1. Introduction

Biological Surveillance Governance refers to the legal, constitutional, ethical, and institutional framework governing the collection, processing, storage, analysis, sharing, and use of biological information about individuals and populations.

Biological surveillance may involve the collection of DNA samples, genetic profiles, biometric identifiers, blood samples, tissue specimens, disease-monitoring data, genomic sequences, and other biological indicators. It may also involve emerging technologies capable of inferring a person's health risks, ancestry, biological characteristics, or susceptibility to particular diseases.

The central legal question is:

To what extent may the State, law-enforcement agencies, healthcare institutions, researchers, and private companies monitor biological characteristics without violating privacy, bodily autonomy, equality, dignity, and other fundamental rights?

Biological surveillance can serve legitimate purposes, including:

• Detecting infectious disease outbreaks.
• Identifying missing persons and unidentified human remains.
• Investigating serious crimes through DNA evidence.
• Monitoring public-health risks.
• Regulating biotechnology and biological research.
• Conducting medically justified genetic screening.
• Protecting public safety and preventing biological threats.

However, biological surveillance also creates significant risks. Biological information can reveal highly personal characteristics, may identify relatives who have never consented to testing, and can potentially be reused for purposes unrelated to its original collection. Genetic information may remain relevant throughout a person's lifetime, while some biological samples may be retained indefinitely.

Consequently, effective governance requires more than authorising the collection of biological information. It must establish clear legal authority, defined purposes, necessity and proportionality safeguards, restrictions on secondary use, independent oversight, data security, retention limits, and accessible remedies for unlawful surveillance.

This discussion focuses primarily on Indian constitutional and statutory law, with comparative references to important decisions from the United States, the United Kingdom, and the European Court of Human Rights. Biological Surveillance Governance is used here as an analytical framework rather than the name of a single enacted statute.

2. Meaning and Scope of Biological Surveillance Governance

2.1 Biological surveillance

Biological surveillance is the systematic observation, measurement, or analysis of biological characteristics to obtain information about an individual or population.

It can be divided into several categories.

A. Genetic surveillance

This involves the collection or analysis of DNA, genetic profiles, inherited characteristics, or genomic sequences. Its purposes may include criminal identification, medical research, ancestry analysis, or identification of biological relationships.

B. Biometric surveillance

This includes the use of fingerprints, facial characteristics, iris patterns, and other measurable physiological or behavioural characteristics to identify or authenticate individuals. Although biometric and genetic information are distinct categories, both raise questions concerning identification, privacy, accuracy, and data retention.

C. Public-health surveillance

This involves monitoring diseases, infections, outbreaks, and population-level health indicators. It may include laboratory reporting, pathogen sequencing, contact tracing, and epidemiological databases.

D. Reproductive and familial surveillance

This concerns the collection or analysis of biological information relating to fertility, pregnancy, parentage, reproductive health, or genetic relationships. Such surveillance can affect intimate privacy and the autonomy of individuals and families.

E. Predictive biological surveillance

This involves using biological or genetic information to estimate future health conditions, disease susceptibility, or other biological outcomes. Where such predictions are used to make decisions about employment, insurance, education, policing, or access to public services, questions of discrimination and fairness become particularly important.

2.2 Meaning of governance

Governance concerns the rules and institutions that determine:

1. Who may collect biological information.
2. Under what legal authority it may be collected.
3. Whether consent is required.
4. What purposes justify its collection.
5. Who may access and analyse it.
6. How long the information may be retained.
7. Whether it may be transferred to other organisations.
8. How unlawful or discriminatory use is prevented.
9. Which independent bodies supervise its use.
10. What remedies are available to affected persons.

A sound governance framework must regulate the entire lifecycle of biological information, from collection to eventual deletion or lawful destruction.

3. Constitutional Foundations of Biological Surveillance Governance in India

The Indian Constitution does not contain a provision specifically entitled Biological Surveillance Governance. Nevertheless, several fundamental rights provide the constitutional foundation for regulating biological surveillance.

3.1 Article 21: Right to life, personal liberty, and privacy

Article 21 provides that no person shall be deprived of life or personal liberty except according to procedure established by law.

The constitutional protection of privacy is particularly important where biological surveillance involves bodily samples, genetic information, medical records, or intimate personal characteristics.

