1. Introduction

Biological Surveillance Governance Accountability refers to the legal and constitutional framework governing the collection, monitoring, analysis, storage, sharing, and use of biological information about individuals and populations, together with the mechanisms through which governments, healthcare institutions, research organisations, laboratories, and private companies are held accountable for their actions.

Biological surveillance may involve collecting or analysing:

• Genetic information: DNA profiles, genomic sequences, and inherited genetic characteristics.
• Biometric information: Fingerprints, facial characteristics, iris patterns, and other biological identifiers.
• Health information: Medical records, infectious disease status, diagnostic results, and physiological measurements.
• Reproductive information: Fertility records, pregnancy-related data, and reproductive health information.
• Population-level biological information: Disease prevalence, pathogen surveillance, wastewater monitoring, and epidemiological data.
• Predictive biological information: Risk assessments based on genetic predispositions, biomarkers, or combinations of biological and behavioural data.

Biological surveillance can serve legitimate purposes, including preventing epidemics, identifying missing persons, improving healthcare, investigating serious crimes, and monitoring public health threats. However, it can also create risks of discrimination, privacy violations, unauthorised profiling, excessive state power, and exclusion from employment, insurance, education, or public services.

The central legal question is therefore:

How can society permit necessary biological surveillance while ensuring that the institutions conducting it remain lawful, transparent, proportionate, scientifically reliable, and accountable?

In India, this question is particularly important because biological information may engage the constitutional right to privacy, dignity, equality, personal liberty, and protection against arbitrary state action.

The expression Biological Surveillance Governance Accountability is best understood as an interdisciplinary legal framework rather than the name of a single statute or an independently established legal doctrine.

2. Meaning and Scope of Biological Surveillance Governance

Biological surveillance governance consists of the laws, institutional procedures, technical safeguards, and oversight mechanisms that regulate the use of biological information.

It has five principal components.

2.1 Collection governance

Collection governance determines when, why, and under what authority biological information may be obtained.

For example, a public health authority might collect biological samples to investigate an infectious disease outbreak. A forensic laboratory might obtain a DNA sample in connection with a criminal investigation.

The legality of collection depends on factors such as:

1. The existence of a lawful basis or statutory authority.
2. The legitimacy of the purpose.
3. The necessity of collecting the information.
4. The proportionality of the intrusion.
5. Compliance with applicable consent and procedural requirements.
6. The availability of less intrusive alternatives.

A government agency should not collect genetic material from an entire population merely because a small, identifiable group is relevant to a legitimate investigation.

Likewise, consent to medical treatment should not automatically be treated as consent to unrelated genetic research, commercial exploitation, or law-enforcement disclosure.

2.2 Processing governance

Processing governance regulates what happens after biological information has been collected.

It includes:

• Laboratory analysis.
• Genetic sequencing.
• Automated biometric identification.
• AI-assisted medical or biological classification.
• Linking biological records with government databases.
• Sharing information with third parties.
• Generating predictions about health, identity, or future behaviour.

The legal significance of processing depends on both the information involved and the consequences of its use.

For example, processing anonymous population-level disease statistics may present different risks from matching an identifiable person's DNA against a criminal database.

However, information described as anonymous may remain identifiable if it can be linked with other datasets.

2.3 Storage and retention governance

Biological information can remain sensitive long after its original purpose has ended.

A DNA profile may identify a person and reveal familial relationships. A medical database may contain information that affects an individual's privacy throughout their lifetime.

Effective governance therefore requires rules concerning:

• Retention periods.
• Secure storage.
• Access restrictions.
• Deletion and destruction.
• Preservation for legitimate legal proceedings.
• Review of records retained after an investigation concludes.
• Management of information concerning children and vulnerable individuals.

The legal framework should distinguish between retaining a limited forensic identification profile and retaining a person's biological sample, complete genomic sequence, and associated medical information.

These are not necessarily equivalent intrusions.

2.4 Access and disclosure governance

Biological information may be shared between police, hospitals, laboratories, regulators, employers, research institutions, and private technology companies.

Each disclosure creates a potential risk of misuse.

Accountable governance requires institutions to establish:

• Who may access the information.
• The purposes for which access is permitted.
• Whether disclosure requires consent, a court order, or statutory authorisation.
• Whether recipients may transfer the information further.
• Whether access is logged and independently audited.
• Whether individuals can challenge unlawful disclosure.

2.5 Accountability governance

Accountability means that institutions must explain and justify their decisions and may face legal consequences when they violate applicable duties.

It includes judicial review, regulatory supervision, independent audits, legislative oversight, compensation where legally available, disciplinary proceedings, and criminal liability where the elements of an offence are established.

