case supports the importance of independent technical investigation when credible allegations concern intrusive surveillance.

Legal principle: Invoking national security does not eliminate the need for meaningful accountability and scrutiny of serious allegations of unlawful surveillance.

Case 6. Kharak Singh v. State of Uttar Pradesh (1963)

Citation: AIR 1963 SC 1295; (1964) 1 SCR 332
Court: Supreme Court of India
Subject: Police surveillance, personal liberty, and constitutional privacy.

Facts

The case concerned police surveillance of a person suspected of criminal activity. The surveillance measures included practices such as domiciliary visits and monitoring movements.

Legal issue

Whether the impugned police surveillance measures violated constitutional protections of personal liberty.

Judgment

The Supreme Court invalidated domiciliary visits at night under the applicable constitutional analysis. The original majority did not recognise a general fundamental right to privacy in the form subsequently established in Puttaswamy.

The constitutional position was substantially clarified in Puttaswamy (2017), which overruled Kharak Singh to the extent that it denied constitutional protection for the right to privacy. VoxJuris

Application to biological surveillance

The case provides historical context for the relationship between police surveillance and individual liberty.

Modern biological surveillance can extend beyond observing a person's movements. It may reveal genetic relationships, medical conditions, reproductive information, or predicted health risks.

The constitutional analysis must therefore account for the sensitivity of the information collected and the potential consequences of its use.

Legal principle: Police surveillance is subject to constitutional limits, and the modern privacy framework requires a more comprehensive examination of intrusive surveillance practices.

Case 7. Modern Dental College and Research Centre v. State of Madhya Pradesh (2016)

Citation: (2016) 7 SCC 353
Court: Supreme Court of India
Subject: Proportionality and constitutional review of State regulation.

Facts

The case concerned State regulation of admissions and fees in private professional educational institutions.

Although it did not concern biological information, the Supreme Court examined proportionality as a method of evaluating restrictions on protected rights.

Legal issue

How should courts determine whether a regulatory measure is constitutionally justified?

Judgment

The Court applied proportionality analysis to assess the relationship between the State's legitimate objectives and the measures adopted to achieve them.

Application to biological surveillance

The proportionality framework can help assess whether biological surveillance goes further than necessary.

For example, suppose authorities seek to identify individuals exposed to a dangerous infectious disease. They might consider collecting identifiable medical records, conducting anonymous population-level testing, or collecting only the minimum information necessary for contact tracing.

The legally preferable method will depend on the circumstances, but the availability of less intrusive alternatives is relevant to determining whether a more invasive measure is justified.

Legal principle: A legitimate regulatory objective does not automatically validate every measure adopted to achieve it. The nature and extent of the interference must also be justified.

5. Statutory framework governing biological surveillance in India

The proposed doctrine is not contained in one comprehensive Indian statute. Its operation must be understood through several overlapping legal frameworks.

A. Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act, 2023 establishes a framework for processing digital personal data and recognising individuals' interests in protecting their personal data.

The legislation is relevant to digital medical records, identifiable biological information stored electronically, and certain biometric or health-related datasets.

The Act must be read together with its commencement notifications and applicable rules. Its protections and obligations should not be assumed to apply identically to every processing activity or every category of information. India Code

Relevance to accountability

Depending on the applicable provisions and circumstances, important questions include:

  • Was there a lawful basis for processing the information?
  • Were applicable notice and consent requirements satisfied?
  • Was reasonable care taken to protect the data?
  • Was the information used for an unauthorised purpose?
  • Were applicable obligations concerning security incidents and complaints followed?
  • Are statutory exemptions or special provisions relevant?

A crucial distinction is that the DPDP Act does not create a universal prohibition on collecting biological information. Its relevance depends on the nature of the data, the processing activity, the applicable legal provisions, and any relevant exemptions.

B. Information Technology Act, 2000

The Information Technology Act, 2000, and applicable rules have historically provided important protections relevant to certain categories of sensitive digital information.

In particular, Sections 43A and 72A have addressed specified forms of liability involving the handling of information and disclosure in breach of lawful contractual arrangements, respectively. Their applicability must be assessed in light of the legislation's current text, amendments, and transitional arrangements.

The rules governing sensitive personal data and information have also been relevant to biometric and medical information.

These provisions should not be treated as a substitute for examining the entire current data-protection framework.

C. Aadhaar Act, 2016

The Aadhaar Act governs the collection and use of identity information and biometric information within its statutory framework.

