1. Introduction

Genomic research involves collecting, sequencing, storing, analysing and sharing an individual's DNA or genetic information. Unlike many other forms of personal data, genomic information can reveal inherited disease risks, ancestry, biological relationships, carrier status and information relevant to biological relatives. It may also have implications for entire communities.

The legal challenge is to balance two competing interests:

Individual autonomy and privacy: People should understand and control how their biological samples and genomic data are used.

Scientific progress and public health: Researchers need to reuse genomic datasets to study diseases, develop diagnostics and discover new treatments, sometimes for research questions that were not foreseeable when the samples were collected.

This tension produces two principal models of consent: broad consent and specific consent.

Broad consent permits certain future research uses within a defined framework. Specific consent authorises a particular, sufficiently described purpose or activity. Neither model is automatically lawful or unlawful in every circumstance; the validity of consent depends on the governing law, the clarity of the information provided, the nature of the proposed use and the safeguards in place.

2. Meaning and legal foundations

A. Broad consent in genomics

Broad consent is permission to store and reuse biological samples or genomic data for a reasonably described range of future research activities, including some studies whose precise hypotheses are not yet known.

For example, a participant may consent to the following:

My blood sample and genomic data may be stored in an approved research biobank and used for future ethically reviewed research into genetic diseases, subject to confidentiality, access controls and applicable legal requirements.

Broad consent is not the same as unlimited or blanket consent. A general statement authorising any future use, by any person, for any purpose, regardless of risk or safeguards, may fail to establish meaningful informed consent.

Broad consent typically requires:

A defined research domain or acceptable range of uses.

Disclosure of storage, data sharing and possible international transfers.

Independent ethics review and appropriate governance.

Protection against unauthorised identification and discriminatory uses.

Procedures for withdrawal, where legally and technically possible.

Additional review or renewed consent for uses materially outside the original scope.

B. Specific consent in genomics

Specific consent is permission directed to a particular research project, purpose, intervention or data-sharing activity, described in sufficient detail for the participant to make an informed choice.

For example:

I consent to the use of my blood sample and genomic data in this approved study investigating inherited variants associated with breast cancer. My sample will be stored for five years, and identifiable information will be accessible only to authorised personnel.

Specific consent is particularly important where a proposed use has significant consequences for privacy, dignity, family relationships or personal autonomy.

It is especially relevant to:

Predictive or presymptomatic genetic testing.

Research involving sensitive or potentially stigmatising conditions.

Return of clinically significant findings.

Commercial use not reasonably covered by the original permission.

Research involving identifiable genomic information.

Material changes in research purpose, risk or data recipients.

A participant's consent to undergo a clinical genetic test does not automatically authorise use of the results in unrelated research, commercial product development or a separate clinical intervention.

3. Comparison between broad consent and specific consent

Important distinction: Broad consent concerns the scope of permission, not the quality of consent. A carefully explained broad consent can be more ethically defensible than a vague project-specific form. Conversely, a narrowly drafted form can still be invalid if the participant does not understand it or is pressured to sign it.

4. Principal legal issues

A. Autonomy and informed decision-making

The law of informed consent recognises that participation in research must rest on a meaningful decision, not merely a signature. Participants should be informed about the research purpose, reasonably foreseeable risks, data recipients, storage arrangements and relevant alternatives.

In genomics, consent must account for the fact that the research value of a sample may change over time. New analytical techniques can extract information that was not reasonably foreseeable when the sample was originally collected.

A consent document that merely says “for scientific research” may be insufficient where it is being used to justify a highly sensitive or materially different secondary use.

B. Privacy and confidentiality

Genomic data can remain identifying even after conventional identifiers have been removed. Genetic variants, family relationships and linkage with other datasets can sometimes permit re-identification.

Consequently, consent is only one component of lawful governance. Other measures may include:

Pseudonymisation and access controls.

Secure storage and data-transfer arrangements.

Limits on re-identification and onward sharing.

Independent review of proposed secondary uses.

Transparency about cross-border transfers and commercial partnerships.

Procedures for responding to privacy breaches.

A researcher's possession of broad consent does not, by itself, eliminate every confidentiality, data-protection or security obligation.

C. Secondary use of genomic information

Secondary use occurs when data or samples collected for one purpose are reused for another.