A surveillance measure may raise constitutional concerns if it:

• Collects biological information without sufficient legal authority.
• Interferes disproportionately with bodily autonomy.
• Retains information beyond a justified period.
• Enables arbitrary monitoring of individuals.
• Exposes sensitive medical or genetic information.
• Uses biological characteristics to impose unjustified restrictions on liberty.

The legality of a particular measure depends on its statutory basis, purpose, necessity, safeguards, and practical impact.

3.2 Article 14: Equality before the law

Article 14 prohibits arbitrary State action and guarantees equality before the law and equal protection of the laws.

Biological surveillance can create equality concerns where authorities disproportionately monitor particular communities, treat genetic predictions as conclusive evidence of wrongdoing, or use biological characteristics to justify unequal treatment without a legitimate and constitutionally adequate basis.

For example, a policing system that subjects people to intensified biological monitoring solely because of their ancestry or a statistically inferred predisposition to disease or criminality would raise serious concerns about arbitrariness, discrimination, and evidentiary validity.

Article 14 requires public authorities to act according to constitutionally valid standards rather than stereotypes or unsupported assumptions.

3.3 Article 19: Freedom and associated constitutional interests

Depending on the circumstances, biological surveillance may interfere with freedoms protected by Article 19, including freedom of speech and expression, freedom of association, and freedom to practise a profession.

For instance, pervasive monitoring of people attending a peaceful meeting through biometric identification may discourage participation in public life.

Any restriction must satisfy the applicable constitutional requirements. The fact that surveillance uses sophisticated technology does not exempt it from constitutional scrutiny.

3.4 Articles 20(3) and 20(2): Criminal investigation safeguards

Article 20(3) protects an accused person against being compelled to be a witness against themselves. Article 20(2) protects against prosecution and punishment for the same offence more than once.

Biological evidence creates a specific distinction between physical evidence and testimonial compulsion. The constitutional status of compelled DNA samples, fingerprints, blood samples, and other bodily evidence cannot simply be assumed to be identical.

Indian judicial decisions have examined this distinction, particularly in the context of criminal investigations and narco-analysis.

The governing principle is that investigative convenience does not automatically override constitutional protections.

3.5 Article 32 and Article 226: Constitutional remedies

Article 32 empowers individuals to approach the Supreme Court for enforcement of fundamental rights, while Article 226 gives High Courts broad writ jurisdiction.

These provisions may be relevant where biological surveillance is conducted unlawfully by public authorities, sensitive information is improperly disclosed, or a statutory surveillance mechanism violates fundamental rights.

Depending on the facts, possible remedies may include judicial review, directions to cease unlawful processing, correction or destruction of improperly retained information where legally appropriate, and other relief recognised by law.

4. Leading Indian Case Laws on Biological Surveillance Governance

Case 1: Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)

Citation: (2017) 10 SCC 1
Court: Supreme Court of India
Subject: Fundamental right to privacy.

This is the foundational Indian constitutional judgment for biological surveillance governance.

A nine-judge bench of the Supreme Court unanimously recognised privacy as a fundamental right protected by the Constitution, particularly under Article 21 and the freedoms guaranteed by Part III.

The Court explained that privacy protects important aspects of individual autonomy, dignity, personal choice, and the ability to control access to intimate information.

Legal principles

The judgment establishes that privacy is not restricted to secrecy or physical seclusion. It also protects personal information and decisions concerning the individual.

Applied to biological surveillance, this reasoning is relevant to:

• Genetic databases maintained by public authorities.
• Unauthorised collection of biological samples.
• Medical and genomic information held by hospitals.
• Biological profiling by private companies.
• The disclosure of sensitive genetic information.
• Government systems that combine biological identifiers with other personal records.

The constitutional validity of a State measure interfering with privacy must be examined through the applicable requirements of legality, legitimate State purpose, proportionality, and safeguards against abuse.

Application to biological surveillance

Suppose a government agency establishes a database containing the DNA profiles of every resident without identifying a specific legal basis or explaining why universal collection is necessary.

The mere assertion that the database might improve law enforcement would not, by itself, settle its constitutionality. A court would need to examine the legal authority for collection, the purposes served, the degree of intrusion, less intrusive alternatives, retention practices, and protections against misuse.

Significance: Puttaswamy provides the principal constitutional foundation for challenging disproportionate or arbitrary biological surveillance in India.