The fundamental principle is that biological surveillance must not become an area of government or corporate activity exempt from ordinary legal scrutiny.

3. Constitutional Foundations in India

The Indian constitutional framework provides several protections relevant to biological surveillance.

3.1 Article 21: Right to life, personal liberty, and privacy

Article 21 states that no person shall be deprived of life or personal liberty except according to procedure established by law.

The Supreme Court has interpreted Article 21 to protect privacy, dignity, and personal autonomy. Biological surveillance may interfere with these interests when it involves bodily intrusion, collection of genetic information, or continuous monitoring of an identifiable individual.

For example, compulsory DNA sampling may implicate bodily autonomy and informational privacy. A database that uses biological characteristics to predict a person's health or behaviour may also raise privacy concerns.

However, privacy is not absolute. A legally authorised and proportionate intrusion may be permissible when supported by a legitimate purpose and adequate safeguards.

3.2 Article 14: Equality and protection against arbitrariness

Article 14 guarantees equality before the law and equal protection of the laws.

Biological surveillance may violate equality principles when biological information is used to discriminate against particular individuals or groups.

Examples include:

• Excluding people from employment because of genetic predispositions.
• Treating communities as inherently dangerous based on biological or ancestry-related assumptions.
• Denying public benefits because of biometric authentication failures.
• Using unreliable biological predictions to justify unequal treatment.

A surveillance programme must have a rational and legally defensible basis. Where government action is arbitrary, discriminatory, or disproportionate, Article 14 may provide a ground for constitutional challenge.

3.3 Article 19: Fundamental freedoms

Article 19 protects specified freedoms, including speech, association, and movement, subject to the restrictions permitted by the Constitution.

Biological surveillance can indirectly burden these freedoms. For example, people may avoid attending public meetings or participating in lawful associations if they fear that biological identification systems will be used to monitor them.

Whether such surveillance violates Article 19 depends on the particular freedom affected, the legal basis of the interference, and the applicable constitutional tests.

3.4 Article 20(3): Protection against compelled self-incrimination

Article 20(3) protects an accused person against being compelled to be a witness against themselves.

This provision becomes relevant when investigators compel an accused person to provide biological material or undergo a scientific examination.

The constitutional question is not simply whether biological material is involved. It is whether the compelled procedure amounts to testimonial compulsion under the applicable legal principles.

The Supreme Court's decision in Selvi v. State of Karnataka is especially important in distinguishing compelled testimonial techniques from the collection of physical evidence.

3.5 Constitutional remedies

Where biological surveillance violates fundamental rights, affected individuals may seek constitutional remedies under Article 32 before the Supreme Court or Article 226 before a High Court, subject to the applicable requirements.

Possible remedies include:

• A declaration that an unlawful practice is unconstitutional.
• An order restraining unlawful collection or disclosure.
• Judicial review of the relevant governmental decision.
• Directions to comply with constitutional safeguards.
• Other appropriate relief depending on the circumstances.

The constitutional framework therefore makes surveillance governance a question of legality, not merely administrative convenience.

4. Major Case Laws on Biological Surveillance Governance and Accountability

The following judgments establish important principles concerning privacy, biometric identification, bodily autonomy, forensic evidence, and surveillance. Some directly concern biological or biometric information; others establish broader principles applicable to biological surveillance.

Case 1: Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)

Citation: (2017) 10 SCC 1
Court: Supreme Court of India
Date: 24 August 2017

Background

The case arose from constitutional challenges concerning privacy and the government's Aadhaar identification programme, which involved collecting demographic and biometric information.

An important preliminary question was whether the Constitution protects privacy as a fundamental right.

Judgment

A unanimous nine-judge bench recognised the fundamental right to privacy as an intrinsic part of the freedoms guaranteed under Part III of the Constitution, particularly Article 21.

The Court recognised that privacy encompasses several dimensions, including bodily privacy, informational privacy, personal autonomy, and dignity.

It also explained that privacy is not absolute and that state interference must satisfy constitutional requirements. Indian Kanoon

Relevance to biological surveillance

This judgment provides the principal constitutional foundation for challenging unlawful biological surveillance in India.

Suppose a government department proposes to collect genetic information from citizens without a clear statutory basis, defined purpose, or adequate safeguards.

The legality of such a programme could be challenged by applying the principles established in Puttaswamy.

The court would examine questions such as:

1. Is the surveillance authorised by valid law?
2. Does it pursue a legitimate state aim?
3. Is the interference necessary and proportionate?
4. Are adequate safeguards available against misuse?
5. Does the system protect individual autonomy and dignity?

