Biomarker Constitutional Privacy.

1. Introduction

Biomarker Constitutional Privacy refers to the constitutional and legal protection of an individual's privacy against the collection, analysis, storage, disclosure, and misuse of biological markers that reveal information about their body, health, genetic characteristics, or physiological condition.

A biomarker is a measurable biological characteristic that can provide information about a biological process, disease, physiological state, or response to treatment. Biomarkers may be detected through blood, urine, saliva, tissue samples, genetic testing, medical imaging, or other biological measurements.

Examples include:

  • Genetic biomarkers: DNA variations associated with inherited conditions or disease susceptibility.
  • Molecular biomarkers: Proteins, hormones, and other molecules that indicate biological processes.
  • Physiological biomarkers: Measurements such as blood pressure and heart rate.
  • Neurological biomarkers: Biological measurements associated with neurological conditions or brain activity.
  • Reproductive biomarkers: Measurements related to fertility, pregnancy, hormonal cycles, or reproductive health.
  • Predictive biomarkers: Biological characteristics that may indicate the likelihood of developing a disease or responding to a particular treatment.

Biomarker information can be particularly sensitive because it may reveal facts that an individual has not disclosed, does not yet know, or cannot readily change. Some biomarkers can also provide information about biological relatives, raising privacy concerns beyond the person who supplied the sample.

For example, an employer might obtain a worker's biomarker data and use it to predict future illness. An insurance company might use a genetic marker to estimate disease risk. A government agency might collect biological samples for identification or criminal investigation. A healthcare platform might use biomarkers to create detailed health profiles.

Each situation raises questions about bodily autonomy, informational privacy, informed consent, discrimination, data security, and constitutional limits on state power.

Biomarker Constitutional Privacy is best understood as an interdisciplinary legal concept rather than the name of a single, universally recognized constitutional doctrine. Its legal foundations arise from constitutional privacy rights, medical confidentiality, data-protection legislation, genetic-discrimination rules, and judicial decisions concerning bodily integrity and personal information.

This explanation focuses primarily on Indian constitutional law, with comparative decisions from the United States and Europe.

2. Meaning and scope of Biomarker Constitutional Privacy

Biomarker privacy can be divided into five interconnected dimensions.

A. Bodily privacy

Bodily privacy concerns an individual's right to exercise control over their body and biological material.

Questions include:

  • Can the state compel an individual to provide a blood, saliva, or tissue sample?
  • Can a person be subjected to genetic testing without meaningful consent?
  • Can biological samples collected for one purpose be used for another?
  • Under what circumstances may authorities collect samples during criminal investigations?

Bodily privacy is particularly important where a person is subjected to an invasive procedure or where biological material is collected through coercion.

However, bodily privacy does not create an absolute right to refuse every legally authorized medical examination or biological sample collection. The legality of compulsion depends on the applicable law, the purpose of collection, procedural safeguards, and constitutional proportionality.

B. Informational privacy

Informational privacy concerns control over the information derived from a biological sample.

A laboratory might collect a blood sample to test for a particular disease. The resulting data could reveal additional information, including genetic predispositions or other medical conditions.

The legal question is whether collecting one category of information authorizes the collection, inference, retention, or disclosure of all information that the sample could potentially reveal.

Generally, the purpose of collection, the individual's consent, the applicable legal authority, and the sensitivity of the information are important to determining whether further processing is lawful.

C. Genetic and predictive privacy

Some biomarkers indicate present conditions, while others suggest possible future risks.

For instance, a genetic marker may be associated with an increased probability of developing a particular illness. It does not necessarily establish that the individual will develop that illness.

Predictive biomarkers therefore create two problems:

  1. Privacy risk: Sensitive predictions may be disclosed without adequate justification.
  2. Fairness risk: Employers, insurers, or other organizations may treat statistical risk as if it were a confirmed medical fact.

Legal protection must account for the difference between a measured biological characteristic, an inference drawn from that characteristic, and a decision based on the inference.

D. Relational privacy

Biological information is not always exclusively individual.

Genetic information may reveal biological relationships, inherited conditions, or characteristics shared with relatives. A genetic test conducted on one person may consequently affect the privacy interests of other family members.

