1. Introduction

Biological Surveillance Doctrine Governance Accountability is a legal and constitutional framework for regulating the collection, analysis, storage, sharing, and use of biological information about individuals and populations. It addresses the legal limits of monitoring people through DNA, genetic profiles, biometric identifiers, biological samples, health records, physiological measurements, and biological data processed through artificial intelligence.

The expression does not refer to one universally recognised legal doctrine or a single statute. Rather, it is an analytical legal framework developed from established principles of constitutional privacy, informational self-determination, bodily integrity, data protection, equality, scientific accountability, administrative law, and judicial review.

Biological surveillance can serve legitimate purposes, including diagnosing diseases, investigating serious crimes, identifying missing persons, monitoring infectious diseases, and protecting public health. However, the same technologies may facilitate unlawful genetic profiling, discriminatory risk classification, mass surveillance, unauthorised secondary use of medical information, and the creation of permanent biological databases.

The central legal question is therefore:

How can a state or private organisation use biological information for legitimate purposes without violating individual autonomy, privacy, equality, and the rule of law?

This question is particularly significant in India, where constitutional privacy protections operate alongside statutory data-protection rules, criminal-investigation powers, public-health legislation, and regulations governing medical research.

The following discussion focuses primarily on Indian law, with comparative case law from the United States and Europe.

2. Meaning and Scope of Biological Surveillance

Biological surveillance refers to the systematic observation, collection, examination, or analysis of biological characteristics or information associated with identifiable individuals or populations.

It may be divided into six principal categories.

2.1 Genetic surveillance

Genetic surveillance involves collecting or analysing DNA and related genetic information to identify individuals, investigate crimes, establish biological relationships, or investigate inherited conditions.

Examples include:

• DNA profiling during criminal investigations.
• National or regional DNA databases.
• Genetic testing of individuals without meaningful consent.
• Large-scale collection of DNA from particular communities.
• Reuse of genetic samples for research or commercial purposes.

Genetic information deserves particular protection because it can reveal information about biological relatives as well as the person whose sample was collected.

2.2 Biometric surveillance

Biometric surveillance involves identifying or verifying individuals through characteristics such as fingerprints, facial geometry, iris patterns, or other physiological or behavioural identifiers.

Although biometric identifiers are not always biological samples in the conventional scientific sense, they may be processed alongside biological and medical information.

Legal concerns include proportionality, security, exclusion from public services, inaccurate identification, and unauthorised data sharing.

2.3 Medical and physiological surveillance

This category includes the systematic collection of medical records, disease indicators, heart-rate measurements, hormone levels, reproductive information, and other physiological data.

Such monitoring may be justified in medical treatment or appropriately regulated public-health programmes. It becomes legally problematic when information is collected without a sufficient legal basis or used for unrelated purposes, such as employment discrimination or commercial profiling.

2.4 Public-health surveillance

Public-health surveillance involves collecting and analysing information about diseases, infections, outbreaks, and population health.

It can be essential for preventing epidemics. Nevertheless, authorities must consider confidentiality, necessity, scientific validity, data minimisation, and the duration for which individual-level records remain identifiable.

2.5 Predictive biological surveillance

Predictive biological surveillance uses biological or medical information to estimate the likelihood of future events, such as disease development or certain health outcomes.

When combined with algorithmic decision-making, these systems can create risks of inaccurate classification, discriminatory treatment, and unjustified restrictions on individual freedom.

A prediction about a person's health or biological characteristics should not automatically be treated as proof of future conduct, criminal propensity, or social risk.

2.6 Population-level biological surveillance

Population-level surveillance examines biological patterns across communities or demographic groups.

Although aggregated information may be useful for epidemiology, the collection and interpretation of population data can create risks of group stigmatisation, genetic discrimination, and disproportionate monitoring of vulnerable communities.

Legal principle: The more intrusive, identifiable, persistent, and consequential the surveillance, the stronger the justification and safeguards generally need to be.

3. Constitutional Foundations of Biological Surveillance in India

3.1 Article 21: Right to life, privacy, and personal liberty

Article 21 of the Constitution of India provides that no person shall be deprived of life or personal liberty except according to procedure established by law.