Case 2: Selvi v. State of Karnataka (2010)

Citation: (2010) 7 SCC 263
Court: Supreme Court of India
Subject: Involuntary narco-analysis, polygraph examinations, and brain electrical activation profile tests.

In Selvi, the Supreme Court considered the constitutional validity of involuntary investigative techniques involving narco-analysis, polygraph examinations, and brain electrical activation profile tests.

The Court held that the involuntary administration of these techniques violated constitutional protections, including Article 20(3), and infringed personal liberty under Article 21.

The judgment also considered the importance of mental privacy and the protection of personal autonomy against compelled investigative methods.

Relevance to biological surveillance

The decision is important because it distinguishes between obtaining information through voluntary participation and compelling a person to undergo an investigative procedure that interferes with constitutional rights.

However, the judgment should not be read as establishing that every compulsory biological sample is unconstitutional. DNA sampling, fingerprint collection, blood testing, and techniques designed to extract testimonial information raise different legal questions.

Legal implications

A biological surveillance programme involving compelled procedures must be assessed according to:

1. The nature of the procedure.
2. The degree of physical or mental interference.
3. The applicable statutory authority.
4. The person's status as an accused or another category of individual.
5. The constitutional protections engaged.
6. The safeguards governing collection and subsequent use.

Significance: Selvi establishes an important constitutional limit on invasive investigative techniques and supports a rights-based approach to biological surveillance.

Case 3: District Registrar and Collector v. Canara Bank (2005)

Citation: (2005) 1 SCC 496
Court: Supreme Court of India
Subject: Privacy, confidential records, and State access to private information.

This decision concerned statutory powers permitting inspection of private records and the constitutional implications of State access to information held by a private institution.

The Supreme Court emphasised the importance of privacy and examined the legality of governmental interference with confidential records.

Application to biological information

The reasoning is relevant when government authorities seek access to:

• Hospital records.
• Genetic-testing reports.
• Reproductive-health records.
• Laboratory databases.
• Confidential medical research material.

The fact that information is held by a private institution does not automatically eliminate every privacy interest in it.

For example, an agency seeking access to an individual's genetic report from a private laboratory must identify the applicable legal authority and comply with the relevant legal restrictions.

The precise legal requirements depend on the statutory scheme and the nature of the information sought.

Significance: The case supports scrutiny of governmental access to confidential information and reinforces the importance of lawful authority when biological information is obtained from private institutions.

Case 4: K.S. Puttaswamy (Aadhaar) v. Union of India (2018)

Citation: (2019) 1 SCC 1
Court: Supreme Court of India
Subject: Aadhaar, biometric identification, privacy, and proportionality.

The Aadhaar litigation examined the constitutional validity of a national identity system based substantially on biometric and demographic information.

The Supreme Court upheld the Aadhaar framework in substantial part while limiting certain uses and addressing concerns about privacy, proportionality, and the scope of compulsory authentication.

The case illustrates that biometric identification systems must be assessed according to their purposes, legal design, safeguards, and effects on individual rights.

Relevance to biological surveillance governance

Aadhaar primarily concerns biometric identity rather than genetic surveillance. Nevertheless, its constitutional principles are relevant to systems using fingerprints, iris scans, facial identifiers, and other biological characteristics.

The judgment demonstrates the importance of examining whether:

• Collection is authorised by law.
• The system serves a legitimate purpose.
• The extent of collection and use is proportionate.
• Access to essential services is protected against unlawful exclusion.
• Information is used only within legally permissible boundaries.
• Security and accountability safeguards are adequate.

A biometric system used for identity verification should not automatically be treated as legally authorised for criminal profiling, medical inference, or unrelated surveillance.

Significance: The Aadhaar decision provides a major Indian precedent for evaluating large-scale biometric systems and the limits of their permissible use.

Case 5: K.S. Puttaswamy v. Union of India (2017) — European DNA-retention principles considered comparatively

A particularly relevant comparative judgment is S and Marper v. United Kingdom.

Citation: Applications Nos. 30562/04 and 30566/04, European Court of Human Rights, Grand Chamber, 4 December 2008.

The case concerned the retention of fingerprints, cellular samples, and DNA profiles belonging to individuals who had been arrested but were not convicted.