Accountability principle

The state cannot justify an intrusion into biological privacy merely by claiming that collecting more information would be administratively useful.

Legal significance: Puttaswamy establishes the constitutional framework for evaluating the collection, processing, and use of sensitive biological information by the state.

Case 2: K.S. Puttaswamy v. Union of India (Aadhaar judgment, 2018)

Citation: (2019) 1 SCC 1
Court: Supreme Court of India
Judgment delivered: 26 September 2018

Background

The Court examined the constitutional validity of the Aadhaar framework, including the compulsory or conditional use of biometric identification in particular contexts.

The case involved questions about the collection, retention, sharing, and use of demographic and biometric information.

Judgment

The Court upheld the Aadhaar Act's core framework while invalidating or limiting certain provisions and uses. The majority examined the programme against the constitutional privacy framework established in the 2017 judgment.

The judgment addressed concerns including data protection, purpose limitation, unauthorised disclosure, surveillance risks, and exclusion caused by authentication failures. Justice D.Y. Chandrachud's dissent expressed broader concerns about privacy, informational self-determination, and the programme's constitutional validity. VoxJuris

Relevance to biological surveillance

Aadhaar provides an important example of the legal difference between collecting biometric information for a defined identification purpose and using it for broader surveillance.

For instance, a system initially designed to verify identity could raise additional concerns if authorities attempted to link it with medical, reproductive, genetic, or law-enforcement databases without appropriate legal authority.

The constitutional analysis would need to consider the purpose of the proposed linkage, its statutory basis, its necessity, and the safeguards against misuse.

Accountability principle

A biometric identification system must be evaluated not only by its technical efficiency but also by its legal design, safeguards, and effects on individual rights.

Legal significance: The Aadhaar judgment illustrates how courts assess the constitutional limits of large-scale biometric identification while considering the legitimate objectives of public administration.

Case 3: Selvi v. State of Karnataka (2010)

Citation: (2010) 7 SCC 263
Court: Supreme Court of India
Date: 5 May 2010

Background

The case concerned the involuntary administration of scientific investigative techniques, including narcoanalysis, polygraph examinations, and the Brain Electrical Activation Profile test.

The central questions concerned personal liberty, mental privacy, compelled testimony, and the constitutional protection against self-incrimination.

Judgment

The Supreme Court held that involuntary administration of the techniques at issue violated constitutional protections, including Article 20(3) and aspects of Article 21.

The judgment recognised the importance of mental privacy and personal autonomy and rejected the idea that investigative convenience automatically justifies compelled scientific examination.

Relevance to biological surveillance

Although the case did not establish a blanket prohibition on DNA testing or all forms of biological evidence collection, it is important when evaluating coercive surveillance involving a person's body or mind.

For example, investigators cannot assume that every scientific technique is constitutionally permissible merely because it may produce useful information.

Courts must distinguish between compelled testimonial techniques and the collection of physical evidence, applying the appropriate constitutional and statutory rules.

Accountability principle

Investigative authorities must respect constitutional boundaries even when scientific techniques may assist an investigation.

Legal significance: Selvi reinforces bodily autonomy, mental privacy, and constitutional limits on coercive scientific investigation.

Case 4: Kharak Singh v. State of Uttar Pradesh (1963)

Citation: AIR 1963 SC 1295; (1964) 1 SCR 332
Court: Supreme Court of India

Background

The case concerned police surveillance of a person suspected of criminal activity under police regulations.

The surveillance measures included forms of monitoring and intrusion into private life.

Judgment

The Supreme Court invalidated certain surveillance provisions, particularly those authorising unauthorised nighttime domiciliary visits.

The majority did not recognise a general fundamental right to privacy in the same comprehensive manner as the later Puttaswamy judgment. Justice Subba Rao's dissent, however, articulated a broader understanding of privacy and personal liberty.

The subsequent nine-judge decision in Puttaswamy authoritatively recognised privacy as a fundamental right.

Relevance to biological surveillance

The case illustrates the constitutional importance of limiting intrusive state surveillance.

If police authorities were to monitor a person's biological characteristics, continuously collect sensitive health data, or combine multiple databases to construct a detailed personal profile, the legality of those activities would require examination under modern privacy principles.

Accountability principle

Surveillance powers cannot be treated as unlimited simply because they are exercised by law-enforcement authorities.

Legal significance: Kharak Singh provides historical context for constitutional control of police surveillance, while Puttaswamy supplies the modern privacy framework.

Case 5: People's Union for Civil Liberties v. Union of India (1997)

Citation: (1997) 1 SCC 301
Court: Supreme Court of India

Background

The case concerned telephone interception and the threat that surveillance could infringe privacy and freedom of expression.