For example, a sample initially collected to investigate diabetes might later be used to study ancestry, schizophrenia or population migration. Whether the secondary use is permissible depends on the original consent, applicable law, ethics review and the nature of the new research.

Where the new purpose falls outside the original permission, researchers may need renewed consent, an authorised legal basis or an ethics-approved exception where one is available. Ethics committee approval alone does not necessarily cure a lack of legally required consent.

D. Group harms and genetic discrimination

Genomic studies may reveal information about a family, indigenous community or population, even where individual participants are not named. A study can therefore cause stigma, social exclusion or cultural harm.

Individual consent may not fully address these collective risks. Community engagement, culturally appropriate consultation and group-level risk assessment can be important additional safeguards.

However, community approval does not ordinarily replace each participant's individual consent where individual consent is required.

E. Commercialisation and conflicts of interest

Genomic research may lead to patented inventions, diagnostic tests, pharmaceutical products or commercially licensed datasets. Participants should not be misled about material commercial interests or the intended scope of data sharing.

The legal question is not whether every possible future profit must be predicted. It is whether material information relevant to the participant's decision was properly disclosed and whether the proposed use falls within the authorised scope.

5. Important case laws

The following cases illustrate the legal principles relevant to broad and specific consent. Some concern tissue research or medical consent rather than a direct judicial comparison of genomic-consent models. Their relevance must therefore be understood in context.

Case 1: Havasupai Tribe v. Arizona Board of Regents (2008)

Arizona Court of Appeals, 220 Ariz. 214 (2008)

Facts: Members of the Havasupai Tribe provided blood samples in connection with research into diabetes. Researchers subsequently used the samples for additional studies, including research into schizophrenia and population migration, which the participants alleged fell outside the consent they had given.

Legal issue: Whether the use and distribution of blood samples for research unrelated to the originally understood purpose could support legal claims.

Decision and outcome: The Arizona Court of Appeals reversed and remanded on a procedural issue involving the adequacy of the Tribe's notice of claim. The litigation later settled. It did not produce a final appellate ruling establishing a universal rule that all secondary genomic research requires fresh consent.

Justia Law+1

Legal significance:

A participant's understanding of the original research purpose matters.

Broad wording should not be treated as automatically authorising every conceivable secondary use.

Genetic research can affect cultural and religious interests at the community level.

Institutions should document the permitted purposes, sharing arrangements and restrictions associated with each sample.

Principle: The case is a leading warning about purpose limitation and trust in genetic research. It is particularly relevant where a consent form describes a disease-specific project but researchers later pursue substantially different questions.

Case 2: Moore v. Regents of the University of California (1990)

Supreme Court of California, 51 Cal. 3d 120, 793 P.2d 479

Facts: John Moore underwent medical treatment, during which his tissue was removed. His physician allegedly failed to disclose research and economic interests connected with Moore's cells, which were later used in developing a commercially valuable cell line.

Legal issue: Whether nondisclosure of material research and financial interests could support claims based on informed consent and breach of fiduciary duty.

Decision: The court held that Moore's allegations could support claims against his physician for breach of fiduciary duty and lack of informed consent. It rejected his conversion claim concerning the excised cells.

California Supreme Court Resources+1

Legal significance:

Consent to medical treatment is not necessarily consent to every subsequent research or commercial use.

Material conflicts of interest can be relevant to informed consent.

Research institutions should record the limits of permission attached to biological materials.

Application to genomics: If a patient consents to clinical sequencing to guide treatment, that does not automatically mean the patient has authorised every later commercial use of the sequence data.

The case does not establish that all commercial research requires a separate consent form. Rather, it highlights the importance of disclosing material facts and obtaining valid permission for the proposed use.

Case 3: Greenberg v. Miami Children's Hospital Research Institute (2003)

United States District Court, Southern District of Florida, 264 F. Supp. 2d 1064

Facts: Families affected by Canavan disease contributed tissue, information and substantial efforts toward research into the condition. A researcher isolated the relevant gene, and a patent and licensing arrangements followed.

Legal issue: Whether donors and supporting organisations could establish claims based on lack of informed consent, breach of fiduciary duty, conversion and unjust enrichment.

Decision: The court dismissed several claims, including the informed-consent claim, but allowed an unjust-enrichment claim to proceed on the facts pleaded.