This creates difficult questions about consent, disclosure, family medical history, and the circumstances in which preventing serious harm may justify communicating genetic information to another person.

E. Institutional and algorithmic privacy

Biomarkers are increasingly processed through artificial intelligence, digital health platforms, research databases, and predictive analytics systems.

An algorithm may combine biomarker data with age, location, medical history, purchasing patterns, or employment records to infer sensitive characteristics.

Even if an organization does not disclose the original laboratory result, it may still generate or disclose sensitive health inferences.

Accordingly, biomarker privacy must consider not only the biological sample and raw laboratory results but also the derived profiles, predictions, and decisions produced from them.

3. Constitutional foundations in India

A. Article 21: Right to life, personal liberty, and privacy

Article 21 of the Constitution of India provides that no person shall be deprived of life or personal liberty except according to a procedure established by law.

The Supreme Court has interpreted Article 21 to protect dignity, bodily integrity, personal autonomy, and privacy.

In biomarker-related disputes, Article 21 may be relevant when the state or a private institution collects or processes sensitive biological information in circumstances that affect a person's protected privacy interests.

For example, a compulsory genetic examination could raise concerns about bodily autonomy, while the indefinite retention of a DNA sample could raise separate questions about informational privacy.

The constitutional analysis should distinguish between the initial collection of a sample and what happens to it afterward. A collection may be lawful for a particular investigation, yet subsequent retention, disclosure, or unrelated use may require separate justification.

B. Article 14: Equality and protection against arbitrary treatment

Article 14 guarantees equality before the law and equal protection of the laws.

Biomarker privacy intersects with Article 14 when biological information is used to make arbitrary or discriminatory decisions.

Examples include:

  • Excluding an individual from public employment because of a predicted genetic predisposition.
  • Applying unjustifiably different rules to people with particular biological characteristics.
  • Using an opaque algorithm to classify individuals as risky without a rational or legally defensible basis.
  • Applying government surveillance practices selectively without adequate justification.

Not every distinction based on biological information automatically violates Article 14. The legal question depends on the nature of the classification, its justification, the applicable constitutional standards, and the facts.

Nevertheless, Article 14 provides an important constitutional basis for challenging arbitrary state action involving biomarkers.

C. Article 19: Freedom and personal autonomy

Article 19 protects specified freedoms, including freedom of speech and expression, subject to the constitutional limitations applicable to each freedom.

Biomarker privacy may intersect with Article 19 where biological surveillance or the threatened disclosure of sensitive information chills lawful expression, association, journalism, or participation in public life.

For example, a system that uses biological or health-related information to identify and monitor political demonstrators may raise questions involving privacy, expression, and association.

However, Article 19 does not independently establish an unlimited right to keep every biomarker confidential. The particular freedom affected and the relevant constitutional test must be identified.

D. Constitutional privacy is not absolute

Indian constitutional law does not treat privacy as an absolute right.

A government measure interfering with privacy must satisfy the applicable constitutional requirements, including legal authority, a legitimate state objective, and proportionality.

In practical terms, a biomarker-collection measure should be assessed by asking:

  1. Legality: Is the interference authorized by valid law?
  2. Legitimate objective: Is there a constitutionally permissible purpose, such as investigating a serious offence or protecting public health?
  3. Rational connection: Is the collection or processing genuinely connected to that purpose?
  4. Necessity and proportionality: Could the objective reasonably be achieved through a less intrusive method, and are the privacy costs justified?
  5. Safeguards: Are there appropriate limits on access, retention, disclosure, security, and further use?

These questions are particularly important when an institution collects more biological information than it needs or retains information after the original purpose has expired.

4. Leading Indian case laws

Case 1: Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)

Citation: (2017) 10 SCC 1
Court: Supreme Court of India, nine-judge Constitution Bench.

This is the foundational Indian constitutional decision for understanding biomarker privacy.

Facts and legal issue

The case arose from challenges concerning the constitutional status of privacy, including questions associated with the Aadhaar identification system.

The central issue was whether the right to privacy is protected as a fundamental right under the Indian Constitution.