In biological surveillance cases, Article 21 protects several interconnected interests:

1. Informational privacy: Control over access to personal and biological information.
2. Bodily integrity: Protection against unjustified physical intrusion to obtain biological samples.
3. Personal autonomy: The ability to make decisions concerning one's body and intimate information.
4. Dignity: Protection against degrading or stigmatising biological classification.
5. Procedural fairness: Protection against arbitrary decisions based on biological information.
6. Freedom from disproportionate surveillance: Protection against intrusive monitoring that exceeds a legitimate purpose.

The constitutional analysis must distinguish between collecting a sample, analysing it, retaining it, sharing it, and using it to make consequential decisions. Each activity may raise different legal questions.

Leading case: Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)

Citation: (2017) 10 SCC 1.

Court: Supreme Court of India, nine-judge Constitution Bench.

Facts and legal issue: The case concerned whether the right to privacy is protected as a fundamental right under the Indian Constitution.

Judgment: The Supreme Court unanimously recognised privacy as a fundamental right protected by the Constitution, particularly under Article 21 and the freedoms and liberties guaranteed by Part III.

The judgment recognised that privacy encompasses personal autonomy, bodily integrity, informational privacy, and protection against inappropriate state intrusion.

The opinions also addressed the dangers of modern surveillance, data aggregation, and profiling. The discussion of technological surveillance is particularly relevant to biological information that can be linked to identity or used to predict personal characteristics. SciGov API

Legal principles established:

• Privacy is a constitutionally protected right.
• State interference with privacy requires legal justification.
• Informational privacy is relevant to the collection and processing of personal data.
• Technological capability does not, by itself, justify intrusive surveillance.
• Surveillance systems must be assessed in light of constitutional freedoms and the possibility of profiling and discrimination.

Application to biological surveillance

Suppose a government agency creates a database containing DNA profiles, genetic disease risks, and biometric identifiers. If the database is used to classify individuals according to predicted behaviour or perceived biological risk, the constitutional questions include:

• What law authorises the collection?
• Is the collection necessary for a legitimate public purpose?
• Could the objective be achieved using less intrusive information?
• Who can access the database?
• How long is the information retained?
• Can an individual challenge an inaccurate or harmful classification?

The Puttaswamy judgment provides the constitutional foundation for asking these questions.

Importance: This is the central Indian constitutional authority for developing a biological surveillance governance framework.

3.2 Articles 14 and 15: Equality and non-discrimination

Article 14 guarantees equality before the law and equal protection of the laws. Article 15 prohibits specified forms of discrimination, including discrimination by the State on grounds enumerated in that provision.

Biological surveillance can produce discriminatory outcomes when systems use genetic traits, medical conditions, physiological characteristics, or proxies for protected social identities to allocate opportunities or impose restrictions.

Examples include:

• Denying employment because of a predicted genetic disorder.
• Treating a community as inherently dangerous because of purported biological characteristics.
• Excluding individuals from public benefits because an automated system identifies them as biologically high-risk.
• Applying intrusive biological testing selectively to particular social groups without adequate justification.

Not every distinction based on medical information is unlawful. A medically justified distinction may be permissible in appropriate circumstances. However, a classification that is arbitrary, unsupported by evidence, or disproportionate may be vulnerable to constitutional challenge.

3.3 Article 20(3): Protection against compelled self-incrimination

Article 20(3) provides that no person accused of an offence shall be compelled to be a witness against themselves.

This protection becomes relevant when biological evidence is collected during criminal investigations.

However, biological evidence raises a distinction between compelling testimonial communication and obtaining physical evidence. The constitutional analysis depends on the nature of the procedure, the individual's legal status, and the applicable legislation.

A demand for a DNA sample therefore cannot automatically be equated with every other form of compelled evidence, nor can every such demand automatically be treated as constitutional. The relevant case law must be examined carefully.

3.4 Article 19: Freedom of expression and association

Biological surveillance may indirectly affect freedoms protected by Article 19.

For example, individuals may avoid lawful political participation, public demonstrations, or association with particular groups if they fear that biological identification systems will be used to monitor or penalise them.

A constitutional challenge would examine the connection between the surveillance measure and the specific freedom affected, together with the relevant constitutional restrictions and proportionality requirements.

4. Major Judicial Test: Legality, Legitimate Aim, and Proportionality

The constitutional framework established in Puttaswamy requires close scrutiny of state action affecting privacy.