PubMed+1

Legal significance:

Donating samples for research does not automatically resolve every dispute about ownership, benefit-sharing or later commercialisation.

The existence of commercial gain does not, by itself, establish a legal entitlement to compensation.

The parties' actual relationship, representations and contributions can matter.

Researchers should explain relevant commercialisation arrangements and the intended scope of research.

Application: A broad genomic consent process should clearly address whether samples or datasets may contribute to commercially developed diagnostics, medicines or other products, rather than leaving participants with a materially misleading impression.

Case 4: Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)

Supreme Court of India, (2017) 10 SCC 1; 2017 INSC 801

Facts: The Supreme Court considered whether privacy is constitutionally protected in India.

Decision: A nine-judge bench recognised privacy as a fundamental right protected by the Constitution, including under Article 21 and the freedoms in Part III. The judgment identified legality, legitimate state purpose and proportionality as central considerations when assessing an invasion of privacy.

Indian Kanoon+1

Legal significance for genomics:

Genetic information can engage bodily privacy, informational privacy and personal autonomy.

State access to or use of genomic data must satisfy applicable constitutional and statutory requirements.

The judgment supports a rights-based approach to the collection, retention and disclosure of sensitive personal information.

Limitation: Puttaswamy did not directly decide whether broad consent is sufficient for secondary genomic research. Its constitutional principles provide a framework for evaluating privacy intrusions; the precise outcome depends on the facts and applicable law.

Case 5: Samira Kohli v. Dr. Prabha Manchanda (2008)

Supreme Court of India, (2008) 2 SCC 1

Facts: The dispute concerned the scope of consent given for medical treatment and a procedure performed beyond what the patient had authorised.

Legal principle: The Supreme Court emphasised the importance of informed consent and distinguished consent to one medical procedure from consent to an additional or materially different procedure, subject to recognised exceptions such as a genuine emergency.

Application to genomics: Permission for one clinical or research activity should not automatically be treated as permission for an unrelated activity. For example, consent to diagnostic testing is not necessarily consent to participation in a separate genetic research study.

Qualification: This is a medical-consent decision, not a ruling on genomic biobanks or broad research consent specifically. Its value lies in the general principle that consent must correspond to the activity being undertaken.

Case 6: Cobbs v. Grant (1972)

Supreme Court of California, 8 Cal. 3d 229

Principle: The court explained the importance of informed consent and the patient's right to decide whether to undergo medical treatment.

Application: Genomic researchers should provide information material to the participant's decision rather than rely on a signed form alone. A consent process should make the proposed activity, its significant risks and the participant's options understandable.

Limitation: The case concerned medical treatment rather than broad genomic research consent. It supports the general doctrine of informed consent rather than determining the scope of future research authorisations.

6. Indian legal and regulatory framework

India's position is especially important because genomic research involves both constitutional privacy rights and ethical requirements governing research with human participants.

A. ICMR National Ethical Guidelines, 2017

The Indian Council of Medical Research's National Ethical Guidelines for Biomedical and Health Research Involving Human Participants recognise multiple approaches to consent, including broad consent, specific consent, tiered consent and consent with provisions for withdrawal or re-consent. They also address future research, biobanking, confidentiality, commercial value and benefit-sharing.

Indian Council of Medical Research+1

These guidelines support a proportionate approach:

Broad consent can be appropriate for future use of samples and datasets, subject to ethical review and adequate safeguards.

Specific consent is appropriate where the proposed research requires a more focused authorisation.

Participants should be informed about the possibility of future use, sample sharing and relevant commercial interests.

Researchers must consider whether renewed consent or an ethics-approved waiver is appropriate for secondary research.

Community consultation may be necessary for population-based research, but it does not substitute for individual consent when required.

The guidelines are an important ethical framework, but they should not be confused with a comprehensive statute specifically governing every aspect of genomic data ownership and secondary use.

B. Constitutional privacy under Article 21

The Puttaswamy judgment establishes that privacy is a fundamental right in India. This provides a constitutional foundation for scrutinising unjustified intrusions into personal and informational privacy.

For genomic research, the relevant questions may include whether data collection or disclosure is legally authorised, whether the purpose is legitimate and whether the interference is proportionate.