Judgment

The Supreme Court unanimously recognized that privacy is a constitutionally protected fundamental right. The judgment explained that privacy is connected with dignity, liberty, autonomy, and the protection of personal information.

The Court recognized that privacy encompasses different interests, including bodily privacy and informational privacy.

It also clarified that privacy is not absolute and that restrictions must satisfy constitutional requirements.

Application to biomarker privacy

Although Puttaswamy was not specifically a biomarker case, its principles are directly relevant to the constitutional analysis of biological information.

Consider a hospital that collects a patient's blood sample for a routine diagnostic test. If the hospital subsequently uses the sample for unrelated genetic profiling or discloses the resulting information to an employer, several questions arise:

  • Was the additional use authorized?
  • Was the patient adequately informed?
  • Was the information disclosed for a legitimate purpose?
  • Were appropriate safeguards in place?
  • Did the use interfere with a protected privacy interest?

Similarly, a government agency seeking to establish a national genetic database would need to justify the legal authority, purpose, scope, and safeguards of the proposed system.

Legal principle

The principal lesson of Puttaswamy is that personal information and bodily autonomy fall within the constitutional privacy framework, and state interference with privacy requires legal and constitutional justification.

The case does not, however, establish that all biomarker processing requires consent in every circumstance. Specific legal authorization and applicable statutory exceptions remain relevant.

Case 2: Selvi v. State of Karnataka (2010)

Citation: (2010) 7 SCC 263
Court: Supreme Court of India.

Facts

The case concerned the involuntary administration of investigative techniques, including narcoanalysis, polygraph examinations, and the Brain Electrical Activation Profile (BEAP) test.

These techniques raised questions about whether the state could compel individuals to undergo procedures that might disclose information about their mental processes.

Legal issues

The Supreme Court considered the protection against compelled self-incrimination under Article 20(3), the right to personal liberty under Article 21, and the constitutional implications of involuntary investigative testing.

Judgment

The Court held that the involuntary administration of the techniques at issue violated the relevant constitutional protections.

The judgment emphasized the significance of mental privacy, personal autonomy, and protection against compelled testimonial responses.

It also distinguished between compelled testimonial techniques and the collection of physical evidence.

Application to biomarker privacy

The decision is particularly relevant to biomarkers that may be used to infer neurological, psychological, or cognitive characteristics.

For example, a public authority might seek to compel a person to undergo a neurological test intended to reveal information about mental states.

Selvi supports careful scrutiny of compulsory testing, particularly where the procedure intrudes upon mental privacy or seeks testimonial information.

However, it should not be interpreted as prohibiting every biological examination. The constitutional treatment of DNA samples, blood tests, and other physical evidence can differ from the treatment of compelled testimonial techniques.

Legal principle

The state cannot disregard constitutional protections merely because a scientific technique may assist an investigation. The nature of the test, whether it is involuntary, and the information it is intended to obtain are important to the constitutional analysis.

Case 3: K.S. Puttaswamy (Aadhaar-5J.) v. Union of India (2018)

Citation: (2019) 1 SCC 1
Court: Supreme Court of India, Constitution Bench.

Facts

The case examined the constitutional validity of the Aadhaar framework, including the use of biometric information for identification and authentication.

Aadhaar principally uses fingerprints, iris scans, and demographic information. These are biometric identifiers rather than necessarily medical biomarkers, but the case is important to the broader question of constitutional control over biological identification systems.

Legal issues

The Court considered whether the collection and use of biometric information were compatible with privacy, dignity, proportionality, and other constitutional requirements.

Judgment

The Court upheld the Aadhaar framework in substantial part while also imposing limits on particular uses and arrangements.

The judgment examined the state's interest in identification and the need for safeguards against misuse of personal information.

It also emphasized the importance of legal authority and safeguards where the state interferes with privacy.

Application to biomarker privacy

The case helps distinguish between the legitimate use of biological identifiers for a specified purpose and unrestricted access to sensitive personal information.

For example, an institution authorized to verify identity using a biometric identifier does not thereby obtain unrestricted authority to conduct genetic testing on the same individual.

Likewise, permission to authenticate an identity does not automatically justify using associated data for unrelated health predictions or profiling.