A useful analytical model contains three central requirements.

4.1 Legality

The surveillance measure must have a sufficient legal basis.

An administrative agency should not assume that technological capability, administrative convenience, or the general desirability of public safety gives it unlimited authority to collect biological information.

A proper legal framework should identify:

• The authority responsible for collection.
• The categories of persons whose information may be collected.
• The purposes for which the information may be used.
• The permitted methods of collection and analysis.
• The conditions governing retention, sharing, and deletion.
• The remedies available against unlawful processing.

4.2 Legitimate state aim

The objective must be legally legitimate.

Examples may include investigating serious crimes, identifying missing persons, diagnosing disease, or responding to a public-health emergency.

A vague objective such as improving governance or increasing administrative efficiency should not automatically justify the collection of every available biological characteristic.

The authority should identify the concrete public interest that the surveillance measure is intended to serve.

4.3 Proportionality and necessity

The measure must bear a reasonable relationship to its objective and must not impose an unjustified burden on fundamental rights.

The analysis should consider:

1. Suitability: Is the surveillance measure capable of advancing the stated objective?
2. Necessity: Is there a reasonably effective, less intrusive alternative?
3. Balancing: Do the expected public benefits justify the interference with privacy, autonomy, and equality?
4. Safeguards: Are there adequate controls against misuse, error, and unauthorised disclosure?

For instance, retaining the DNA profile of a person convicted of a serious offence for a legally authorised identification purpose presents a different question from retaining the biological samples of every person ever investigated, indefinitely and without meaningful review.

The distinction is between surveillance tailored to a justified purpose and surveillance that becomes indiscriminate.

5. Important Case Laws on Biological Surveillance Governance and Accountability

Case 1: Selvi v. State of Karnataka (2010)

Citation: (2010) 7 SCC 263.
Court: Supreme Court of India.

Facts: The case concerned the involuntary administration of narcoanalysis, polygraph examinations, and Brain Electrical Activation Profile tests during criminal investigations.

The central issue was whether investigative agencies could subject individuals to these scientific techniques without their consent.

Judgment: The Supreme Court held that the involuntary administration of the impugned techniques violated constitutional protections, including the right against self-incrimination under Article 20(3) and personal liberty under Article 21. It also emphasised the importance of personal autonomy and privacy. Indian Kanoon

Relevance to biological surveillance

Although Selvi did not establish a general prohibition against DNA profiling, it provides important principles for evaluating intrusive scientific procedures.

It demonstrates that:

• Scientific usefulness does not automatically justify involuntary testing.
• Bodily and mental autonomy are constitutionally significant.
• Investigative convenience cannot override fundamental rights.
• Consent and procedural safeguards matter when intrusive scientific techniques are used.

Illustration: If an investigating agency seeks to obtain biological information through an intrusive procedure, it must identify the applicable legal authority and satisfy the relevant constitutional requirements. It cannot rely solely on the claim that the procedure might help solve a crime.

Legal significance: Selvi supports a rights-based approach to biological evidence collection, although the legality of obtaining DNA samples must also be assessed under the specific laws and precedents governing those samples.

Case 2: Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)

Citation: (2017) 10 SCC 1.
Court: Supreme Court of India, nine-judge Constitution Bench.

As discussed above, this is the foundational Indian case on informational privacy and surveillance.

The judgment recognised privacy as a fundamental right and explained why modern technologies can threaten personal autonomy through data collection, aggregation, and profiling.

Application to biological surveillance governance

The decision supports scrutiny of:

1. The legal basis for biological data collection.
2. The purpose and necessity of surveillance.
3. The amount and sensitivity of information collected.
4. The consequences of linking biological records with other databases.
5. The safeguards against unauthorised access and secondary use.
6. The availability of effective remedies.

The judgment also provides a basis for examining whether the state uses personal information to construct profiles that affect an individual's rights or opportunities. SciGov API

Legal significance: Biological surveillance cannot be assessed merely as a technical or administrative activity. It must be examined as a potential interference with constitutionally protected privacy and liberty.

Case 3: K.S. Puttaswamy v. Union of India — Aadhaar judgment (2018)

Citation: (2019) 1 SCC 1.
Court: Supreme Court of India, Constitution Bench.