Although telephone interception is not biological surveillance, the case is relevant to the regulation of intrusive monitoring by public authorities.

Judgment

The Supreme Court recognised that telephone conversations implicate privacy and established procedural safeguards governing interception under the legal framework then applicable.

The judgment emphasised the need for controls over the exercise of surveillance powers.

Relevance to biological surveillance

The same governance problem arises when authorities collect or analyse sensitive biological information.

A surveillance power without adequate procedural controls can be abused, applied inconsistently, or expanded beyond its original purpose.

Safeguards should therefore address authorisation, documentation, access restrictions, review, and accountability.

Accountability principle

Intrusive surveillance requires meaningful legal and procedural controls rather than unchecked administrative discretion.

Legal significance: PUCL supports the broader proposition that surveillance powers must operate within a legally controlled framework.

Case 6: S. and Marper v. United Kingdom (2008)

Application Nos.: 30562/04 and 30566/04
Court: Grand Chamber, European Court of Human Rights
Date: 4 December 2008

Background

Two individuals challenged the retention of their fingerprints, cellular samples, and DNA profiles after criminal proceedings against them had ended.

One applicant had been acquitted, while proceedings against the other had been discontinued. Nevertheless, the authorities retained their biological information indefinitely under the applicable domestic framework.

Judgment

The European Court of Human Rights held that retaining the applicants' fingerprints, DNA profiles, and cellular samples interfered with their right to respect for private life under Article 8 of the European Convention on Human Rights.

The Court found that the blanket and indiscriminate retention of this information, without sufficient differentiation between convicted and unconvicted individuals, was disproportionate and violated Article 8. HUDOC

Relevance to biological surveillance

This is one of the most directly relevant international judgments on biological surveillance governance.

The Court recognised that biological samples can reveal extensive information about individuals, including health-related information and genetic relationships.

The case establishes several important principles:

1. Collection and retention are different legal questions. Lawful collection does not automatically justify indefinite retention.
2. Purpose limitation matters. Information collected for one investigation should not be retained indefinitely without adequate justification.
3. The presumption of innocence matters. Individuals who have not been convicted should not automatically be treated like convicted persons for data-retention purposes.
4. Proportionality matters. The public interest in crime prevention must be balanced against the individual's privacy interests.
5. Children require particular protection. Retaining biological information about minors can have significant long-term consequences.

Accountability principle

A biological surveillance system should establish clear retention periods, deletion procedures, and mechanisms through which individuals can challenge continued storage.

Legal significance: S. and Marper provides a strong comparative-law foundation for challenging indiscriminate or indefinite retention of biological information.

Although it is not binding precedent in India in the same manner as a Supreme Court of India judgment, its reasoning can be persuasive in comparative constitutional analysis. HUDOC

Case 7: District Registrar and Collector v. Canara Bank (2005)

Citation: (2005) 1 SCC 496
Court: Supreme Court of India

Background

The case concerned statutory powers to inspect private documents and records held by a bank.

The dispute raised questions about privacy, confidentiality, and the limits of governmental access to information.

Judgment

The Supreme Court examined the privacy interests associated with private documents and emphasised that statutory powers permitting access to private records must be interpreted consistently with constitutional protections.

Relevance to biological surveillance

Biological surveillance frequently depends on access to information held by third parties, such as hospitals, diagnostic laboratories, research institutions, and private genetic-testing companies.

For example, a government agency might seek access to an individual's genetic test results held by a private laboratory.

The mere fact that a third party possesses the information does not eliminate the individual's privacy interests.

The legal basis for access, the scope of the power, and the procedures governing disclosure must be examined.

Accountability principle

Governmental access to privately held information must be justified by lawful authority and appropriate safeguards.

Legal significance: The case supports the broader principle that private information does not become freely available to the state simply because it is held by an institution rather than by the individual.

Case 8: K.S. Puttaswamy v. Union of India — proportionality and informational privacy

The 2017 and 2018 Puttaswamy judgments should be read together, while recognising that they address different legal questions.

The 2017 judgment established privacy as a fundamental right. The 2018 Aadhaar judgment applied that constitutional framework to a large-scale biometric identification programme.

Justice Sanjay Kishan Kaul's opinion in the 2017 proceedings also discussed the dangers of surveillance and profiling, including the possibility that automated profiling could facilitate discrimination based on caste, religion, ethnicity, and other characteristics. Sci API

For biological surveillance, this raises an important issue: a system may create serious privacy risks even if no individual record is publicly disclosed.

For example, a database combining genetic information, health records, and location histories could potentially be used to infer sensitive characteristics about people.

