1. Introduction

State Control Over National Genetic ID Databases refers to the legal authority of a government to collect, store, process, regulate, access, share and delete the genetic identification records of individuals through a centralised or interconnected national database.

A national genetic identification database generally contains DNA profiles obtained from biological samples such as:

Blood samples.

Saliva and buccal swabs.

Hair roots and other biological material.

Tissue samples.

Forensic biological evidence collected from crime scenes.

Governments may establish genetic databases for criminal investigations, identification of missing persons, disaster victim identification, prevention of identity fraud and national security.

However, genetic information is fundamentally different from ordinary identification information. A DNA profile can potentially reveal biological relationships, familial connections and sensitive information about an individual's biological characteristics.

Consequently, the government must balance two competing interests:

State interests: Crime prevention, national security, forensic identification and effective law enforcement.

Individual rights: Privacy, bodily integrity, informational self-determination, equality, dignity and protection against arbitrary surveillance.

The central legal question is:

How far can the State exercise control over national genetic databases without violating constitutional rights and individual genetic privacy?

This question is particularly important in India, where constitutional privacy protections must be considered alongside the proposed statutory framework for DNA profiling.

2. Meaning and Scope of State Control

State control over a genetic database involves several interconnected governmental powers.

A. Collection of genetic information

The government may authorise designated police officers, forensic laboratories or other legally recognised authorities to collect DNA samples.

However, collection must have a lawful basis. It should not become an unrestricted power to obtain biological samples from every citizen.

Important considerations include:

Whether the person is a convicted offender, accused person, missing person or unidentified deceased individual.

Whether collection is supported by statutory authority.

Whether judicial authorisation is required.

Whether consent is necessary.

Whether the collection is proportionate to the investigative purpose.

B. Centralised storage and administration

A national database allows authorised institutions to compare DNA profiles across different geographical jurisdictions.

State control may include:

Establishing a national DNA data bank.

Appointing database administrators.

Authorising forensic laboratories.

Maintaining regional databases.

Establishing access-control mechanisms.

Regulating inter-agency information exchange.

Centralisation can improve forensic coordination, but it also increases the consequences of unauthorised access, misuse and data breaches.

C. Access and disclosure

The government must establish which authorities can access genetic information.

For example:

Police investigating serious offences.

Courts examining forensic evidence.

Accredited forensic laboratories.

Missing-person identification authorities.

Designated national security agencies, where specifically authorised by law.

Access should be purpose-specific, documented and subject to independent oversight.

D. Retention and deletion

A fundamental aspect of State control concerns how long genetic information can remain in government databases.

A legally sound framework should distinguish between:

Convicted persons.

Persons acquitted by courts.

Persons whose investigations have been closed.

Missing persons who have been identified.

Unidentified deceased individuals.

Biological samples retained for evidentiary purposes.

Indefinite retention without individual assessment can create serious constitutional concerns.

E. State supervision and accountability

The government must ensure that genetic databases are not controlled exclusively by the police or intelligence agencies without accountability.

A proper regulatory framework should provide:

Independent monitoring.

Periodic security audits.

Judicial supervision where appropriate.

Penalties for unauthorised disclosure.

Complaint and grievance mechanisms.

Remedies for unlawful collection and retention.

3. Constitutional Framework in India

Several constitutional provisions are relevant to government control over genetic identification systems.

Article 21: Right to privacy

Article 21 is particularly important because genetic information is closely connected with personal identity and bodily autonomy.

A government database that stores DNA profiles without adequate legal safeguards may interfere with informational privacy.

The State must therefore demonstrate:

Legal authority for collecting genetic information.

A legitimate governmental objective.

Necessity of the collection and retention.

Proportionality between the objective and the intrusion.

Adequate safeguards against misuse.

Article 20(3): Protection against self-incrimination

Compulsory DNA collection raises questions concerning the constitutional privilege against self-incrimination.

The distinction between physical evidence and compelled testimonial communication is important.

DNA sampling is generally treated differently from compelling an accused person to communicate personal knowledge or provide an incriminating statement. Nevertheless, the manner of obtaining a sample must comply with applicable law and constitutional safeguards.

Article 14: Equality and non-arbitrariness

The government cannot exercise genetic database powers arbitrarily.

For example, discriminatory collection based on caste, ethnicity, religion, social background or political affiliation would raise serious constitutional concerns.

A lawful database must apply objective criteria and must not become an instrument of discriminatory profiling.

4. Indian Legislative Framework

Important Indian legal position

India's regulatory framework requires particular attention because the proposed DNA-specific legislation was withdrawn.

A. DNA Technology (Use and Application) Regulation Bill, 2019

The Bill proposed a statutory framework for DNA profiling and national genetic databases.

