1. Introduction

Data colonialism through genomics refers to the extraction, control, commercialisation, and use of genetic information from individuals or communities—particularly Indigenous peoples and historically marginalised populations—by governments, universities, pharmaceutical companies, biotechnology corporations, or foreign research institutions without adequate consent, meaningful community participation, fair benefit-sharing, or respect for cultural and collective rights.

The concept extends traditional colonialism into the digital and biotechnological age. Instead of extracting land, minerals, or biological resources alone, institutions may collect DNA samples, sequence genomes, construct population databases, develop patents or commercial products, and retain control over the resulting data.

The Australian Government's 2022 report, Indigenous Health Genomics – The Legal, Ethical and Social Issues, specifically identifies ownership, data sovereignty, discrimination, and governance as major legal and ethical concerns in Indigenous genomic research.

Health Department Australia+1

Central legal question

Can researchers or corporations lawfully collect and use genetic material while disregarding the rights of the people and communities from whom that material originates?

The answer depends on the applicable law, the consent obtained, the purpose of collection, restrictions on secondary use, data protection obligations, intellectual-property rights, and any applicable Indigenous or community governance requirements.

Importantly, data colonialism is a critical legal and policy concept, not a standalone cause of action recognised uniformly across jurisdictions. A claimant generally needs to establish a violation of an existing legal right or statutory duty.

2. Meaning and principal characteristics

Kanaph Therapeutics — IPOX

1. Extractive genomic collection

DNA samples, family histories, clinical records, and population-level genetic information are collected from communities, sometimes without adequately explaining the full range of intended research uses.

MedTech AI Academy | Best Medical Coding Training in Pudukkottai

2. Concentration of data control

Researchers or corporations retain the databases, sequencing results, analytical tools, and decisions about future use, while the source communities have limited access or decision-making authority.

Ascend Laboratories | South Africa | Premium Corporate Pharmaceutical Website

3. Unequal commercial benefits

Genomic data may support diagnostic tests, medicines, patents, or commercial databases without proportionate financial or non-financial benefits reaching participating communities.

Improving Arctic Food Security Through DNA Science and Respectful Collaboration with Indigenous Peoples | Arctic Focus

4. Cultural and collective harm

Genetic findings may conflict with community origin narratives, reveal sensitive relationships, reinforce stereotypes, or be used to classify entire populations without their meaningful participation.

These characteristics may overlap, but not every international genomic collaboration is colonial or unlawful. Research can be mutually beneficial when consent, governance, scientific integrity, and equitable benefit-sharing are respected.

3. Legal foundations

A. Human dignity, autonomy, and informed consent

Informed consent requires more than obtaining a signature on a form. Participants should receive understandable information about the research purpose, foreseeable risks, storage, sharing, commercial use, and relevant future research.

A central issue is whether consent for one study authorises substantially different subsequent studies. Broad consent may be legally permissible in some circumstances, but its validity depends on applicable law, the scope of the original consent, ethics requirements, and the safeguards governing subsequent use.

Where community interests are implicated, individual consent and collective consultation may both be important. Neither automatically substitutes for the other.

B. Privacy and protection of genetic data

Genomic information can reveal health risks, ancestry, familial relationships, and information about biological relatives. Removing names does not necessarily make a genomic dataset anonymous, because genetic information may sometimes be linked with other datasets to identify individuals.

Relevant legal protections may include:

Limits on collection and secondary use.

Requirements for a lawful basis for processing sensitive personal information.

Security and confidentiality duties.

Restrictions on overseas transfers or disclosures.

Rights to access, correction, deletion, or withdrawal, where provided by law.

Remedies for misuse, discrimination, or unauthorised disclosure.

C. Collective and Indigenous data sovereignty

Indigenous data sovereignty concerns the right of Indigenous peoples to govern the collection, interpretation, access, storage, sharing, and application of data about their communities.

This can require governance arrangements that recognise community protocols, collective interests, cultural restrictions, and participation in decisions about research priorities and the publication of findings.

However, Indigenous data sovereignty is not an identical, universally enforceable property right in every country. Its legal effect depends on treaties, domestic legislation, recognised Indigenous rights, research agreements, and applicable customary or institutional frameworks.

D. Intellectual property and commercialisation

Genomic research can produce patentable inventions, diagnostic methods, or other commercial assets. The fact that an invention is derived from biological research does not automatically mean that the original donor owns the resulting patent or is entitled to royalties.

Conversely, a research institution's intellectual-property rights do not automatically excuse violations of consent, privacy, contract, or access-and-benefit-sharing obligations.

The key distinction is between ownership or control of a physical sample, rights over personal data, and rights over a later invention. These are legally distinct questions.