Facts: The litigation examined the constitutional validity of the Aadhaar framework, including the use of biometric and demographic information for identification and delivery of benefits and services.

Judgment: The Court upheld the Aadhaar Act's core framework while imposing important limits on its operation. The judgment also invalidated certain forms of mandatory linking and private-sector use. In particular, the requirement to link Aadhaar with mobile SIM cards was held unconstitutional, and the relevant provisions permitting private entities to require Aadhaar authentication were invalidated. Sci API

Principles relevant to biological surveillance

The Aadhaar litigation illustrates that biometric identification can serve a legitimate public purpose but remains subject to constitutional limitations.

The relevant considerations include:

• Whether a valid law authorises collection and processing.
• Whether the measure serves a legitimate state interest.
• Whether the degree of intrusion is proportionate to that interest.
• Whether sufficient restrictions exist on data use and disclosure.
• Whether the system creates unnecessary dependence on a single identity mechanism.

Illustration: Suppose a public authority proposes linking DNA profiles with a national identity database to distribute welfare benefits. The mere fact that biometric identification is already used for certain public purposes would not automatically validate the proposed DNA linkage.

The new system would require its own legal justification, including an assessment of necessity, proportionality, security, and the risks created by linking sensitive datasets.

Legal significance: The Aadhaar judgment demonstrates that a legitimate identification objective does not authorise unlimited collection, linkage, or use of personal information.

Case 4: S. and Marper v. United Kingdom (2008)

Application No.: 30562/04 and 30566/04.
Court: Grand Chamber of the European Court of Human Rights.
Judgment date: 4 December 2008.

Facts: The applicants challenged the retention of their fingerprints, cellular samples, and DNA profiles after criminal proceedings against them had ended. One applicant had been acquitted, while the proceedings against the other had been discontinued.

Legal issue: Whether the indefinite retention of biological material and DNA profiles belonging to individuals who had not been convicted violated their right to respect for private life under Article 8 of the European Convention on Human Rights.

Judgment: The Court found that the blanket and indiscriminate retention of the applicants' fingerprints, cellular samples, and DNA profiles was disproportionate and violated Article 8. HUDOC

Key legal principles

The Court recognised that:

• Biological samples can contain extensive personal information, including health-related information.
• Genetic information may also reveal information relevant to biological relatives.
• Retaining DNA data can interfere with privacy even when no immediate harm has occurred.
• Blanket retention policies may be disproportionate.
• The interests of crime prevention must be balanced against individual privacy.

Application to biological surveillance accountability

Consider a system that retains the biological samples of every person arrested, irrespective of whether the person is subsequently charged or convicted.

Under the principles of S. and Marper, such a policy would raise serious questions about proportionality, duration of retention, and individual circumstances.

A defensible system should specify:

1. Which records may be retained.
2. Why retention remains necessary.
3. When information must be destroyed.
4. Whether exceptions require independent authorisation.
5. How an affected person may challenge continued retention.

Legal significance: This is one of the most directly relevant international cases for the governance of DNA databases and the retention of biological information.

The judgment is not binding on Indian courts in the same manner as a Supreme Court of India decision, but it provides persuasive comparative reasoning.

Official judgment: European Court of Human Rights — S. and Marper v. United Kingdom

Case 5: R. v. Dyment (1988)

Citation: [1988] 2 SCR 417.
Court: Supreme Court of Canada.

Facts: The case concerned the collection and subsequent use of a blood sample obtained in a medical context following an accident. The sample was later used by police for investigative purposes.

Judgment: The Supreme Court of Canada treated the unauthorised use of the blood sample as an infringement of privacy. The decision emphasised the importance of the purpose for which personal information was originally obtained.

Relevance to biological surveillance

The case illustrates the legal importance of purpose limitation.

A biological sample obtained for medical treatment does not automatically become available for every subsequent governmental purpose.

For example:

• A blood sample collected for clinical diagnosis should not automatically be treated as a general law-enforcement resource.
• Genetic information collected for a particular research study should not automatically be reused for unrelated profiling.
• Access to biological records should be justified by the applicable law and the circumstances of the proposed use.

Legal significance: R. v. Dyment is useful comparative authority for the proposition that the circumstances in which biological information is obtained, and the purpose for which it is later used, are central to the privacy analysis.