An accountability framework must therefore assess not only individual disclosures but also the risks created by combining datasets, automated analysis, and secondary uses.

5. Principal Legal Doctrines Emerging from the Case Law

The preceding judgments support several doctrines that are central to biological surveillance governance.

5.1 Legality doctrine

A public authority must identify the legal authority under which it collects or processes biological information.

Administrative convenience, a general claim of public interest, or the availability of new technology does not automatically create a lawful surveillance power.

The principle is particularly important where surveillance involves compulsory biological sampling, genetic databases, or the sharing of identifiable biological information.

5.2 Legitimate-purpose doctrine

Biological surveillance must serve a legally permissible and sufficiently defined objective.

Examples may include:

• Investigating a serious offence.
• Identifying a missing person.
• Detecting or controlling an infectious disease.
• Verifying identity for an authorised purpose.
• Conducting ethically approved scientific research.

The legality of the purpose must be considered separately from the legality of the means used to achieve it.

A legitimate objective cannot, by itself, justify every form of surveillance.

5.3 Necessity and proportionality

The intrusion must be appropriately related to the objective being pursued.

A court assessing a surveillance measure may consider whether:

• The information collected is relevant to the stated purpose.
• A less intrusive method could achieve the same objective.
• The number of individuals monitored is justified.
• The duration of retention is reasonable.
• The information can be used for unrelated purposes.
• Adequate safeguards exist against abuse.

For example, collecting a targeted DNA sample in a properly authorised criminal investigation is legally different from collecting genetic material from every person living in a neighbourhood.

The legal analysis depends on the governing law and the circumstances of the particular case.

5.4 Purpose limitation

Information collected for one purpose should not automatically be available for every other purpose.

A hospital that collects biological samples for diagnosis does not thereby obtain unlimited authority to provide them to employers, insurers, police, or commercial researchers.

Any proposed secondary use must be assessed under the applicable legislation, consent arrangements, confidentiality obligations, and other relevant legal rules.

5.5 Data minimisation

Institutions should collect and retain only the information reasonably necessary for their lawful objectives.

For example, a system designed to verify identity should not automatically collect a person's complete genomic sequence if a less intrusive identifier is sufficient.

Data minimisation reduces the consequences of unauthorised access, data breaches, function expansion, and discriminatory profiling.

5.6 Independent oversight

Surveillance decisions should be subject to appropriate review, particularly where they involve intrusive or compulsory collection.

Depending on the legal context, oversight may involve courts, regulators, independent review bodies, ethics committees, legislative institutions, or internal compliance authorities.

Oversight must be meaningful: an institution should not be the sole judge of whether its own intrusive practices are lawful.

5.7 Effective remedy

Where biological surveillance violates legal rights, an affected person should have access to an appropriate mechanism for challenging the conduct.

Depending on the circumstances, remedies may include judicial review, an injunction, correction or deletion of information where legally justified, compensation, or disciplinary and criminal proceedings where applicable.

These principles collectively establish that surveillance governance requires both preventive safeguards and remedies after a violation.

6. Statutory Framework Governing Biological Surveillance in India

Biological surveillance is not governed by one comprehensive statute covering every form of biological information. Its legality depends on the type of information collected, the purpose of collection, the institution involved, and the applicable legislation.

6.1 Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act, 2023 establishes a framework for processing digital personal data.

Official text: India Code — Digital Personal Data Protection Act, 2023

The Act is relevant when biological information constitutes digital personal data and falls within its scope.

Its framework addresses matters including:

• Lawful processing of digital personal data.
• Obligations of data fiduciaries.
• Consent and specified legitimate uses.
• Security safeguards.
• Rights of individuals.
• Regulatory enforcement and penalties.

Important qualification: The Act does not simply prohibit all biological surveillance, nor does it categorically require consent for every instance of processing. Its requirements, exceptions, and commencement provisions must be considered in the particular case. India Code

Application to biological surveillance

Suppose a private company collects genetic information through a digital health platform and subsequently shares identifiable information with another organisation.

The relevant questions include:

1. Does the information constitute digital personal data under the Act?
2. Does the Act apply to the processing in question?
3. What lawful basis, notice, or consent requirements apply?
4. Are any statutory exceptions available?
5. Have applicable security and other compliance obligations been satisfied?
6. What remedies or enforcement mechanisms are available?

The Act should be read alongside constitutional privacy principles, medical confidentiality requirements, and any other applicable legislation.

6.2 Aadhaar Act, 2016

The Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 provides a statutory framework for Aadhaar identification and authentication.

It is particularly relevant to biometric surveillance governance because it regulates the use and protection of identity information within the Aadhaar system.