4. Leading case laws

The following cases illustrate the principal legal disputes involving genomic extraction, informed consent, commercialisation, and community interests. Some are directly concerned with genomic research; others establish related principles that may apply to data-colonialism disputes.

Case 1. Havasupai Tribe v. Arizona Board of Regents (2008)

Arizona Court of Appeals · 220 Ariz. 214, 204 P.3d 1063 (2008), procedural decision

Facts: Members of the Havasupai Tribe supplied blood samples for research associated with diabetes. The Tribe subsequently objected to the use of samples in other research, including studies concerning schizophrenia, population migration, and inbreeding. It alleged that the secondary uses violated consent expectations, privacy, and cultural interests.

Legal issue: What legal remedies are available when biological samples are used for research beyond the purposes participants understood or authorised?

Outcome: The reported 2008 appellate decision addressed procedural requirements for claims against a public institution, including the sufficiency and timing of notices of claim. The broader dispute was settled in 2010, when the university's governing body agreed to pay US$700,000 to 41 tribal members and return remaining samples, alongside other commitments. The settlement was not a judicial finding that all allegations had been proved.

Justia Law+2

Legal significance:

Research consent must be examined in light of the purposes communicated to participants.

Secondary use of samples can create ethical and legal disputes even where the initial collection was connected to legitimate medical research.

Genetic research may cause collective cultural harm in addition to individual privacy or autonomy harms.

Settlements can provide remedies without creating binding judicial precedent on the underlying issues.

Connection to data colonialism: This is one of the clearest examples of how a community can lose practical control over its genetic material after collection. It also illustrates why individual consent, community engagement, and enforceable restrictions on future use matter.

Case 2. Moore v. Regents of the University of California (1990)

Supreme Court of California · 51 Cal. 3d 120, 793 P.2d 479 (1990)

Facts: John Moore's cells were used in research that led to the development of a potentially valuable cell line. He alleged that his physician had failed to disclose relevant research and financial interests.

Legal issue: Does a patient retain a proprietary interest sufficient to sue for conversion when removed tissue is used for profitable research without the patient's knowledge?

Judgment: The court rejected Moore's conversion claim based on ownership of the removed cells, but allowed claims based on lack of informed consent and breach of fiduciary duty to proceed against the physician on the pleaded facts.

Justia Law+1

Legal principles:

A physician must disclose material personal interests that may affect professional judgment.

Consent to medical treatment does not necessarily resolve whether the patient was adequately informed about associated research interests.

The absence of a recognised property right in removed tissue does not eliminate every possible remedy for misconduct.

Connection to data colonialism: The case exposes the gap between commercial control over research outputs and the rights of the person whose biological material made the research possible.

However, Moore does not establish a general right to royalties from every discovery involving a person's tissue. Nor does it resolve the distinct question of collective rights over Indigenous genomic data.

Case 3. Greenberg v. Miami Children's Hospital Research Institute (2003)

264 F. Supp. 2d 1064 (S.D. Fla. 2003)

Facts: Parents of children affected by Canavan disease and supporting organisations contributed biological materials, information, and research assistance to advance research into the disease. Researchers subsequently developed and patented the relevant genetic discovery and diagnostic tests.

Legal issue: Could contributors obtain property-based or other legal remedies because their contributions supported research that was later commercialised?

Outcome: The court rejected the principal claims seeking to impose ownership-like control over the research results, including the asserted conversion claim. The decision distinguished contributing to scientific research from acquiring proprietary rights in its resulting discoveries.

PubMed

Legal significance:

Scientific contributions do not automatically confer ownership of resulting intellectual property.

The existence and scope of enforceable agreements are important.

Contractual promises, representations, and the circumstances of contributions may matter independently of patent ownership.

Connection to data colonialism: A community may help create valuable scientific knowledge but lack enforceable rights to control or share in the resulting commercial benefits. Clear agreements on access, attribution, governance, and benefit-sharing can reduce this imbalance.

Case 4. Association for Molecular Pathology v. Myriad Genetics, Inc. (2013)

569 U.S. 576 (2013) · United States Supreme Court

Facts: Myriad Genetics obtained patents relating to the BRCA1 and BRCA2 genes, which are associated with increased risks of breast and ovarian cancer.

Legal issue: Are naturally occurring human DNA sequences patent-eligible merely because researchers have isolated them?

Judgment: The Court held that naturally occurring DNA segments are not patent-eligible simply because they have been isolated. Complementary DNA (cDNA), by contrast, may be patent-eligible because it is not naturally occurring, subject to the applicable requirements of patent law.