It contains restrictions and safeguards relating to the use and disclosure of information collected under the Aadhaar system.

The Supreme Court's Aadhaar judgment demonstrates that biometric identification must be assessed according to the law authorising it, its purpose, its safeguards, and its constitutional effects.

The existence of a statutory database does not give every public or private organisation unrestricted authority to obtain or repurpose its information.

D. Criminal Procedure and identification legislation

Biological evidence may be collected during criminal investigations under applicable statutory authority.

The relevant legal framework may include the Bharatiya Nagarik Suraksha Sanhita, 2023, the Bharatiya Sakshya Adhiniyam, 2023, and the Criminal Procedure (Identification) Act, 2022, subject to the specific issue and provisions involved.

These frameworks must be distinguished carefully:

  • Collection: Whether the authority may obtain a sample or biological measurement.
  • Analysis: Whether the sample may lawfully be tested for a particular purpose.
  • Retention: Whether the resulting information may be kept and for how long.
  • Disclosure: Whether it may be shared with another authority.
  • Evidence: Whether the resulting material is relevant, reliable, and admissible in legal proceedings.

Lawful collection does not automatically settle every question about subsequent use or evidentiary reliability.

E. Public-health and biosecurity legislation

Biological surveillance may be necessary to identify infectious diseases, investigate outbreaks, monitor pathogens, or protect public health.

Such surveillance must be assessed under the applicable public-health, biosecurity, and other statutory provisions, together with constitutional safeguards.

For example, collecting information about an outbreak may serve a legitimate public-health purpose. However, retaining identifiable information indefinitely or sharing it for unrelated purposes raises separate questions about necessity, confidentiality, and lawful authority.

The legal distinction is between surveillance necessary to address a demonstrated public-health need and surveillance that exceeds the authority or purpose for which information was collected.

6. Biological surveillance and international human-rights law

The doctrine also draws support from international human-rights principles.

A. Universal Declaration of Human Rights

Article 12 protects against arbitrary interference with privacy, family, home, and correspondence.

Its principles are relevant to surveillance systems that expose intimate biological information without adequate justification.

B. International Covenant on Civil and Political Rights

Article 17 protects against arbitrary or unlawful interference with privacy, family, home, and correspondence.

Article 26 addresses equality before the law and protection against discrimination.

These provisions provide an international framework for evaluating biological surveillance, subject to the applicable international obligations and domestic legal arrangements.

C. Convention on Biological Diversity and the Nagoya Protocol

Where biological surveillance involves genetic resources, traditional knowledge, or biological material obtained from communities, questions of access, consent, benefit-sharing, and sovereignty may arise.

The Convention on Biological Diversity and the Nagoya Protocol are relevant to particular forms of access to genetic resources and associated traditional knowledge. They should not be confused with a general legal framework for every form of human genetic-data processing.

D. Comparative case law: S. and Marper v. United Kingdom (2008)

Court: European Court of Human Rights
Application Nos.: 30562/04 and 30566/04
Subject: Retention of fingerprints and DNA profiles.

The case concerned the retention of fingerprints, cellular samples, and DNA profiles belonging to individuals who had been arrested but not convicted.

The European Court of Human Rights held that the blanket and indiscriminate retention arrangements violated Article 8 of the European Convention on Human Rights, which protects private life.

The decision is important because biological information may remain identifying and sensitive even when an individual has not been convicted of an offence.

Its reasoning supports scrutiny of the duration and breadth of biological-data retention, particularly where the information may reveal characteristics extending beyond the immediate purpose of criminal identification.

This is a comparative authority rather than a binding judgment of the Supreme Court of India.

7. Core elements of the Biological Surveillance Accountability Doctrine

The doctrine can be developed into a practical framework consisting of eight accountability requirements.

ElementLegal requirementExample of a potential violation
Legal authoritySurveillance must be authorised by applicable law.Collecting DNA profiles without adequate legal authority.
Legitimate purposeThe activity must pursue a legally permissible objective.Using health surveillance to identify political opponents.
NecessityThe collection must address a genuine need.Collecting identifiable genetic data when anonymous data would suffice.
ProportionalityThe intrusion must not exceed what the objective justifies.Indefinitely retaining sensitive biological records without justification.
Informed consentConsent must be obtained where required by the applicable legal framework.Conducting a research procedure without legally required consent.
Data securityAppropriate safeguards must protect biological information.Allowing unauthorised access to a genetic database.
Non-discriminationDecisions must comply with applicable equality and anti-discrimination requirements.Excluding applicants based on unjustified genetic-risk classifications.
Independent reviewThere must be meaningful mechanisms for examining unlawful or arbitrary conduct.Allowing a surveillance agency to investigate its own alleged misconduct without effective external scrutiny.