The 2018 Aadhaar judgment examined statutory safeguards, permitted uses, disclosure restrictions, and the constitutional implications of biometric identification. The majority upheld the core framework while limiting particular uses and provisions. National Digital Library of India

The principal governance concerns include:

• Preventing unauthorised disclosure of biometric information.
• Restricting authentication to legally permitted purposes.
• Protecting individuals against identity misuse.
• Ensuring that authentication failures do not produce unjustified exclusion.
• Providing appropriate accountability for unlawful handling of information.

Aadhaar should not be confused with a comprehensive genetic surveillance system. Its principal focus is identity and authentication, rather than general-purpose genomic analysis.

6.3 Information Technology Act, 2000

The Information Technology Act, 2000 has historically formed an important part of India's legal framework for electronic information and cybersecurity.

Section 43A and the Sensitive Personal Data or Information Rules, 2011 were particularly relevant to specified forms of sensitive personal information held by covered bodies corporate.

However, the interaction between the IT Act framework and the Digital Personal Data Protection Act must be examined in light of applicable commencement notifications, amendments, repeal provisions, and transitional arrangements.

It would therefore be incorrect to assume that every historical IT Act data-protection requirement necessarily continues to operate unchanged.

For biological surveillance, the broader issues include unauthorised access, disclosure, security failures, and misuse of electronically stored health or biological information.

6.4 Criminal procedure and forensic DNA evidence

Biological evidence may be collected during criminal investigations, but the authority to obtain a sample, the admissibility of the resulting evidence, and the permissible retention of the material are distinct questions.

The relevant framework may include:

• The Bharatiya Nagarik Suraksha Sanhita, 2023.
• The Bharatiya Sakshya Adhiniyam, 2023.
• Other applicable criminal and forensic laws.
• Constitutional safeguards under Articles 20 and 21.
• Judicial principles governing scientific evidence and bodily privacy.

The precise legal provisions depend on the procedure employed, the status of the individual, the nature of the investigation, and the date and circumstances of the proceedings.

A proposal for a nationwide DNA database should not be assumed to have statutory authority merely because DNA evidence can be used in criminal proceedings.

6.5 Medical confidentiality and research ethics

Biological surveillance may also involve hospitals, universities, laboratories, clinical trials, and biomedical research institutions.

Relevant obligations can arise from medical confidentiality, professional standards, research ethics, consent requirements, and applicable data-protection law.

For example, a research institution collecting biological samples for one study should assess whether later use in a different study is permitted under the original consent, applicable ethical approvals, and governing law.

Research ethics approval does not independently authorise conduct that would otherwise violate constitutional or statutory requirements.

7. Institutional Accountability in Biological Surveillance

An effective governance framework must identify who is responsible when biological information is collected, analysed, shared, or misused.

7.1 Government accountability

Government departments and law-enforcement authorities must act within their legal powers.

Their responsibilities include:

• Establishing the statutory basis for surveillance.
• Defining the purpose and scope of data collection.
• Maintaining records of authorisations.
• Restricting access to authorised personnel.
• Reviewing continued retention.
• Preventing unlawful secondary uses.
• Cooperating with judicial and regulatory scrutiny.

Where state action violates fundamental rights, constitutional remedies may be available.

7.2 Laboratory accountability

Forensic and diagnostic laboratories must ensure that biological information is handled reliably and securely.

Depending on the applicable law and professional standards, responsibilities may include:

• Maintaining sample integrity.
• Recording the chain of custody.
• Preventing sample substitution or contamination.
• Documenting analytical methods.
• Restricting access to results.
• Reporting material limitations in scientific testing.
• Maintaining appropriate audit records.

A laboratory's accountability is not limited to protecting confidentiality. It may also extend to the reliability of the scientific process and the accuracy of conclusions communicated to decision-makers.

7.3 Corporate accountability

Private companies may collect biological information through genetic-testing services, digital health platforms, wearable devices, or biotechnology research.

Potential legal risks include unauthorised disclosure, misleading consent practices, excessive retention, inadequate security, and discriminatory use.

Corporate responsibility requires clear allocation of duties between the organisation collecting information, its service providers, and any recipients of the information.

Where an applicable law imposes specific obligations, an organisation cannot avoid them merely by outsourcing data processing.

7.4 Judicial accountability

Courts provide an essential mechanism for reviewing coercive surveillance, protecting constitutional rights, and resolving disputes about biological evidence.

Judicial scrutiny may address:

• Whether a sample was lawfully obtained.
• Whether compulsory testing was justified.
• Whether the evidence is scientifically reliable.
• Whether retention remains lawful.
• Whether disclosure violates privacy.
• Whether a surveillance programme is disproportionate.
• Whether an affected person is entitled to a remedy.