However, the judgment does not mean that every genomic research activity requires fresh, project-specific consent. That conclusion depends on the applicable legal framework and circumstances.

C. Digital Personal Data Protection Act, 2023

Section 6 of the Digital Personal Data Protection Act, 2023, provides for consent that is free, specific, informed, unconditional and unambiguous, given through clear affirmative action and tied to a specified purpose.

Commencement matters: Under the Gazette notification of 13 November 2025, the main consent provisions in Section 6(1)–(8) and Section 6(10) are scheduled to commence 18 months after publication, on 13 May 2027. Section 6(9), concerning Consent Managers, is scheduled to commence after one year, on 13 November 2026. Therefore, as of 29 October 2026, the substantive Section 6 consent requirements are not yet in force under that commencement schedule.

eGazette+1

When the substantive provisions commence, the requirement that consent relate to a specified purpose will be important when determining whether a broad genomic authorisation sufficiently describes the intended processing.

The Act's application and exemptions must also be considered. It should not be assumed that every research activity involving every type of biological sample is governed in exactly the same way.

For a present-day Indian research project, investigators should assess the applicable existing laws, ICMR guidance, institutional ethics requirements and relevant data-protection obligations rather than relying solely on future commencement provisions.

7. Practical examples

Scenario A: Genomic biobank

Broad consent may be suitable

A hospital establishes a biobank to support future research into inherited disorders and other specified health conditions. Participants are told about storage, controlled access, possible data sharing and the governance process for future studies.

Legal assessment: Broad consent may be defensible if the scope is understandable, future uses remain within the permitted framework, and applicable ethical and legal requirements are met.

Scenario B: New, sensitive research purpose

Further review needed

Samples originally collected for diabetes research are later proposed for research into ancestry, psychiatric disorders or another sensitive subject.

Legal assessment: Researchers should determine whether the new study falls within the original consent, whether additional consent is required and whether community-level harms or other ethical issues arise.

Scenario C: Commercial licensing

A research organisation plans to share genomic data with a biotechnology company developing a commercial diagnostic product.

Legal assessment: Researchers should assess whether the original consent adequately covered the proposed commercial use and sharing arrangement, disclose material information and meet applicable privacy, ethics and contractual requirements.

Scenario D: Re-identification risk

A dataset has had names and addresses removed, but researchers want to combine it with other datasets that could reveal participant identities.

Legal assessment: Removing direct identifiers does not necessarily eliminate privacy risk. Access controls, linkage restrictions, security measures and a fresh assessment of the authorised purpose may be necessary.

8. Recommended legal framework for genomic research

A robust governance system should not depend on the consent form alone. A practical model combines consent, ethics review, data security and continuing oversight.

9. Which consent model is legally preferable?

There is no universally superior model.

Specific consent is generally preferable when a study involves a clearly defined, sensitive or high-risk purpose, a materially different use, or an intervention whose consequences can be explained in advance.

Broad consent can be preferable when the purpose is to establish a long-term research resource, future scientific questions are uncertain, and the project operates within a clearly described research domain with strong independent oversight.

A tiered model often offers a useful compromise. Participants can authorise certain future research categories while retaining the ability to refuse others, subject to the available system and applicable law.

For example, a participant might permit future cancer-genomics research, allow controlled sharing with academic institutions, and separately choose whether commercial research is permitted. Such choices must be implemented meaningfully rather than presented as nominal options.

10. Conclusion

The central legal issue in broad consent versus specific consent in genomics is whether a participant has given meaningful permission for the particular use of their biological material and genetic information.

The cases of Havasupai, Moore and Greenberg illustrate the risks of exceeding donor expectations, failing to disclose material interests and treating the contribution of biological samples as resolving every later legal question. Puttaswamy supplies an important constitutional privacy framework for India, while Samira Kohli and Cobbs illuminate the general doctrine of informed consent.

The strongest approach is proportionate consent combined with continuing governance: use broad consent for appropriately bounded future research, specific consent when the circumstances demand it, and renewed consent where required by law or justified by a material change in purpose or risk.

For further study, a useful next step is to compare the ICMR guidelines, the phased commencement of India's DPDP Act and the leading cases in a jurisdiction-by-jurisdiction legal research table. This helps distinguish binding law from ethical guidance and persuasive case law.