Its major features included:

Establishment of a DNA Regulatory Board.

Accreditation and regulation of DNA laboratories.

Creation of National and Regional DNA Data Banks.

Collection and processing of DNA profiles for specified purposes.

Regulation of access to genetic information.

Confidentiality requirements.

Penalties for unauthorised disclosure and misuse.

The proposed database was intended to assist in identifying offenders, victims, missing persons, undertrials and unidentified deceased individuals.

The Lok Sabha passed an earlier version in January 2019, but the 2019 Bill was subsequently withdrawn on 24 July 2023. It did not become an enacted DNA-specific statute.

2019”+2

Legal significance: The proposed regulatory framework must not be confused with existing legislation. Its proposed National DNA Data Bank and DNA Regulatory Board cannot be treated as having been established under that withdrawn Bill.

B. Criminal Procedure (Identification) Act, 2022

The Criminal Procedure (Identification) Act, 2022 is particularly relevant.

It replaced the Identification of Prisoners Act, 1920, and expanded the categories of measurements that authorised authorities may collect.

The statutory framework includes biological samples and their analysis, subject to the Act and its rules.

Its relevance includes:

Collection of specified measurements from legally covered persons.

Authorisation of designated police and prison authorities.

Recording and preservation of measurements.

Use by law-enforcement authorities for investigation and identification.

Regulation of retention and destruction.

The Act provides a significant basis for State collection of biological measurements. However, it should not be interpreted as creating an unrestricted national genetic database or granting unrestricted access to all genetic information.

C. Bharatiya Nagarik Suraksha Sanhita, 2023

Section 349 of the Bharatiya Nagarik Suraksha Sanhita, 2023 concerns the power of a Magistrate to order specimen signatures, handwriting, finger impressions and voice samples, and permits specified bodily samples to be taken in accordance with the provision.

This provision is relevant to the judicial authorisation and evidentiary aspects of biological identification.

D. Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act, 2023 provides a broader framework for digital personal data processing.

Relevant protections include:

Section 4: Grounds for processing personal data.

Section 5: Notice.

Section 6: Consent.

Section 8: General obligations of data fiduciaries.

Section 11: Right to access information.

Section 12: Correction and erasure.

Section 13: Grievance redressal.

Section 17: Exemptions.

However, two qualifications are essential.

First, the Act does not create a separate statutory category specifically for genetic information.

Second, Section 17 contains exemptions for certain governmental processing, including specified national security and law-enforcement purposes. Consequently, its protections must be examined alongside the applicable exemptions and commencement provisions.

The DPDP Rules were notified in November 2025, with phased commencement provisions.

India Code+3

5. Important Case Laws

The following decisions establish important principles governing State collection, retention and use of personal and genetic identification information.

Case 1: Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)

Landmark Indian constitutional judgment

Citation: (2017) 10 SCC 1

Court: Supreme Court of India, Nine-Judge Constitution Bench.

Facts:

The case concerned the constitutional recognition of privacy, particularly in the context of the government's Aadhaar identification scheme and collection of biometric and demographic information.

The central question was whether privacy was protected as a fundamental right under the Indian Constitution.

Judgment:

The Supreme Court unanimously recognised privacy as a constitutionally protected fundamental right.

The Court held that privacy is intrinsic to Article 21 and forms part of the freedoms guaranteed by Part III.

The judgment recognised informational privacy, individual autonomy and human dignity.

It also established a threefold requirement for State interference with privacy:

Legality.

Legitimate State necessity.

Proportionality.

Application to genetic databases:

A national genetic identification database involves the collection and processing of exceptionally personal information.

Under the Puttaswamy principles, the government cannot justify unrestricted DNA collection merely by referring to crime prevention or administrative convenience.

It must establish lawful authority, legitimate purpose and proportionality.

Legal principle: State control over genetic databases must respect informational privacy and constitutional dignity.

Indian Kanoon+1

Case 2: Selvi v. State of Karnataka (2010)

Citation: (2010) 7 SCC 263

Court: Supreme Court of India.

Facts:

The case concerned the involuntary administration of narcoanalysis, polygraph examinations and Brain Electrical Activation Profile tests during criminal investigations.

The question was whether compelling individuals to undergo such scientific investigative techniques violated constitutional protections.

Judgment:

The Supreme Court held that involuntary administration of these techniques violated Article 20(3) and the protection of personal liberty under Article 21.

The Court emphasised bodily integrity, mental privacy and individual autonomy.

Application to genetic databases:

Although the judgment did not directly decide the legality of national DNA databases, it provides an important constitutional framework for compulsory biological evidence collection.