Case 6: Whalen v. Roe (1977)

Citation: 429 U.S. 589 (1977).
Court: Supreme Court of the United States.

Facts: New York State established a system requiring the collection of identifying information concerning prescriptions for certain controlled medications. The system raised concerns about the confidentiality of medical information.

Judgment: The Court upheld the challenged statutory system, taking account of its safeguards. It recognised privacy interests associated with avoiding disclosure of personal matters and with independence in making certain important decisions.

Relevance to biological surveillance

The case illustrates that collecting sensitive health information is not automatically unconstitutional. The legality of a system depends on the circumstances, the public purpose, and the safeguards against disclosure and misuse.

Applied to biological surveillance, the relevant questions include:

• Is the information collected for a defined public purpose?
• Is access appropriately restricted?
• Are confidentiality safeguards effective?
• Is there an adequate legal framework governing disclosure?
• Does the system impose unnecessary burdens on individual privacy?

Legal significance: Whalen helps distinguish between potentially legitimate, safeguarded health-information systems and systems that expose sensitive information to unjustified disclosure.

This is comparative US authority, not a binding Indian precedent.

6. Statutory Framework Governing Biological Surveillance in India

Biological surveillance is not governed by one comprehensive Indian statute. The applicable legal framework depends on the type of information, the institution collecting it, and the purpose of the surveillance.

6.1 Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act, 2023 establishes a statutory framework for processing digital personal data in India, subject to its scope, commencement provisions, and applicable exemptions.

Official text: India Code — Digital Personal Data Protection Act, 2023

Relevance to biological surveillance

Digital records derived from biological information may fall within the Act's scope where they constitute digital personal data and the relevant processing is covered by the legislation.

Depending on the applicable provisions, obligations may concern:

• Lawful processing.
• Notice and consent where required.
• Compliance with specified obligations of data fiduciaries.
• Security safeguards.
• Procedures concerning data principals' rights.
• Accountability and enforcement.

Important qualification: The Act does not create a separate, comprehensive statutory regime for all biological information. Nor should it be assumed that every form of biological sample or every research or law-enforcement activity is governed identically.

The Act's commencement is provision-specific. Its actual application to a particular surveillance activity must be checked against the commencement notifications and rules in force at the relevant time.

6.2 Criminal-investigation laws

Biological samples may be obtained during criminal investigations under applicable legislation, subject to the relevant statutory conditions and constitutional protections.

The Bharatiya Nagarik Suraksha Sanhita, 2023, includes provisions dealing with medical examination and the collection of specified forensic evidence in criminal investigations.

The legality of obtaining a DNA sample depends on the applicable provision, the person's legal status, the nature of the investigation, and the procedural safeguards involved.

A statutory power to collect evidence does not automatically establish unlimited authority to retain samples indefinitely, use them for unrelated purposes, or disclose them without restriction.

6.3 Criminal procedure and forensic evidence

The Bharatiya Sakshya Adhiniyam, 2023, governs evidentiary questions within its scope.

When biological evidence is relied upon in court, important issues include:

• The scientific reliability of the analysis.
• The identity and qualifications of the examiner.
• The chain of custody.
• The possibility of contamination.
• The integrity of the laboratory process.
• The limits of the conclusions that can reasonably be drawn.

A scientifically reliable result does not, by itself, establish that the collection, retention, or processing of the sample was lawful.

Conversely, a privacy concern does not automatically establish that every biological test result is inadmissible. Admissibility and the legality of surveillance are related but distinct questions.

6.4 Medical confidentiality and professional duties

Medical information may also be subject to professional confidentiality obligations and applicable health-sector laws and regulations.

For biological surveillance systems operating through hospitals, diagnostic laboratories, or medical research institutions, governance should distinguish between:

• Information required for treatment.
• Information needed for approved research.
• Information lawfully required by public-health authorities.
• Information sought by law-enforcement agencies.
• Information proposed for commercial or algorithmic use.

The legal basis for one category should not automatically be assumed to authorise every other category.

7. Governance Accountability: Duties of Public Authorities

A central feature of biological surveillance governance is the allocation of clear responsibilities to institutions that collect or process biological information.

7.1 Legal authorisation

A public authority should identify the legal provision authorising the surveillance activity and explain how the activity falls within its scope.