The European Court of Human Rights held that the blanket and indefinite retention of the applicants' biometric and genetic information violated Article 8 of the European Convention on Human Rights, which protects private and family life.

The Court considered the sensitive character of biological samples, the information that could be extracted from them, and the potential to infer genetic relationships and ethnic origin.

Application to Indian law

Although S and Marper is not binding on Indian courts, its reasoning is persuasive comparative material.

It highlights a crucial distinction:

The lawfulness of collecting a biological sample does not automatically establish the lawfulness of retaining it indefinitely.

An Indian court assessing a comparable dispute could consider:

• Whether the individual was convicted.
• Whether the original purpose remains valid.
• Whether retention is necessary.
• Whether less intrusive alternatives exist.
• Whether the sample contains more information than the profile actually required.
• Whether periodic review or deletion is available.

Significance: S and Marper is a leading international authority on proportionality and the retention of genetic and biometric information.

5. Additional Case Laws Relevant to Biological Surveillance

The following decisions address related constitutional principles and help develop a broader legal framework.

These authorities do not all concern genetic surveillance directly. Their relevance varies according to the specific biological data, the institution conducting surveillance, and the legal basis for the activity.

Case 6: A Supreme Court decision on DNA testing and bodily autonomy (10 November 2025)

Court: Supreme Court of India
Source: Supreme Court judgment, Criminal Appeal No. 1013 of 2021.

This judgment is particularly relevant to the limits of compelled DNA testing.

The Court emphasised that an order directing DNA testing must have a direct and demonstrable connection with the offence under investigation. In the absence of that connection, compelling a person to undergo DNA profiling may constitute an unwarranted intrusion into bodily autonomy and privacy, contrary to safeguards associated with Articles 20(3) and 21. Sci API

Legal significance

The decision reinforces three important principles:

1. Relevance: DNA testing must have a meaningful connection to the issue being investigated.
2. Necessity: The investigative purpose must justify the proposed intrusion.
3. Constitutional protection: Authorities cannot treat the availability of DNA technology as sufficient justification for compelling a person to undergo testing.

For example, a court should not order DNA testing merely because it might provide additional information. The requesting party must establish the legally relevant connection between the proposed test and the matter in dispute.

Significance: This judgment provides a particularly important contemporary Indian authority for assessing the legality of compelled biological surveillance.

6. Statutory Framework Governing Biological Surveillance in India

Biological surveillance is governed by multiple legal regimes rather than a single comprehensive statute.

6.1 Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act, 2023 establishes a framework for processing digital personal data.

The Act is relevant to biological surveillance when biological information is digitised and qualifies as personal data within its scope.

Potentially relevant information includes:

• Digitised medical records.
• Identifiable genetic-testing reports.
• Digital biometric records.
• Genetic databases containing identifiable profiles.
• Personal health information used in digital surveillance systems.

The Act's framework addresses lawful processing, consent, certain legitimate uses, security safeguards, and accountability. However, its application depends on the relevant provisions, exemptions, and commencement dates. India Code

Important current-law qualification: As of 27 October 2026, the Act is being implemented in phases. The notification dated 13 November 2025 brought specified institutional and preliminary provisions into force immediately, while many substantive processing obligations and individual rights are scheduled to commence 18 months after that notification, on 13 May 2027. Other specified provisions have a one-year commencement date. Consequently, the Act should not be treated as though all its substantive provisions are already operative. E-Gazette

6.2 Information Technology Act, 2000, and the SPDI Rules, 2011

The Information Technology Act and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, are relevant to certain forms of biological and health information handled by covered private-sector entities.

The Rules identify sensitive personal data categories that include physical, physiological and mental health conditions, medical records and history, and biometric information. Their definition of biometrics also refers to DNA in the context of authentication. IndiaCode by eCourtsIndia

Depending on the applicable provisions, the framework addresses matters such as privacy policies, collection, disclosure, and reasonable security practices.

The relationship between this framework and the DPDP Act must be considered in light of the phased commencement arrangements and the provisions that remain operative at the relevant time.

6.3 Criminal procedure and biological evidence

Criminal investigations may involve bodily examinations and the collection of biological samples.

The governing legislation includes the Bharatiya Nagarik Suraksha Sanhita, 2023, which replaced the Code of Criminal Procedure, 1973, subject to applicable transitional provisions.