It supports the principle that scientific investigation must not override constitutional protections.

Legal principle: The State's investigative powers are subject to constitutional limits protecting bodily integrity and individual liberty.

Indian Kanoon

Case 3: S. and Marper v. United Kingdom (2008)

Major international genetic privacy precedent

Citation: Applications Nos. 30562/04 and 30566/04, Grand Chamber, European Court of Human Rights, 4 December 2008.

Facts:

Two individuals challenged the retention of their fingerprints, DNA profiles and cellular samples after criminal proceedings had ended without conviction.

The government argued that retaining the information would help prevent and investigate future crimes.

Judgment:

The European Court of Human Rights held that indefinite retention of the applicants' genetic information violated Article 8 of the European Convention on Human Rights.

The Court highlighted the particularly sensitive nature of biological samples and DNA profiles.

It also recognised that genetic profiles could reveal familial relationships and potentially permit inferences about sensitive personal characteristics.

The indiscriminate and indefinite retention policy failed to strike a fair balance between public security and individual privacy.

Application to India:

This judgment is highly relevant to the design of Indian genetic databases.

It suggests that:

Acquitted individuals should not automatically remain in databases indefinitely.

Retention periods must be justified.

Different categories of individuals require different treatment.

Genetic samples require stronger safeguards.

Independent review and deletion procedures are important.

Legal principle: Blanket and indiscriminate retention of genetic information can violate the right to privacy.

Bailii+1

Case 4: Gaughran v. United Kingdom (2020)

Citation: Application No. 45245/15, European Court of Human Rights, 13 February 2020.

Facts:

The applicant challenged the indefinite retention of his DNA profile, fingerprints and photograph following a conviction for driving with excess alcohol.

His conviction had become spent, but the police continued to retain his personal identification information indefinitely.

Judgment:

The European Court of Human Rights found a violation of Article 8.

It considered the indefinite retention disproportionate, particularly because the legal framework lacked an adequate possibility of meaningful review.

The Court also distinguished the retention of DNA profiles from other biometric information because DNA can reveal familial relationships even after the individual concerned has died.

Application to India:

This decision demonstrates why national genetic databases require:

Defined retention periods.

Individualised assessments.

Independent review.

Effective deletion procedures.

Protection of relatives' genetic privacy.

Legal principle: Even information collected from convicted individuals cannot necessarily be retained indefinitely without proportionate justification and safeguards.

Bailii+1

Case 5: Maryland v. King (2013)

Citation: 569 U.S. 435 (2013).

Court: Supreme Court of the United States.

Facts:

Maryland legislation authorised DNA collection from certain individuals arrested for qualifying serious offences.

Alonzo King challenged the collection of his DNA through a cheek swab.

Judgment:

The US Supreme Court upheld the DNA collection procedure in the particular context of a valid arrest supported by probable cause for a serious offence.

The Court considered the governmental interest in identifying arrestees and the statutory safeguards limiting the use of the DNA information.

The decision was closely tied to the Maryland statutory scheme and the circumstances of arrest.

Application to India:

The decision illustrates how DNA collection may be justified for legitimate identification purposes when statutory restrictions and safeguards exist.

However, it does not establish that governments may collect genetic samples from the entire population without limitation.

Legal principle: The legality of State DNA collection depends significantly on its statutory basis, purpose, context and safeguards.

LII / Legal Information Institute

6. Additional Important Judicial Principles

A. District Registrar and Collector v. Canara Bank (2005)

Citation: (2005) 1 SCC 496.

Court: Supreme Court of India.

Facts and judgment:

The case concerned the statutory power of authorities to inspect private banking records.

The Supreme Court examined the relationship between privacy, confidentiality and governmental access to personal information.

Relevance to genetic databases:

The decision supports the proposition that State access to private information must be legally authorised and cannot be treated as unlimited.

Genetic records deserve particular protection because they may reveal information about individuals beyond the person whose sample was originally collected.

B. Whalen v. Roe (1977)

Citation: 429 U.S. 589 (1977).

Court: Supreme Court of the United States.

Facts and judgment:

The case involved a New York State system requiring the collection and centralised storage of information concerning prescriptions for certain controlled medicines.

The Supreme Court upheld the statutory scheme, while recognising privacy interests relating to avoiding disclosure of personal information.

Relevance to genetic databases:

The case illustrates that centralised governmental information systems can serve legitimate public purposes, provided appropriate confidentiality and security safeguards exist.

It also highlights the importance of protecting information against unauthorised disclosure.

7. Major Legal Challenges in State-Controlled Genetic Databases

8. Essential Safeguards for National Genetic ID Databases

A constitutionally sound national genetic database should incorporate the following safeguards.