Legal principle

Authorization to collect or use a biological identifier for one purpose should not automatically be treated as authorization for every other use of that information.

The precise legal position depends on the legislation, the type of information, the purpose of processing, and the applicable safeguards.

Case 4: Bhabani Prasad Jena v. Convenor Secretary, Orissa State Commission for Women (2010)

Citation: (2010) 8 SCC 633
Court: Supreme Court of India.

Facts

The dispute concerned matrimonial proceedings and a request for DNA testing to determine the paternity of a child. The High Court directed DNA testing, raising questions about the authority of the court to order such a test and the privacy interests of the individuals involved.

Judgment

The Supreme Court held that DNA testing should not be ordered routinely. Courts must consider whether there is a strong prima facie case and whether there is an eminent need for the test.

The Court emphasized the importance of balancing the need to discover the truth against the consequences of testing for the persons concerned, particularly the child.

Application to biomarker privacy

This case is directly relevant to genetic biomarkers because DNA testing can reveal biological relationships and information with significant personal and social consequences.

Suppose a party requests a DNA test merely to investigate an allegation without presenting sufficient preliminary evidence. Ordering the test automatically could expose sensitive genetic information and affect the dignity and privacy of the child.

The court must therefore consider whether the evidence can be obtained through less intrusive means and whether testing is genuinely necessary to resolve the dispute.

Legal principle

A court should not order DNA testing as a matter of routine; the necessity of the test must be balanced against privacy, dignity, and other affected interests. Indian Kanoon

Case 5: Aparna Ajinkya Firodia v. Ajinkya Arun Firodia (2023)

Citation: 2023 INSC 146; Civil Appeal No. 1308 of 2023
Court: Supreme Court of India.

Facts

The case arose from matrimonial proceedings in which a husband sought DNA testing of a minor child in connection with allegations of adultery against his wife.

The issue was whether the DNA test was justified when the allegations could potentially be examined through other evidence.

Judgment

The Supreme Court set aside the orders directing the DNA test.

The Court stressed that children have a right not to have their legitimacy questioned frivolously before a court. It recognized that this protection is an important aspect of a child's privacy.

The Court also considered the legal presumption concerning the legitimacy of a child born during a valid marriage and the need for a sufficient evidentiary basis before ordering intrusive testing.

Application to biomarker privacy

This decision illustrates that the privacy implications of genetic testing extend beyond the person whose biological sample is collected.

A child may experience long-term consequences from the disclosure of genetic information, including changes in family relationships and exposure to stigma.

Even where a litigant claims that DNA testing could assist in establishing the truth, a court must assess the actual purpose of the request, the availability of alternative evidence, and the child's interests.

Legal principle

Genetic testing must not be used indiscriminately when it risks unjustifiably invading a child's privacy, dignity, and family life. Indian Kanoon

Case 6: Goutam Kundu v. State of West Bengal (1993)

Citation: (1993) 3 SCC 418
Court: Supreme Court of India.

Legal issue

The case concerned whether a court should order a blood test in a paternity dispute.

Judgment

The Supreme Court established that courts should not order blood tests routinely or permit them merely to facilitate speculative investigations. A strong prima facie case was required, and the consequences of testing had to be considered.

The decision also emphasized the importance of the legal presumption concerning legitimacy under the then-applicable Section 112 of the Indian Evidence Act, 1872.

Application to biomarker privacy

Although blood-group testing is not equivalent to comprehensive genetic profiling, the decision establishes an important principle for court-ordered biological testing.

A party's desire to obtain potentially relevant biological information does not, by itself, justify compulsory testing.

The court must consider the evidentiary need and the potential harm to the individuals concerned.

Present-day qualification: The Indian Evidence Act, 1872, has been replaced by the Bharatiya Sakshya Adhiniyam, 2023, which generally came into force on 1 July 2024. The precise statutory provision applicable to a current dispute should therefore be verified. The underlying judicial caution against routine DNA testing remains relevant.

5. Important international case laws

International judgments are useful for comparative analysis, but their legal force differs. European Court of Human Rights decisions interpret the European Convention on Human Rights, while United States Supreme Court decisions interpret the US Constitution. Neither automatically determines the outcome of an Indian constitutional dispute.