The statutory powers available in a particular investigation depend on the circumstances, the person's legal status, the type of examination, and the provision relied upon by the investigating authority.

A power to conduct a medical examination should not automatically be interpreted as an unrestricted power to create, retain, or repurpose a person's genetic profile indefinitely.

6.4 DNA Technology (Use and Application) Regulation Bill

The proposed DNA Technology (Use and Application) Regulation Bill, 2019, sought to establish a regulatory framework for DNA profiling, including DNA data banks and restrictions on the use of DNA information.

However, the Bill was withdrawn from the Lok Sabha on 24 July 2023. It must therefore not be cited as an enacted statute currently authorising a comprehensive national DNA database. PRS Legislative Research

This distinction is legally important: a legislative proposal cannot itself provide statutory authority for biological surveillance.

DNA collection and testing must instead be justified under the applicable laws and constitutional principles governing the particular situation.

7. Core Principles of Biological Surveillance Governance

A comprehensive governance system should incorporate the following principles.

7.1 Legality

Biological surveillance must have a valid legal basis.

Government agencies should not create intrusive surveillance programmes solely through informal instructions, administrative convenience, or technological capability where legal authority is required.

The law should define the relevant powers, permissible purposes, responsible institutions, and applicable safeguards.

7.2 Legitimate purpose

Biological surveillance should serve a legally permissible objective.

Examples may include:

• Investigating a serious offence.
• Identifying disaster victims.
• Responding to a public-health emergency.
• Conducting ethically approved medical research.
• Confirming identity where legally justified.

A vague assertion of public safety should not automatically justify unrestricted collection of biological information.

7.3 Necessity and proportionality

The extent of surveillance must be justified by the objective pursued.

A proportionality assessment should consider:

1. The importance of the objective.
2. The relationship between the measure and that objective.
3. The availability of less intrusive alternatives.
4. The severity and duration of the privacy interference.
5. The adequacy of safeguards against abuse.

For instance, a targeted DNA test supported by relevant evidence may be more proportionate than compulsory collection of DNA from an entire neighbourhood.

7.4 Purpose limitation

Biological information should not be used for unrelated purposes without a valid legal basis.

A sample collected to identify a disaster victim should not automatically become available for unrelated criminal investigations, commercial genetic analysis, or behavioural profiling.

The legality of secondary use depends on the applicable statute, consent arrangements, and other relevant legal requirements.

7.5 Data minimisation

Authorities should collect only the information reasonably necessary for the authorised purpose.

Where a limited DNA profile is sufficient for identification, retaining a biological sample containing substantially more genetic information requires separate justification.

This distinction matters because a biological sample may contain information beyond the particular profile extracted from it.

7.6 Retention and deletion

Governance rules should specify:

• How long samples and profiles may be retained.
• Whether different categories of individuals are subject to different retention rules.
• When information must be reviewed.
• Whether deletion is required after acquittal, dismissal, or completion of the relevant purpose.
• Which authority supervises deletion.
• How individuals may challenge improper retention.

Retention should not be presumed lawful merely because the original collection was lawful.

7.7 Security and confidentiality

Biological databases require strong security controls.

Appropriate safeguards may include:

• Encryption.
• Role-based access controls.
• Secure storage and transmission.
• Audit logs.
• Independent security testing.
• Restrictions on copying and exporting data.
• Incident-response procedures.
• Penalties or other remedies for unlawful access.

A breach involving genetic information may expose not only the individual concerned but also biological relatives whose identities or relationships can be inferred.

7.8 Transparency and accountability

Where legally permissible, individuals should receive meaningful information about the collection and use of their biological data.

Oversight mechanisms should establish:

• Which institution is responsible.
• Who authorised the surveillance.
• What purpose the data serves.
• Whether the information was shared.
• How long it will be retained.
• How an affected person can challenge misuse.

Some operational secrecy may be justified during criminal investigations. However, secrecy should not eliminate all independent oversight or judicial review.

8. Biological Surveillance and Public Health

Public-health surveillance presents a difficult legal balance between collective welfare and individual rights.

During an infectious-disease outbreak, authorities may need to collect laboratory results, sequence pathogens, trace contacts, and monitor infection patterns.

Such activities can protect public health, but excessive surveillance may expose medical conditions, stigmatise communities, or create persistent databases of identifiable health information.