These elements are interconnected. A system may have a legitimate purpose but inadequate security. It may collect information lawfully but retain it longer than justified. Alternatively, a technically secure system may still be unconstitutional because its collection practices are excessive.

Accountability therefore requires evaluating the entire lifecycle of biological information.

8. Accountability across the biological-data lifecycle

Stage 1: Collection

The organisation should identify the legal basis for obtaining the information, establish the purpose of collection, and determine whether the information is necessary.

Particular care is required when collecting information from children, patients, research participants, vulnerable communities, or people who may have little practical ability to refuse.

Stage 2: Processing and analysis

Biological information may be processed through genetic testing, statistical analysis, or artificial intelligence.

The organisation should assess the accuracy of the methods, their limitations, and the consequences of false-positive and false-negative results.

For example, a genetic variant associated with an increased probability of a disease does not necessarily establish that a particular person will develop that disease.

Stage 3: Storage and retention

The organisation should establish appropriate retention periods, access restrictions, security controls, and procedures for deletion or anonymisation where required.

Genetic information may reveal information about biological relatives as well as the person from whom the sample was obtained. This makes the consequences of disclosure potentially broader than those associated with ordinary identifiers.

Stage 4: Sharing and secondary use

Before sharing biological information with another agency, researcher, employer, insurer, or commercial organisation, the responsible entity should establish whether the transfer and intended use are legally permitted.

Information obtained for clinical treatment should not automatically be treated as available for law-enforcement profiling or commercial risk assessment.

Stage 5: Decisions and consequences

Where biological information influences a consequential decision, the organisation should evaluate the legality and fairness of that decision.

Examples include decisions affecting employment, public benefits, medical treatment, immigration, or criminal investigation.

The affected person should have access to whatever explanation, review, correction, or remedy is required by the applicable law.

Stage 6: Remedies and institutional responsibility

Where unlawful surveillance occurs, the appropriate response may include an investigation, cessation of unlawful processing, correction or deletion of information where legally justified, disciplinary action, statutory penalties, compensation, or constitutional relief.

The precise remedy depends on the governing law, the identity of the responsible organisation, the evidence, and the nature of the violation.

9. Application to emerging technologies

The proposed doctrine becomes particularly important when biological surveillance is combined with artificial intelligence and large-scale databases.

A. AI-based genetic-risk prediction

An algorithm might predict the probability of developing a particular disease based on genetic information.

The legal concerns include the accuracy of the prediction, the possibility of discriminatory use, the security of the underlying information, and the availability of meaningful review.

A probabilistic prediction must not automatically be treated as a definitive medical diagnosis or a reliable basis for every administrative decision.

B. Facial recognition and continuous biometric tracking

Facial-recognition systems can identify people across multiple locations and combine observations into a movement profile.

Such systems raise questions about the legal authority for surveillance, the scale of monitoring, error rates, retention, access controls, and the potential chilling effect on constitutionally protected activities.

The constitutional standards in Puttaswamy and the procedural safeguards discussed in PUCL are relevant to evaluating these concerns.

C. Genetic databases used in criminal investigations

A genetic database can assist in identifying suspects and investigating serious offences. However, its use raises questions about sample collection, database inclusion, retention, access, familial identification, and the reliability of forensic interpretation.

A match between a crime-scene sample and a database profile is evidence that must be evaluated in context. It does not automatically establish guilt.

The legal framework should distinguish between a database search, a statistical match, the interpretation of forensic evidence, and the ultimate determination of criminal responsibility.

D. Public-health surveillance

Public-health authorities may need biological information to identify outbreaks, monitor disease transmission, and plan interventions.

A proportionate system should collect information appropriate to the demonstrated public-health need, apply suitable confidentiality safeguards, and review whether continued identifiable monitoring remains necessary.

Public-health objectives are important, but they do not eliminate the need to examine legal authority and individual rights.

E. Reproductive and embryonic biological information

Genetic information obtained through fertility treatment, prenatal testing, or embryo research can expose exceptionally intimate information.