Case 7: S. and Marper v. United Kingdom (2008)

Application No.: 30562/04 and 30566/04
Court: European Court of Human Rights, Grand Chamber.

Facts

The applicants' fingerprints, cellular samples, and DNA profiles had been collected in criminal proceedings. The authorities retained this information even after one applicant was acquitted and the proceedings against the other were discontinued.

The applicants challenged the continued retention of their biological information.

Judgment

The Court held that the retention of the applicants' cellular samples and DNA profiles interfered with their right to respect for private life under Article 8 of the European Convention on Human Rights.

It emphasized that biological samples contain extensive personal information, including health-related information and genetic information relevant to biological relatives.

The Court found the blanket and indiscriminate retention arrangements disproportionate in the circumstances and concluded that Article 8 had been violated.

Application to biomarker privacy

The decision is highly relevant to biological databases.

An organization may have lawful grounds to collect a biological sample initially, but that does not automatically justify retaining it indefinitely.

The case supports scrutiny of:

  • Retention periods.
  • The purposes for which samples may be used.
  • Whether information belongs to a person who has been acquitted or is no longer under investigation.
  • The possibility of identifying biological relatives.
  • The safeguards governing future use.

The case also shows why the privacy implications of retaining an original biological sample may be greater than those of retaining a narrowly defined identification profile.

Legal principle

The storage and future usability of biological information can themselves interfere with privacy, even when no immediate misuse or demonstrable harm has occurred. HUDOC

Case 8: Maryland v. King (2013)

Citation: 569 U.S. 435 (2013)
Court: Supreme Court of the United States.

Facts

The case concerned the collection of DNA samples through cheek swabs from individuals arrested for certain serious offences under Maryland law.

The defendant argued that the collection and analysis of his DNA violated the Fourth Amendment's protection against unreasonable searches and seizures.

Judgment

The US Supreme Court upheld the challenged collection practice in the circumstances presented.

The majority reasoned that DNA collection from a person validly arrested for a serious offence could serve legitimate identification and criminal-justice purposes. It also considered the limited physical intrusion and the statutory safeguards governing the DNA profile.

The decision was controversial, and the dissenting justices expressed concerns about the expansion of government DNA databases and the privacy implications of genetic identification.

Application to biomarker privacy

The case illustrates that constitutional systems may permit some compulsory biological collection when the government's interest is sufficiently strong and legal safeguards are in place.

However, the judgment should not be understood as authorizing unrestricted genetic testing, unrestricted retention, or unrelated medical profiling.

The US Court's analysis depended on the particular arrest context and the DNA identification procedures before it.

Legal principle

The constitutional validity of compulsory biological sampling depends on the context, purpose, degree of intrusion, and applicable safeguards. Legal Information Institute

6. Indian statutory framework governing biomarker privacy

Constitutional rights provide the foundation for biomarker privacy, but several statutes and regulatory frameworks determine how biological information may be collected, processed, and protected.

A. Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act, 2023 establishes a framework for processing digital personal data. Its application depends on the Act's scope, commencement provisions, and applicable exceptions. MeitY

Official text: India Code — Digital Personal Data Protection Act, 2023

The legislation is relevant to biomarker privacy where biological information is processed digitally and relates to an identifiable individual.

Relevant issues include:

  • The lawful basis for processing personal data.
  • Consent and applicable exceptions.
  • Duties of organizations determining the purposes and means of processing.
  • Security safeguards and personal-data breaches.
  • Individual rights and available grievance mechanisms.
  • Rules governing the processing of children's personal data.

Important qualification: The 2023 Act does not simply establish a separate, comprehensive category of specially protected biomarker data. Its statutory framework and commencement notifications must be considered when determining the rights and obligations applicable to a particular situation.

As of October 2026, the Act's provisions have phased commencement dates. The applicable provision must be checked against the relevant commencement notification rather than assuming that every provision has been in force since the Act received presidential assent. India Code

B. Information Technology Act, 2000, and the SPDI Rules, 2011

The Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, have historically provided important protections for certain sensitive personal information handled by covered organizations.