Justia U.S. Supreme Court Center+1

Legal principles:

Discovering a naturally occurring gene does not, by itself, create a patentable invention.

Laboratory-created materials may be treated differently from naturally occurring biological material.

Patent eligibility is separate from questions of informed consent, privacy, and benefit-sharing.

Connection to data colonialism: The judgment limits one route through which naturally occurring genetic material can be placed under exclusive patent control. However, it does not establish Indigenous ownership of genomic data or guarantee community participation in commercial benefits.

Case 5. S and Marper v. United Kingdom (2008)

European Court of Human Rights, Grand Chamber · Applications Nos. 30562/04 and 30566/04

Facts: The United Kingdom retained fingerprints, cellular samples, and DNA profiles from individuals who had been arrested but not convicted.

Legal issue: Was the blanket and indefinite retention of that material compatible with the right to respect for private life under Article 8 of the European Convention on Human Rights?

Judgment: The Grand Chamber found a violation of Article 8, emphasising the sensitive character of genetic information and the disproportionate nature of the retention arrangements at issue.

Connection to data colonialism: Although this was not an Indigenous research case, it establishes an important principle: legitimate initial collection does not automatically justify unlimited retention or use of genetic information. Privacy safeguards must also address what happens after collection.

The decision is particularly relevant when genomic databases are retained indefinitely, shared with third parties, or repurposed beyond their original justification.

5. International legal framework

A. United Nations Declaration on the Rights of Indigenous Peoples (UNDRIP)

UNDRIP provides an important normative framework for Indigenous participation in decisions affecting their communities, cultural heritage, traditional knowledge, and resources.

Relevant provisions include:

Article 3: Indigenous peoples' right to self-determination.

Article 11: Rights concerning cultural traditions and customs, including redress mechanisms for certain cultural, intellectual, religious, and spiritual property taken without free, prior, and informed consent.

Article 19: States should consult and cooperate in good faith to obtain free, prior, and informed consent before adopting legislative or administrative measures that may affect Indigenous peoples.

Article 31: Rights concerning the maintenance, control, protection, and development of cultural heritage, traditional knowledge, and cultural expressions, including associated intellectual property.

These provisions support arguments for Indigenous participation in genomic governance. However, UNDRIP is a declaration rather than a universally binding treaty, and its domestic enforceability varies by jurisdiction.

B. Nagoya Protocol on Access and Benefit-Sharing

The Nagoya Protocol supplements the Convention on Biological Diversity. It establishes a framework for access to covered genetic resources and fair sharing of benefits arising from their utilisation.

Article 6 addresses prior informed consent and, where applicable under domestic law, approval and involvement of Indigenous and local communities. Article 7 addresses associated traditional knowledge, while Article 12 calls for consideration of community protocols, customary laws, and procedures.

Convention on Biological Diversity+2

Critical limitation: Human genetic resources are excluded from the Nagoya Protocol's scope under the established interpretation of the Convention on Biological Diversity framework. It should therefore not be presented as a general treaty requiring benefit-sharing for every human DNA sample or genomic dataset. Its relevance may instead arise where a project involves covered non-human genetic resources or associated traditional knowledge.

C. Human rights and genetic privacy

The European Court of Human Rights decision in S. and Marper v. United Kingdom establishes that the retention of DNA samples and profiles can interfere with private life and must be justified under Article 8 of the European Convention on Human Rights.

This supports the broader principle that genetic information deserves strong safeguards against excessive retention and unjustified use.

HUDOC+1

6. Indian legal position

India is particularly important to this subject because genomic research may involve large and diverse populations, public-health databases, private diagnostic laboratories, biotechnology companies, and international research collaborations.

A. Constitutional protection of privacy

In Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1, the Supreme Court recognised privacy as a fundamental right under Article 21 and the broader scheme of Part III of the Constitution.

Genomic data can implicate informational privacy, bodily autonomy, dignity, and family privacy. State collection or use of such data must therefore be assessed against applicable constitutional requirements, including legality, legitimate purpose, and proportionality.

The decision is a constitutional foundation for challenging disproportionate state surveillance or unjustified collection of sensitive personal information. It does not, by itself, establish collective ownership of a community's genetic data.

B. Digital Personal Data Protection Act, 2023

India's Digital Personal Data Protection Act, 2023 provides a statutory framework for processing digital personal data. Its application to genomic information depends on whether the information falls within the Act's definition of digital personal data and on the applicable provisions and exemptions.

India Code+1

Relevant considerations include:

Lawful processing and the applicable consent or other permitted basis.

Notice and transparency requirements.

Security safeguards and breach-related duties.

Rights available to individuals under the Act.

The legal treatment of research-related processing and applicable exemptions.