The judicial role is particularly important when the person affected has limited practical ability to discover how their biological information has been used.

7.5 Regulatory accountability

Regulators and oversight institutions may investigate violations within their respective statutory jurisdictions.

Depending on the activity, the relevant institution may be a data-protection authority, healthcare regulator, research ethics body, forensic oversight authority, or another competent institution.

A sound governance model requires clear jurisdictional boundaries and effective coordination. Otherwise, organisations may exploit uncertainty about which institution is responsible for investigating misconduct.

8. AI, Predictive Analytics, and Biological Surveillance

The development of artificial intelligence creates new challenges for biological surveillance governance.

AI systems can analyse large volumes of genetic, medical, biometric, and physiological information to identify patterns or generate predictions.

These predictions may concern disease risk, identity, reproductive health, or other characteristics.

8.1 Predictive profiling

Consider a system that uses genetic and medical information to predict whether a person is likely to develop a particular disease.

Such a system may have a legitimate clinical purpose when used appropriately by qualified professionals.

However, problems arise if the prediction is used for unrelated decisions, such as denying employment or treating a person as inherently risky without sufficient scientific or legal justification.

A prediction is not the same as a confirmed diagnosis, and a statistical association does not establish that a particular individual will experience a particular outcome.

8.2 Algorithmic discrimination

Biological surveillance can reproduce or amplify discrimination when datasets are incomplete, models are poorly validated, or outputs are interpreted without adequate context.

For example, a genetic risk model trained on an unrepresentative population may perform less accurately for people from other populations.

If its outputs influence access to medical care, employment, or public benefits, unequal error rates may produce serious consequences.

Governance measures should include appropriate validation, evaluation of disparate impacts, documentation, and human review where warranted.

8.3 Explainability and transparency

When an automated system makes or materially influences a consequential decision, accountability may require sufficient information to explain the decision and challenge errors.

The exact legal entitlement to an explanation depends on the applicable law and context. Nevertheless, institutions should not treat an algorithm's output as conclusive merely because the system is technically complex.

8.4 Human responsibility

The use of AI does not automatically transfer legal responsibility from an institution to the software.

The responsible organisation must identify who approves the system, who interprets its results, who can override erroneous outputs, and who investigates adverse outcomes.

Core principle: Automated biological surveillance must remain subject to human responsibility, scientific scrutiny, and applicable legal controls.

9. Practical Examples of Biological Surveillance Accountability

The following examples illustrate how the preceding legal principles might apply.

These examples are analytical illustrations rather than statements that every listed activity is automatically unlawful.

The legal outcome depends on the specific facts, statutory authority, safeguards, and applicable judicial precedents.

10. Major Challenges in Biological Surveillance Governance

10.1 Technological expansion

Information collected for a limited purpose may later become useful for unrelated applications.

A database initially created for disease prevention might eventually be proposed for law enforcement or commercial research.

Governance must therefore address not only the original purpose but also subsequent changes in technology and institutional use.

10.2 Unclear retention periods

Indefinite retention creates the risk that biological information will remain available long after the original justification has disappeared.

The reasoning in S. and Marper demonstrates why blanket retention requires careful scrutiny.

10.3 Inadequate consent

Consent may be difficult to evaluate when individuals do not understand the implications of genetic testing or when refusing to participate means losing access to an essential service.

Consent is important, but it is not the only possible legal basis for processing, and it does not cure every other legal defect.

10.4 Re-identification

Removing names from biological datasets does not necessarily guarantee anonymity.

Genetic information can reveal relationships between individuals and may become identifiable when combined with other information.

Accordingly, governance should assess the actual risk of re-identification rather than relying exclusively on labels such as anonymous or de-identified.

10.5 Scientific uncertainty

Biological information may be probabilistic, incomplete, or open to competing interpretations.

A legal decision based on an uncertain biological prediction should account for the reliability of the method and the consequences of error.

10.6 Weak oversight

Oversight becomes ineffective if institutions can authorise their own surveillance, determine whether it was lawful, and control access to the evidence of misconduct without meaningful external scrutiny.

Independent review, auditable records, and accessible remedies are essential to addressing this problem.

11. A Proposed Framework for Biological Surveillance Governance Accountability

A comprehensive accountability framework should incorporate the following safeguards.

Step 1: Establish a clear legal basis

Every surveillance programme should identify the applicable law, the institution responsible, the information involved, and the permitted purposes.

Step 2: Conduct a necessity and proportionality assessment

Before collecting biological information, the responsible institution should evaluate the importance of the objective, the intrusiveness of the proposed method, and the availability of less intrusive alternatives.