1. Purpose limitation

DNA information collected for criminal identification should not automatically be used for unrelated purposes such as employment screening, insurance assessment or commercial genetic profiling.

2. Data minimisation

The government should collect only the genetic information necessary for the legally authorised purpose.

3. Independent regulatory authority

A specialised independent authority should supervise database operations, laboratory accreditation, data access and compliance.

4. Judicial authorisation

Compulsory collection and particularly intrusive uses of genetic material should be governed by clear statutory requirements and appropriate judicial oversight.

5. Retention limits

The database should prescribe different retention periods according to the individual's legal status and the purpose of collection.

6. Deletion rights

There should be procedures for deleting information when the legal basis for retention ends.

7. Genetic confidentiality

Access should be restricted to authorised personnel, with encryption, audit trails and penalties for unauthorised disclosure.

8. Protection of relatives

Familial DNA searches should require specific legal authority and heightened safeguards because they can affect individuals who are not subjects of an investigation.

9. Independent review

Individuals should have access to an effective mechanism for challenging incorrect or unlawfully retained records.

10. International cooperation

DNA information shared with foreign authorities should be subject to purpose restrictions, confidentiality obligations and appropriate safeguards against onward disclosure.

9. International Legal Framework

Several international instruments provide useful principles for regulating genetic databases.

These instruments provide a framework for assessing the legitimacy of governmental genetic information systems.

India is not a party to the European Convention on Human Rights or the Oviedo Convention. Their provisions and associated judgments are therefore comparative legal guidance rather than directly binding Indian law.

10. Recommendations for Reform in India

India requires a comprehensive and clearly defined legal framework governing national genetic identification databases.

The following reforms would strengthen the system:

Enact dedicated legislation governing DNA profiling and genetic databases.

Establish an independent national genetic data protection regulator.

Define precisely which categories of persons may be subjected to compulsory DNA collection.

Introduce different retention periods for suspects, convicted persons, victims and missing persons.

Establish independent procedures for reviewing and deleting DNA records.

Restrict familial DNA searches to specifically authorised circumstances.

Introduce strict controls on access by intelligence and law-enforcement agencies.

Require regular forensic laboratory accreditation and technical audits.

Provide effective remedies for unlawful genetic data processing.

Establish transparent rules for international genetic data transfers.

11. Critical Legal Analysis

State control over national genetic databases raises a fundamental question concerning the relationship between technological development and constitutional liberty.

On one side, DNA identification can improve criminal investigations, identify unidentified deceased persons, assist missing-person investigations and reduce the risk of wrongful convictions.

On the other side, genetic information is permanent in nature and has implications extending beyond the individual from whom the biological sample was obtained.

For example, if the government retains an individual's DNA profile indefinitely, that information might subsequently be used to identify biological relatives through familial matching.

This creates a situation in which one person's inclusion in a government database may affect the privacy interests of several other individuals.

The legal challenge is therefore not simply the protection of individual genetic information. It is also the protection of family privacy and genetic autonomy.

The principles established in Puttaswamy, S. and Marper and Gaughran demonstrate the importance of legality, proportionality, retention limits and independent oversight.

In India, the withdrawal of the DNA Technology (Use and Application) Regulation Bill, 2019, makes the distinction between the proposed regulatory framework and the existing statutory powers particularly important.

The Criminal Procedure (Identification) Act, 2022, provides authority for collecting specified biological measurements, but a comprehensive DNA-specific framework remains an important legislative issue.

12. Conclusion

State Control Over National Genetic ID Databases represents an important intersection of constitutional law, criminal justice, biotechnology regulation, privacy rights and national security.

Governments have legitimate reasons to use DNA technology for identifying offenders, victims, missing persons and unidentified deceased individuals.

However, these objectives do not create unlimited governmental authority over genetic information.

The Indian constitutional framework, particularly Article 14, Article 20(3) and Article 21, requires State action to comply with legality, fairness, necessity and proportionality.

The judgments in Justice K.S. Puttaswamy v. Union of India, Selvi v. State of Karnataka, S. and Marper v. United Kingdom and Gaughran v. United Kingdom provide important foundations for balancing public security with genetic privacy.

The ultimate legal principle is that the State may exercise lawful and proportionate control over national genetic identification databases, but it cannot treat an individual's genetic identity as unrestricted governmental property.

13. Important Cases for Examination and Research

Research focus: This subject is particularly relevant to constitutional law, criminal procedure, biotechnology law, genetic privacy, forensic science regulation and State surveillance.

For further research, the most important issue is the development of a dedicated Indian statutory framework that reconciles the government's investigative powers with the constitutional right to genetic privacy.