Legal requirements

A defensible public-health surveillance programme should ordinarily address:

A. Defined objectives: Identify the specific public-health problem being addressed.

B. Appropriate authority: Establish the legal basis for collection and use.

C. Scientific validity: Ensure that the information collected is reliable and appropriate for the intended purpose.

D. Confidentiality: Restrict access to identifiable information.

E. Proportionality: Avoid collecting more personal information than necessary.

F. Retention: Establish appropriate review and deletion arrangements.

G. Non-discrimination: Prevent the use of disease-related information to impose unjustified social or economic penalties.

Example: During an outbreak, a health authority may legitimately need to identify infected individuals and their contacts. That does not necessarily justify publishing their names, disclosing their genetic information to employers, or permanently retaining their medical data for unrelated policing purposes.

Public-health necessity must be evaluated in relation to the particular intervention rather than treated as a blanket justification for every form of surveillance.

9. Biological Surveillance, Artificial Intelligence, and Predictive Governance

Artificial intelligence increasingly enables the analysis of biological information at scale.

An AI system may combine genetic data, medical histories, physiological measurements, and demographic information to predict disease risk or identify biological patterns.

Although these tools can support medical research and clinical decision-making, their use in public administration and law enforcement raises additional concerns.

9.1 Algorithmic discrimination

A predictive system may produce inaccurate or systematically biased results because of unrepresentative training data, poor validation, or inappropriate assumptions.

A genetic risk estimate should not automatically be treated as a definitive diagnosis or as proof that an individual will develop a particular condition.

Similarly, a biological prediction should not be treated as reliable evidence of criminal propensity merely because it is generated by a sophisticated algorithm.

9.2 Explainability and contestability

Where biological information affects a person's legal rights or access to public services, the governing framework should provide appropriate means to challenge inaccurate information and consequential decisions.

Depending on the context, safeguards may include:

• Human review.
• Independent technical validation.
• Documentation of the model's intended use.
• Testing for discriminatory outcomes.
• Correction of inaccurate records.
• Access to an effective appeal mechanism.

9.3 Accountability for automated decisions

Responsibility should not disappear merely because an algorithm was involved.

The public authority or institution making the consequential decision must remain accountable under the applicable law.

For example, if an automated system incorrectly classifies a person as having a serious inherited disease and that classification results in the denial of a public benefit, the legal response should examine the accuracy of the data, the validity of the model, the decision-making process, and the available remedies.

Biological prediction must not become a substitute for legally relevant evidence.

10. Institutional Governance and Oversight

Effective biological surveillance requires clear allocation of responsibilities.

These responsibilities may overlap, but the legal powers of each institution must be established by the relevant legislation.

An effective system should avoid a situation in which the same agency collects biological information, authorises its use, investigates complaints, and determines whether its own conduct was lawful without independent scrutiny.

11. Legal Remedies for Unlawful Biological Surveillance

Where biological surveillance violates applicable law, several forms of relief may be available.

11.1 Constitutional writ proceedings

An affected person may seek relief under Article 32 before the Supreme Court or Article 226 before a High Court, where the requirements for constitutional jurisdiction are satisfied.

Potential grounds include:

• Violation of privacy.
• Arbitrary State action.
• Disproportionate interference with bodily autonomy.
• Unlawful retention of biological information.
• Discriminatory use of biological data.
• Failure to follow mandatory legal procedures.

11.2 Criminal-procedure remedies

Where biological evidence has been obtained unlawfully or without the required authority, the affected person may raise the relevant objection before the competent court.

The consequences depend on the governing law, the nature of the violation, the evidentiary rules, and the circumstances of the case.

Unlawful collection does not necessarily produce the same consequence in every proceeding.

11.3 Data-protection remedies

Where applicable data-protection provisions are in force and cover the processing in question, individuals may pursue the remedies available under that framework.

The relevant rights and procedures must be assessed in light of the DPDP Act's phased commencement, applicable exemptions, and any other governing law.

11.4 Civil and other remedies

Depending on the facts and applicable legislation, an affected person may also have remedies relating to confidentiality, breach of contract, negligence, unlawful disclosure, or other legally recognised wrongs.

The availability of damages, injunctions, deletion orders, or other relief cannot be assumed without examining the applicable cause of action and jurisdiction.