Relevant legal concerns include informed consent, confidentiality, reproductive autonomy, the interests of children, research ethics, and the limits of secondary use.

The exact protections depend on the jurisdiction and the particular medical or research activity.

10. How courts can apply the doctrine

A court examining a biological surveillance challenge can use the following analytical sequence.

Step 1: Identify the interference.
Determine what biological information was collected, whose information was obtained, and whether the activity affects privacy, bodily autonomy, equality, or another protected interest.

Step 2: Identify the legal authority.
Examine the statute, rules, authorisation, or other legal basis relied upon by the organisation.

Step 3: Examine the purpose.
Determine whether the stated objective is legitimate and whether the surveillance is genuinely directed towards achieving it.

Step 4: Test necessity and proportionality.
Assess the scope of collection, the sensitivity of the information, the availability of less intrusive alternatives, and the expected benefits and harms.

Step 5: Examine procedural safeguards.
Consider authorisation, consent where required, independent oversight, access restrictions, retention, security, and mechanisms for challenging decisions.

Step 6: Examine scientific reliability.
Where the surveillance relies on biological testing or algorithmic inference, evaluate the quality of the underlying evidence and the limitations of the method.

Step 7: Determine accountability and remedy.
If a legal violation is established, identify the appropriate remedy under the relevant constitutional, statutory, or other legal framework.

This sequence synthesises existing legal principles. It is not a claim that the Supreme Court has formally prescribed a separate seven-step test under the title Biological Surveillance Accountability Doctrine.

11. Critical evaluation

The doctrine involves a difficult balance between individual rights and collective interests.

On one side, biological surveillance can support medical diagnosis, disease prevention, scientific research, criminal investigation, and the delivery of public services.

On the other, biological information may be permanent, difficult to anonymise completely, and capable of revealing intimate facts about individuals and their relatives.

Three difficulties deserve particular attention.

First, consent may not be sufficient by itself. A person may formally agree to data collection without understanding its long-term consequences. Consent also cannot necessarily legitimise every form of processing or override other legal restrictions.

Second, anonymisation may not eliminate all risks. Genetic and other biological information can sometimes be linked to external information, creating a risk of re-identification. The degree of risk depends on the dataset and the methods used.

Third, accountability must extend beyond the initial collection. A system may initially operate lawfully but later be repurposed, transferred to another organisation, or used to make decisions that were never contemplated when the information was obtained.

A sound regulatory framework must therefore address not only the initial act of surveillance but also the subsequent storage, analysis, sharing, and use of biological information.

12. Conclusion

The Biological Surveillance Accountability Doctrine can be understood as a proposed legal framework requiring biological surveillance to comply with legality, legitimate purpose, necessity, proportionality, privacy, equality, scientific reliability, and effective oversight.

In India, its most important judicial foundations are:

  1. K.S. Puttaswamy v. Union of India (2017): Recognition of privacy as a fundamental right.
  2. K.S. Puttaswamy v. Union of India (2018): Constitutional scrutiny of biometric identification and the Aadhaar framework.
  3. Selvi v. State of Karnataka (2010): Protection against involuntary testimonial compulsion through specified scientific investigative techniques.
  4. PUCL v. Union of India (1997): Procedural safeguards against arbitrary surveillance.
  5. Manohar Lal Sharma v. Union of India (2021): Independent technical scrutiny of serious allegations involving spyware surveillance.
  6. Kharak Singh v. State of Uttar Pradesh (1963): Historical development of constitutional protections against intrusive police surveillance.
  7. Modern Dental College v. State of Madhya Pradesh (2016): Proportionality as a framework for constitutional review.

The comparative decision in S. and Marper v. United Kingdom (2008) further illustrates why the retention of biological information requires careful legal scrutiny.

The central proposition is that scientific capability does not itself create legal authority. Biological surveillance must be justified under the applicable law, respect constitutional rights, employ appropriate safeguards, and remain open to meaningful review.

Important academic qualification

For legal research or dissertation writing, the doctrine should be presented as a proposed analytical framework derived from established principles, not as a formally named Indian Supreme Court doctrine. The cases discussed above establish related legal rules, but they do not collectively announce a binding doctrine under this specific title. Any application to a particular biological-surveillance system requires examination of the relevant legislation, facts, and binding precedents.

LawGratis provides pro bono legal aid and resources to empower communities. Join us in making justice reachable for everyone! Follow our community on Instagram, YouTube, Facebook, and LinkedIn.

LEAVE A COMMENT