The Rules identify categories that include physical, physiological and mental health conditions, medical records, and biometric information. They also address privacy policies, consent, collection, disclosure, and security practices. IndiaCode by eCourtsIndia

Official reference: India Code's SPDI Rules record

These provisions are relevant when a hospital, laboratory, or covered commercial organization collects or processes health-related biomarker information.

However, the relationship between the SPDI framework and the phased commencement of the newer data-protection legislation must be examined for the relevant date and processing activity. The older framework should not be assumed to apply identically in every situation.

C. Aadhaar Act, 2016

The Aadhaar framework governs the collection and use of specified identity information, including biometric identifiers.

Its relevance to biomarker privacy lies in the distinction between identity authentication and medical or genetic analysis.

For example, permission to authenticate a person's identity using a fingerprint does not itself establish permission to analyze the person's DNA for disease susceptibility.

The permissible uses of Aadhaar information must be assessed under the applicable legislation and constitutional decisions, particularly the 2018 Aadhaar judgment discussed above.

D. Criminal procedure and forensic DNA evidence

Biological samples may be collected in criminal investigations under applicable legal provisions.

The governing framework can include the Bharatiya Nagarik Suraksha Sanhita, 2023, the Bharatiya Sakshya Adhiniyam, 2023, and other relevant legislation.

The legal analysis must distinguish among:

  1. The authority to collect a biological sample.
  2. The authority to analyze it.
  3. The admissibility and evidentiary value of the resulting report.
  4. The retention of samples and profiles.
  5. The disclosure of results to third parties.

Authorization at one stage does not necessarily resolve every legal issue at the other stages.

7. Major legal challenges in biomarker constitutional privacy

A. Consent and bodily autonomy

Consent is a central safeguard in medical testing and research, but its legal significance depends on the context.

A patient who agrees to a blood test for diagnosis may not reasonably understand that the same sample could also be used for unrelated genetic research.

A sound consent process should explain, where relevant:

  • The purpose of testing.
  • The categories of information likely to be generated.
  • Whether the sample or results will be retained.
  • Whether information will be shared with researchers or other organizations.
  • Whether future use is contemplated.
  • Any applicable limits on withdrawal of consent.

Consent does not override every statutory obligation, and certain lawful investigations or other legally recognized circumstances may permit processing without consent. Nevertheless, consent to one activity should not automatically be treated as consent to every possible use.

B. Secondary use of biological information

Secondary use occurs when information collected for one purpose is subsequently used for another.

For example, a fertility clinic may collect hormonal biomarkers to investigate infertility. The information might later be used to create commercial profiles or to predict unrelated health conditions.

Such further processing raises questions about purpose limitation, transparency, legal authority, confidentiality, and the rights of affected individuals.

A constitutional challenge is particularly relevant when government agencies use information collected for a narrow administrative purpose to create a broader surveillance system without sufficient legal justification.

C. Discrimination based on biological predictions

Biomarker-based decisions may disadvantage individuals even when the underlying prediction is uncertain.

Consider an employer who rejects an applicant because a genetic test suggests a higher risk of developing a future illness.

This raises questions about fairness, the relevance of the information to the job, the reliability of the prediction, and the legal restrictions applicable to the decision.

In India, the constitutional arguments may include Article 14 where state action is arbitrary or discriminatory, and Article 21 where protected privacy, dignity, or autonomy interests are infringed.

The precise remedy will depend on the identity of the decision-maker, the applicable legislation, and the evidence.

D. Privacy of children and families

Genetic information can affect family members who never consented to testing.

This problem is particularly acute where a child undergoes DNA testing in family litigation.

The Aparna Ajinkya Firodia decision demonstrates that establishing biological truth is not the only relevant consideration. Privacy, dignity, family relationships, and the interests of the child must also be considered.

Similarly, genetic testing undertaken for research should account for the possibility that results may reveal information about relatives.

E. Algorithmic inference and scientific uncertainty

An algorithm may infer a sensitive characteristic from a combination of biomarkers, even if the original data did not directly disclose that characteristic.

For example, a predictive model may combine physiological measurements and medical history to estimate a person's future risk of disease.