Step 3: Minimise collection

The institution should avoid collecting additional biological information merely because the technology makes it possible.

Step 4: Establish retention and deletion rules

Retention periods should reflect the lawful purpose, applicable legislation, evidentiary requirements, and the rights of affected individuals.

Step 5: Implement technical security

Appropriate safeguards may include encryption, access controls, authentication, separation of datasets, secure backups, and monitoring for unauthorised access.

Step 6: Maintain auditable records

Institutions should record significant access, disclosure, retention, and processing decisions to the extent required by applicable law and sound governance practice.

Step 7: Establish independent oversight

Intrusive surveillance should be subject to suitable external review, particularly where compulsory collection or large-scale monitoring is involved.

Step 8: Provide meaningful remedies

Individuals should have access to appropriate procedures for raising complaints, correcting errors, challenging unlawful decisions, and seeking relief.

Step 9: Review automated systems

AI-assisted surveillance should undergo appropriate validation, bias assessment, security review, and monitoring for changes in performance.

Step 10: Publish accountability information

Where legally permissible, institutions should disclose information about the purposes, scope, safeguards, and oversight of their surveillance programmes.

Transparency can improve public trust without requiring the disclosure of sensitive operational details or confidential personal information.

12. Critical Analysis

The central tension in biological surveillance law lies between collective welfare and individual autonomy.

On one side, biological surveillance can provide substantial public benefits. Genetic identification can assist criminal investigations, disease surveillance can help detect outbreaks, and biometric verification can support certain public services.

On the other side, biological information can be unusually revealing, difficult to replace, and capable of affecting individuals and their relatives. Once genetic information has been disclosed, the resulting loss of privacy may be impossible to reverse completely.

Three broader conclusions follow.

First, biological surveillance requires purpose-specific justification. A legitimate reason to collect information for one purpose does not automatically justify every later use.

Second, accountability must cover the entire information lifecycle. The legality of initial collection does not settle questions concerning retention, analysis, disclosure, or deletion.

Third, scientific capability does not determine legal authority. The fact that an institution can predict, identify, or classify a person using biological data does not establish that it is legally entitled to do so.

These conclusions are consistent with the constitutional privacy framework established in Puttaswamy and the retention safeguards emphasised by the European Court of Human Rights in S. and Marper.

A further challenge is institutional fragmentation. A single biological dataset may pass through healthcare providers, private laboratories, cloud-service providers, public agencies, and research organisations. Each institution may be subject to different legal obligations.

Effective governance must therefore clarify responsibility at each stage and prevent gaps in accountability from arising when information moves between organisations.

13. Conclusion

Biological Surveillance Governance Accountability is the framework through which the collection, analysis, retention, and use of biological information are subjected to legal limits and institutional responsibility.

In India, the most important constitutional foundation is Justice K.S. Puttaswamy (Retd.) v. Union of India (2017), which recognised privacy as a fundamental right and established the constitutional framework for evaluating intrusions into privacy.

The 2018 Aadhaar judgment demonstrates how those principles apply to biometric identification. Selvi v. State of Karnataka establishes important limits on coercive scientific investigation, while S. and Marper v. United Kingdom provides persuasive comparative authority on the disproportionate retention of DNA information and fingerprints.

Together, these authorities support a governance model based on legality, legitimate purpose, necessity, proportionality, data minimisation, appropriate retention, independent oversight, and effective remedies.

Nevertheless, biological surveillance accountability is not a single, universally codified doctrine. Its precise requirements depend on the applicable constitutional provisions, statutes, regulations, scientific context, and judicial precedents.

The ultimate objective is to ensure that biological surveillance serves legitimate public purposes without turning sensitive information about the human body into an instrument of arbitrary power, discrimination, or uncontrolled monitoring.

Important cases for examination and research

1. Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1.
2. K.S. Puttaswamy v. Union of India, (2019) 1 SCC 1 — Aadhaar judgment.
3. Selvi v. State of Karnataka, (2010) 7 SCC 263.
4. Kharak Singh v. State of Uttar Pradesh, AIR 1963 SC 1295.
5. People's Union for Civil Liberties v. Union of India, (1997) 1 SCC 301.
6. District Registrar and Collector v. Canara Bank, (2005) 1 SCC 496.
7. S. and Marper v. United Kingdom, Applications Nos. 30562/04 and 30566/04, European Court of Human Rights, 4 December 2008.

Research note: For a legal dissertation or court submission, verify the full judgments, applicable statutory provisions, subsequent judicial developments, and the commencement status of relevant legislation before relying on any proposition as current law.