A general claim that biological surveillance improves efficiency is not a substitute for legal authority.

7.2 Purpose limitation

Biological information should be used consistently with the lawful purpose for which it was collected, subject to any valid legal basis for further processing.

For example, DNA collected to identify a suspect in a particular investigation should not automatically be used to generate unrelated health or behavioural profiles.

7.3 Data minimisation

Authorities should avoid collecting information that is unnecessary for the legitimate objective.

If a limited DNA profile is sufficient for an authorised identification purpose, collecting and retaining additional biological material may require separate justification.

7.4 Retention and deletion

Retention policies should specify:

• The initial retention period.
• The conditions for extending that period.
• The review procedure.
• The criteria for deletion or destruction.
• The treatment of records following acquittal, discharge, or completion of an investigation.

The precise legal requirements depend on the applicable law, but indefinite retention without adequate justification raises serious proportionality concerns.

7.5 Security and access control

Institutions should implement appropriate technical and organisational safeguards.

These may include:

• Role-based access controls.
• Encryption.
• Access logs.
• Secure storage.
• Independent security assessments.
• Procedures for responding to data breaches.
• Restrictions on copying and transferring biological records.

Security is particularly important because the consequences of exposing genetic or medical information may persist long after the original collection.

7.6 Independent oversight

High-risk surveillance programmes should be subject to effective oversight appropriate to their legal context.

Oversight may include judicial authorisation, statutory review, independent inspection, audit, legislative supervision, or other mechanisms required or permitted by law.

An institution should not be the sole judge of the legality of its own intrusive surveillance decisions where independent scrutiny is required.

7.7 Effective remedies

An affected individual should have access to appropriate procedures for challenging unlawful collection, inaccurate records, unauthorised disclosure, or unjustified retention.

Depending on the circumstances, possible remedies may include:

• A complaint to the relevant authority.
• A statutory appeal or adjudicatory procedure.
• A claim for relief under applicable data-protection law.
• A writ petition under Article 226 before a High Court.
• Constitutional proceedings before the Supreme Court under Article 32 where the requirements for such proceedings are satisfied.
• Other civil or criminal remedies available under applicable law.

The remedy will depend on the facts, the governing statute, jurisdiction, and the relief sought.

8. Accountability for Artificial Intelligence and Predictive Biological Surveillance

The use of artificial intelligence creates additional legal problems because biological information may be processed to generate classifications or predictions that are difficult to explain.

Consider a hypothetical system that analyses medical information, genetic markers, and physiological data to classify people according to their predicted future health needs or perceived risks.

Even if the original data were lawfully collected, the resulting decision may still be problematic.

8.1 Algorithmic discrimination

A model may produce systematically inaccurate or disadvantageous outcomes for particular groups.

This may occur because of unrepresentative training data, flawed assumptions, inaccurate measurements, or the use of variables that operate as proxies for social disadvantage.

Where the system affects constitutional rights, public benefits, or access to services, its operation may raise equality and arbitrariness concerns.

8.2 Scientific validity

A biological correlation is not necessarily proof of causation.

For example, a genetic association with a disease does not establish that a particular individual will develop that disease. Similarly, a biological marker should not be treated as proof that a person will commit a crime or behave in a particular way.

Authorities should distinguish between:

• A measured biological characteristic.
• A statistical association.
• A model-generated prediction.
• A legally established fact.

Conflating these categories can produce unjustified decisions.

8.3 Explainability and contestability

When a consequential decision relies on a biological prediction, the responsible institution should be able to explain the relevant basis of the decision to the extent required by applicable law.

A person may need to know:

• What information was relied upon.
• Whether the information was accurate.
• What the prediction actually means.
• Whether human review occurred.
• How to challenge an erroneous result.

The precise disclosure rights depend on the applicable legal framework. Nevertheless, unexplained automated decisions can make meaningful accountability difficult.

8.4 Human responsibility

An institution should not avoid responsibility merely because an algorithm generated the result.

The relevant questions are who selected the system, who authorised its use, who validated its performance, who reviewed its outputs, and who had the power to correct an error.

Governance principle: Automated processing may assist decision-making, but it should not eliminate legally required human judgment, procedural fairness, or institutional accountability.