Three distinct questions arise:

  1. Was the original information lawfully collected?
  2. Was the inference scientifically reliable and lawfully generated?
  3. Was the inference used in a legally permissible manner?

An organization cannot necessarily avoid privacy scrutiny simply by describing its output as a prediction rather than a medical diagnosis.

Equally, a statistical association should not be represented as a definitive medical fact.

F. Data breaches and unauthorized disclosure

Biological information can be difficult or impossible to replace.

A compromised password can be changed, but an individual's genetic characteristics cannot be changed in the same way.

A biomarker database breach may expose medical history, reproductive information, genetic relationships, or disease-risk predictions.

Appropriate safeguards include access controls, encryption, data minimization, security audits, restricted sharing, retention limits, and procedures for responding to breaches.

The adequacy of these safeguards depends on the applicable law and the risks created by the particular database.

8. A practical constitutional test for biomarker privacy disputes

A court or regulator assessing a biomarker privacy complaint can use the following analytical framework.

Legal questionWhat must be examined?
1. Is protected information involved?Whether the sample, result, or inference reveals identifiable personal, health, genetic, or other sensitive information.
2. Who collected or processed it?Whether the actor is a government authority, healthcare provider, employer, researcher, or private company.
3. What legal authority exists?Whether legislation, a valid order, consent, or another recognized legal basis authorizes the activity.
4. What is the purpose?Whether the purpose is legitimate and sufficiently specific.
5. Is the processing necessary?Whether the same objective could reasonably be achieved through a less intrusive method.
6. Are safeguards adequate?Whether access, retention, disclosure, security, and secondary use are appropriately controlled.
7. What harm or risk exists?Whether the activity threatens dignity, autonomy, equality, confidentiality, or other protected interests.
8. What remedy is available?Whether the circumstances justify an injunction, deletion or restriction of data, compensation under an applicable law, or constitutional relief.

For state action, the constitutional analysis should be anchored in Puttaswamy. The DNA-testing cases provide more specific guidance where a court is asked to compel an individual or child to undergo genetic testing.

For private organizations, constitutional arguments may interact with statutory data-protection duties, contractual obligations, medical confidentiality, and other applicable laws.

9. Illustrative legal scenarios

Scenario 1: An employer obtains genetic information

An employer requires job applicants to undergo genetic testing to predict future illness.

Legal concerns: The testing may interfere with informational privacy and bodily autonomy. If a government employer is involved, Articles 14 and 21 may be directly relevant. The legality of a private employer's conduct would also depend on the applicable statutory and employment-law framework.

A court would need to examine the purpose, legal authority, necessity, proportionality, and safeguards rather than assuming that an employer has unrestricted access to an applicant's biological information.

Scenario 2: Police retain DNA after a person is acquitted

Authorities retain an individual's DNA sample after criminal proceedings have ended in acquittal.

Legal concerns: The continuing retention may require a justification distinct from the original collection. The principles in S. and Marper v. United Kingdom offer a useful comparative framework for examining retention periods, future uses, and safeguards.

In India, the result would depend on the applicable criminal procedure legislation, forensic-data rules, constitutional protections, and the specific circumstances.

Scenario 3: A hospital shares biomarkers with a commercial company

A hospital shares a patient's genetic and hormonal information with a commercial analytics company for a purpose not disclosed to the patient.

Legal concerns: The relevant questions include the applicable legal basis for disclosure, the scope of consent, confidentiality, statutory data-protection requirements, and the use made of the information.

A constitutional claim may be relevant in appropriate circumstances, but a dispute involving a private hospital will also require consideration of statutory and other legal remedies.

Scenario 4: A court orders DNA testing of a child

A party requests DNA testing primarily to support an allegation against another family member.

Legal concerns: The court must consider whether the test is genuinely necessary, whether other evidence is available, and how the testing could affect the child's privacy and dignity.

The principles in Bhabani Prasad Jena and Aparna Ajinkya Firodia are especially relevant.

10. Recommendations for stronger biomarker privacy protection

A robust biomarker privacy framework should incorporate the following measures.

First, purpose limitation: Biological information should be collected and used only for legally permissible, clearly defined purposes.