Cross-border transfers and any applicable restrictions.

Commencement matters: The Act and Digital Personal Data Protection Rules, 2025 have a phased commencement framework. As of 4 November 2026, individual provisions must be checked against the relevant commencement notifications before determining which statutory duties are operative for a particular processing activity.

MeitY+1

The Act primarily addresses personal data and individual rights. It should not automatically be interpreted as creating collective Indigenous ownership or a general community veto over every genomic research project.

C. Biological Diversity Act, 2002

India's Biological Diversity Act regulates access to biological resources and associated traditional knowledge within its statutory scope, including applicable access, approval, and benefit-sharing requirements.

Its application must be assessed according to the nature of the resource, the persons involved, the research or commercial activity, and the relevant statutory provisions.

Important distinction: The Act is not a general human-genome ownership statute. A claim concerning human DNA cannot automatically be treated as an access-and-benefit-sharing claim under the Act merely because the research is conducted in India.

D. Research ethics and biomedical governance

Indian biomedical and health research may also be governed by applicable research-ethics requirements, institutional ethics committee procedures, consent standards, clinical research rules, contractual restrictions, and other sector-specific legislation.

For a genomic project, the precise framework depends on whether it involves clinical treatment, human-participant research, stored biospecimens, commercial genetic testing, a population database, or cross-border data sharing.

7. Legal remedies for genomic data colonialism

The appropriate remedy depends on the conduct and the applicable jurisdiction.

These are potential routes rather than automatic entitlements. For example, a community's moral objection to research does not necessarily establish a property claim, and a privacy violation does not automatically entitle every participant to commercial royalties.

8. Proposed governance framework

A legally robust response should address both individual rights and collective governance.

1. Purpose-specific and comprehensible consent

Clearly explain research aims, secondary uses, storage duration, data sharing, commercialisation, foreseeable group harms, and withdrawal limitations.

2. Community-led governance

Where appropriate, establish community advisory bodies, recognised Indigenous representatives, research approval procedures, and ongoing consultation.

3. Equitable benefit-sharing

Specify financial or non-financial benefits, including local health infrastructure, diagnostic access, training, research capacity, attribution, and agreed commercial participation.

4. Data security and controlled access

Apply access controls, encryption, audit logs, data minimisation, retention limits, and appropriate independent review. Data clean rooms and controlled-access repositories can reduce disclosure risk, although they do not replace consent or governance.

5. Enforceable accountability

Use contracts, research protocols, independent oversight, complaint mechanisms, dispute resolution, and clearly defined remedies for unauthorised secondary use.

9. Critical legal analysis

The principal difficulty is that existing legal systems frequently regulate different parts of the genomic lifecycle separately.

A participant may have privacy rights but no ownership rights in a commercial invention. A researcher may hold patent rights but remain bound by a consent agreement. A community may have legitimate cultural concerns but lack a directly enforceable collective claim under domestic law.

Three tensions are particularly important:

First, individual versus collective rights. A person may consent to research even where a finding could affect their wider community. Conversely, a community representative's approval does not necessarily replace each participant's required consent.

Second, scientific openness versus control. Open scientific data can accelerate medical discoveries, but unrestricted release of identifiable or sensitive genomic information may expose participants and relatives to privacy, discrimination, or cultural harms.

Third, innovation versus distributive justice. Commercial rewards can support investment in new treatments. However, a system that permits institutions to capture all commercial value while excluding contributing communities from decisions and benefits can reinforce structural inequalities.

The strongest governance model does not assume that all research should be prohibited or that every genomic contribution creates ownership. Instead, it distinguishes legitimate scientific use from extraction involving inadequate consent, unfair terms, discriminatory outcomes, or disregard for applicable community rights.

10. Conclusion

Data colonialism through genomics law concerns the unequal distribution of control, risk, and benefit in the collection and use of human genetic information. The Havasupai dispute demonstrates the importance of consent boundaries and cultural harm; Moore and Greenberg illustrate the limits of ownership-based claims over biological contributions; Myriad Genetics defines important boundaries of gene patent eligibility; and S. and Marper establishes the privacy significance of retaining genetic information.

Together, these authorities support a more accountable approach to genomic research. Nevertheless, they do not establish one universal legal right of communities to own, control, or receive royalties from all genomic data. The outcome of any particular dispute depends on the governing law, evidence, consent terms, applicable privacy protections, and any enforceable community rights.

For an Indian genomic research project, the starting point should be the Constitution, applicable data-protection provisions and commencement notifications, relevant biomedical research requirements, any applicable biological-resource rules, and the contracts or protocols governing the research.

This is a general legal research overview, not a jurisdiction-specific legal opinion.