12. Major Challenges in Biological Surveillance Governance

A. The permanence of genetic information

A password can be changed, but a person's underlying genetic characteristics generally cannot.

A genetic-data breach may therefore create long-lasting risks that cannot be remedied simply by changing credentials.

B. Familial privacy

A person's genetic profile may reveal information about biological relatives who never consented to the original collection.

Governance frameworks must therefore consider the implications of genetic inference for family members and other identifiable individuals.

C. Function creep

Function creep occurs when information collected for one purpose gradually becomes available for other uses.

A database initially established to identify missing persons, for example, might later be proposed for broader surveillance. Each expansion of purpose requires an appropriate legal and constitutional assessment.

D. Discriminatory profiling

Biological characteristics or predictions may be misinterpreted as indicators of intelligence, behaviour, social worth, or criminality.

Such uses can undermine equality and dignity, particularly where predictions are scientifically weak or applied to entire populations.

E. Inadequate oversight

Surveillance systems may lack independent audits, effective complaint mechanisms, or transparent retention rules.

Without meaningful oversight, legal safeguards may exist on paper but fail in practice.

F. Cross-border sharing

Genetic information may be transferred between laboratories, research organisations, healthcare providers, and foreign authorities.

Cross-border sharing raises questions concerning jurisdiction, confidentiality, security, consent, and the legal authority of the receiving institution.

13. Proposed Framework for Stronger Biological Surveillance Governance

A comprehensive governance model should include the following elements.

These safeguards should be adapted to the type of biological surveillance involved. A public-health monitoring programme, a criminal DNA database, and a medical research project do not necessarily require identical procedures.

14. Critical Legal Analysis

Biological Surveillance Governance raises a fundamental question about the relationship between technological capacity and legal authority.

The ability to extract biological information does not establish a right to collect it. Likewise, the ability to retain information does not establish a right to retain it indefinitely, and the ability to predict a biological outcome does not establish that the prediction may lawfully determine a person's rights.

The most important judicial principles can be summarised as follows:

• Privacy: K.S. Puttaswamy establishes the constitutional foundation for protecting personal information and autonomy.
• Bodily and mental autonomy: Selvi demonstrates that investigative objectives do not automatically override constitutional protections.
• Confidentiality: District Registrar v. Canara Bank supports scrutiny of State access to confidential records.
• Biometric proportionality: The Aadhaar judgment demonstrates the need to examine the legal design, purpose, and safeguards of large-scale identification systems.
• DNA retention: S and Marper illustrates why the continued retention of genetic information requires separate proportionality analysis.
• Targeted DNA testing: The Supreme Court's 10 November 2025 judgment reinforces the importance of a direct and demonstrable connection between compelled DNA testing and the offence under investigation. Sci API

Taken together, these authorities support a governance approach based on lawful authority, legitimate purpose, necessity, proportionality, accountability, and effective remedies.

Nevertheless, courts must distinguish between biometric identification, genetic profiling, public-health surveillance, and invasive bodily procedures. The legal standards applicable to one category cannot automatically be transferred to another without considering the relevant constitutional and statutory provisions.

15. Conclusion

Biological Surveillance Governance is the legal framework through which the collection, analysis, retention, sharing, and use of biological information are reconciled with privacy, dignity, bodily autonomy, equality, public safety, and legitimate scientific objectives.

In India, its constitutional foundations lie principally in Articles 14 and 21, supplemented by other applicable fundamental rights and procedural protections. The Puttaswamy, Selvi, District Registrar, and Aadhaar decisions provide important principles for evaluating intrusive surveillance, while S and Marper offers a persuasive comparative model for analysing the retention of DNA and biometric information.

The Supreme Court's November 2025 decision on DNA testing further illustrates that biological investigations require a demonstrable connection to the matter under investigation rather than an unrestricted reliance on technological capability.

A legally sound governance framework must therefore address the entire lifecycle of biological information: collection, analysis, storage, access, secondary use, retention, deletion, oversight, and remedies.

The central principle is that biological information must be governed as sensitive information about human beings, not treated as an unrestricted resource merely because modern technology makes it possible to collect and analyse it.

The legitimacy of biological surveillance ultimately depends on whether its objectives can be achieved through lawful, necessary, proportionate, scientifically reliable, and accountable means.