Second, data minimization: Institutions should avoid collecting or retaining biological information that is unnecessary for the stated objective.

Third, informed consent: Where consent is the applicable legal basis, individuals should receive meaningful information about testing, data sharing, and future use.

Fourth, independent oversight: High-risk biological databases and genetic research programmes should be subject to appropriate ethical, legal, and security oversight.

Fifth, retention limits: Institutions should establish defensible retention periods and procedures for deletion or destruction when continued retention is no longer justified.

Sixth, safeguards against discrimination: Organizations should not treat uncertain biomarker predictions as conclusive evidence of an individual's future health or capabilities.

Seventh, protection of children and relatives: Decisions involving familial genetic information should account for the interests of persons who did not directly provide the biological sample.

Eighth, accountability: Institutions should document the purpose, legal basis, access arrangements, disclosures, and security measures associated with biological data processing.

These measures can help reconcile legitimate medical, scientific, and public-safety objectives with the protection of individual privacy.

11. Critical analysis

The principal difficulty in biomarker constitutional privacy is that biological information can reveal much more than the immediate purpose for which it was collected.

A blood sample taken for diagnosis might reveal genetic predispositions. A DNA profile created for identification might facilitate the discovery of family relationships. A collection of apparently ordinary physiological measurements might enable an algorithm to infer a sensitive medical condition.

This creates a fundamental legal problem: Should an institution's authority to collect biological information also determine the limits of its future use?

The better approach is to assess collection, analysis, storage, disclosure, and secondary use as related but distinct activities.

A legitimate purpose for initial collection does not automatically justify every subsequent activity. Equally, privacy protection must account for circumstances in which medical treatment, scientific research, criminal investigations, or public health require lawful access to biological information.

The challenge is therefore not to prohibit all biomarker processing. It is to establish a legal framework that distinguishes justified uses from unnecessary, disproportionate, or discriminatory uses.

Indian constitutional law provides a strong foundation for this analysis through the recognition of privacy in Puttaswamy, the protection against certain involuntary investigative techniques in Selvi, and the judicial caution surrounding DNA testing in Bhabani Prasad Jena and Aparna Ajinkya Firodia.

However, the precise legal outcome in a particular dispute will depend on the applicable statute, the nature of the biological information, the identity of the institution, and the circumstances of collection and use.

12. Conclusion

Biomarker Constitutional Privacy concerns the protection of bodily autonomy, genetic information, health-related data, and sensitive biological inferences against unjustified interference.

In India, its central constitutional foundation is the right to privacy under Article 21, read alongside other applicable fundamental rights, particularly Article 14 where arbitrary state action is involved.

The most important judicial authorities include:

  1. Justice K.S. Puttaswamy (Retd.) v. Union of India (2017) — constitutional recognition of privacy.
  2. Selvi v. State of Karnataka (2010) — involuntary investigative techniques, mental privacy, and constitutional safeguards.
  3. K.S. Puttaswamy v. Union of India (Aadhaar judgment, 2018) — biometric identification and constitutional limits.
  4. Bhabani Prasad Jena v. Convenor Secretary, Orissa State Commission for Women (2010) — judicial caution regarding DNA testing.
  5. Aparna Ajinkya Firodia v. Ajinkya Arun Firodia (2023) — genetic testing, child privacy, and family dignity.
  6. Goutam Kundu v. State of West Bengal (1993) — restrictions on routine blood testing in paternity disputes.
  7. S. and Marper v. United Kingdom (2008) — retention of DNA samples and profiles.
  8. Maryland v. King (2013) — constitutional limits on compulsory DNA collection in criminal proceedings.

Taken together, these decisions demonstrate that scientific usefulness alone does not resolve the legal question. Biological information must be handled within the limits imposed by constitutional rights, applicable legislation, legitimate purposes, and appropriate safeguards.

The central principle is that a person's biological characteristics should not become a source of unrestricted institutional power merely because science makes those characteristics measurable.

LawGratis provides pro bono legal aid and resources to empower communities. Join us in making justice reachable for everyone! Follow our community on Instagram, YouTube, Facebook, and LinkedIn.

LEAVE A COMMENT