9. Biological Surveillance and Public Health Emergencies

Public-health surveillance presents a particularly difficult balance between collective welfare and individual privacy.

During an infectious-disease outbreak, authorities may need to collect information about infection status, exposure, laboratory results, or disease transmission.

Such collection can be justified when authorised by law and appropriately connected to disease prevention. However, an emergency does not automatically justify every form of surveillance.

A sound legal analysis should ask:

1. Is the measure authorised by applicable public-health law?
2. Is there credible evidence that the measure will advance the public-health objective?
3. Is the collection of identifiable data necessary?
4. Can aggregated or anonymised data achieve the objective?
5. Is access limited to those who need the information?
6. Is there a clear endpoint or review mechanism?
7. Will information be deleted, de-identified, or otherwise restricted when the purpose ends?

For instance, collecting laboratory results to identify and contain an outbreak is legally distinguishable from retaining those records indefinitely for unrelated employment screening.

The second activity requires its own justification and may be unlawful even if the original collection was legitimate.

The central principle is that the existence of a public-health objective does not remove the need for necessity, proportionality, confidentiality, and accountability.

10. Liability for Unlawful Biological Surveillance

Liability depends on the conduct, the responsible institution, the applicable statute, and the rights affected.

10.1 Constitutional and public-law liability

A state authority may face judicial review where biological surveillance violates fundamental rights or exceeds its legal powers.

Possible judicial responses include setting aside an unlawful decision, restricting a surveillance practice, directing reconsideration under lawful standards, or granting other appropriate relief.

Constitutional remedies depend on the nature of the violation and the court's jurisdiction.

10.2 Statutory liability

Where applicable statutory requirements are breached, an institution or responsible person may face consequences specified by the governing legislation.

Under the digital personal-data framework, the consequences depend on the provisions in force and the nature of the contravention.

It would be incorrect to assume that every unauthorised use of biological information automatically attracts the same penalty.

10.3 Civil liability

Unauthorised disclosure, negligent handling, or unlawful use of biological information may give rise to civil claims where the necessary legal elements are established.

The claimant may need to establish the relevant duty, breach, causation, and legally recognised harm, depending on the cause of action.

10.4 Criminal liability

Criminal liability may arise where conduct satisfies the elements of an applicable criminal offence, such as an offence involving unlawful access, dishonest misuse, or other prohibited conduct.

The mere fact that a surveillance measure is constitutionally disproportionate does not, by itself, establish every element of a criminal offence.

10.5 Institutional accountability

In addition to individual liability, governance failures may warrant:

• Independent investigation.
• Correction of inaccurate biological records.
• Suspension of an unsafe surveillance practice.
• Review of access permissions.
• Destruction or deletion of information where legally required.
• Changes to procurement, training, and internal controls.

An effective accountability framework must address both the immediate harm and the institutional conditions that allowed it to occur.

11. Practical Hypothetical: A National Biological Surveillance Database

Assume that a government agency proposes to create a national database containing DNA profiles, biometric identifiers, selected health indicators, and algorithmically generated biological risk scores.

The database is intended to assist criminal investigations and public-health planning.

Legal issue 1: Is there sufficient legal authority?

The government must identify the legal basis for collecting each category of information.

A legal power to collect forensic DNA evidence does not necessarily authorise collecting genetic health information from the same person.

Legal issue 2: Is the database proportionate?

The agency must explain why each category of information is needed and whether a less intrusive system could achieve the same legitimate purpose.

The principles of Puttaswamy and S. and Marper would be particularly relevant to this assessment.

Legal issue 3: What happens to records of acquitted persons?

The agency must examine the applicable retention rules and constitutional requirements.

The fact that a person was once suspected of an offence does not automatically justify indefinite retention of every biological record.

Legal issue 4: Can the data be used to predict criminality?

A model-generated biological risk score should not be treated as proof of criminal conduct.

If such scores are used to impose restrictions, increase surveillance, or determine access to public services, the legal issues include scientific validity, equality, procedural fairness, and proportionality.

Legal issue 5: Who is accountable for errors?

The system must have a clear allocation of responsibility for:

• Data accuracy.
• Scientific validation.
• Access control.
• Algorithmic testing.
• Decisions made using its outputs.
• Investigation of complaints.

Legal issue 6: Can the database be shared with private organisations?

The answer depends on the governing legislation, the purpose of the proposed disclosure, and the applicable privacy protections.

A public authority should not assume that possession of biological data gives it unrestricted authority to share that data with insurers, employers, technology companies, or research institutions.

Conclusion of the hypothetical

The database would not be lawful merely because it promises improvements in crime detection or public health. Each significant processing activity must be supported by appropriate legal authority and assessed against the applicable constitutional and statutory safeguards.

12. Proposed Framework for Biological Surveillance Governance Accountability

The following framework synthesises established legal principles. It is a proposed analytical model, not a claim that Indian law already contains a single statute establishing all these requirements.

Essential distinction

The framework must distinguish between a governance recommendation and an enforceable legal obligation.

For example, independent auditing may be an appropriate safeguard for a high-risk biological surveillance system. Whether a particular institution is legally required to conduct a specific audit depends on the legislation, regulations, binding directions, and circumstances applicable to that institution.

This distinction prevents policy recommendations from being incorrectly presented as existing statutory duties.

13. Critical Analysis: Challenges in Biological Surveillance Governance

13.1 Technological development exceeds legal adaptation

Genetic analysis and algorithmic processing may create new possibilities for inferring personal characteristics from biological data.

Legislation designed for traditional identification may not address every risk associated with large-scale data integration.

Courts and regulators must therefore examine the actual capabilities and consequences of a system rather than relying solely on the terminology used to describe it.

13.2 Biological information affects relatives

Genetic information is not exclusively individual in its implications. It may reveal information about relatives who never provided a sample.

This creates difficult questions concerning familial searching, consent, confidentiality, and the interests of third parties.

13.3 Consent may not be sufficient

Consent is important where required, but it is not a universal solution to every surveillance problem.

In custodial settings, employment relationships, public-service delivery, or emergency healthcare, individuals may have limited practical freedom to refuse.

Even valid consent does not necessarily eliminate all statutory or constitutional restrictions on subsequent processing.

13.4 Scientific uncertainty can become legal injustice

Biological predictions may be probabilistic, context-dependent, or vulnerable to error.

When institutions treat uncertain scientific findings as definitive facts, individuals may face unjustified stigma, exclusion, or restrictions.

13.5 Remedies may be difficult to obtain

Individuals may not know that their biological information has been collected, linked, or used to generate a consequential prediction.

Effective accountability therefore requires appropriate transparency, accessible complaint mechanisms, and oversight capable of examining institutional practices.

14. Key Principles Emerging from the Case Law

The principal decisions can be summarised as follows:

The first three are decisions of the Supreme Court of India. The remaining cases provide comparative legal reasoning from foreign jurisdictions and do not bind Indian courts in the same manner.

15. Conclusion

Biological Surveillance Doctrine Governance Accountability can be understood as a rights-based approach to ensuring that the collection and use of biological information remain lawful, necessary, proportionate, scientifically defensible, and institutionally accountable.

Indian constitutional law provides the principal foundation through Article 21's protection of personal liberty and privacy, supplemented by equality guarantees and other applicable fundamental rights.

The leading decisions establish several important propositions:

1. Privacy is a fundamental right. Biological information can implicate informational privacy, autonomy, and dignity.
2. Scientific usefulness is not an unlimited justification. Intrusive methods must satisfy the applicable constitutional and legal requirements.
3. Retention is a separate legal question. Lawful collection does not automatically justify indefinite storage.
4. Purpose matters. Information obtained for one purpose cannot automatically be used for every other purpose.
5. Biological predictions are not established facts. Their reliability, limitations, and consequences must be examined.
6. Institutions must remain accountable. The use of algorithms or scientific technologies does not eliminate legal responsibility.
7. Remedies must be effective. Individuals need appropriate mechanisms to challenge unlawful collection, misuse, inaccurate information, and unjustified retention.

The most important authorities for developing this framework are K.S. Puttaswamy, Selvi, the Aadhaar judgment, and S. and Marper. Together, they provide a substantial legal foundation for examining the constitutional limits of biological surveillance.

Ultimately, a legitimate biological surveillance system must do more than demonstrate technological effectiveness. It must establish a lawful purpose, respect individual rights, minimise unnecessary intrusion, maintain appropriate safeguards, and provide meaningful accountability when those safeguards fail.