Civil Liberties Limits on Bio-Surveillance

1. Introduction

Civil liberties limits on bio-surveillance refer to the constitutional, legal, and ethical restrictions imposed on government authorities, healthcare institutions, biotechnology companies, and research organisations when collecting, processing, monitoring, and analysing biological information about individuals or populations.

Bio-surveillance involves the systematic monitoring of biological characteristics, health conditions, genetic information, immune responses, infectious diseases, physiological activities, and other biological indicators for public-health, scientific, security, or administrative purposes.

Modern bio-surveillance technologies include:

Genetic and genomic surveillance systems.

Biometric identification and facial recognition technologies.

Continuous monitoring of physiological conditions.

Digital health records and disease-tracking platforms.

Population-wide infectious disease monitoring.

DNA databases and genetic profiling.

Wearable devices that collect biological information.

AI-based systems predicting individual health risks.

Although these technologies can improve disease prevention, epidemic control, and healthcare planning, unrestricted surveillance can threaten fundamental rights, including privacy, personal liberty, bodily autonomy, equality, freedom of movement, and freedom of expression.

Therefore, civil liberties limits are necessary to ensure that biological information is not collected or used arbitrarily. The fundamental principle is that public-health protection must remain consistent with constitutional safeguards and individual human dignity.

2. Meaning and Scope of Bio-Surveillance

Bio-surveillance is broader than ordinary medical monitoring because it may involve collecting biological information from entire populations rather than only from patients seeking treatment.

Its major forms include:

A. Genetic Surveillance

This involves collecting and analysing DNA, genetic sequences, inherited characteristics, and genomic information to identify diseases, biological relationships, or population-level genetic patterns.

B. Immunological Surveillance

This involves monitoring antibodies, immune responses, vaccination status, and biological indicators associated with infectious diseases.

C. Biometric Surveillance

It involves monitoring fingerprints, facial characteristics, iris patterns, and other physiological identifiers for identification and verification.

D. Epidemiological Surveillance

This involves monitoring disease outbreaks, infection rates, population immunity, and transmission patterns.

E. Continuous Biological Monitoring

Wearable devices and connected medical equipment may collect information concerning heart rate, body temperature, oxygen saturation, sleep patterns, and other physiological indicators.

F. Predictive Bio-Surveillance

Artificial intelligence systems may analyse biological information to predict disease susceptibility, identify health risks, or classify individuals according to estimated medical conditions.

Each category creates different legal risks, particularly when biological information is collected without meaningful consent or retained beyond its legitimate purpose.

3. Constitutional Foundations of Civil Liberties

In India, constitutional protection against excessive bio-surveillance primarily arises from the following provisions.

Article 14 – Right to Equality: Government surveillance must not be arbitrary, discriminatory, or based on unreasonable classifications. Genetic or biological profiling should not create unjustified discrimination against particular individuals or communities.

Article 19 – Fundamental Freedoms: Excessive surveillance may discourage individuals from exercising freedom of speech, association, movement, and other protected freedoms. Restrictions must satisfy the constitutional requirements applicable to the relevant freedom.

Article 21 – Right to Life and Personal Liberty: This provision protects privacy, dignity, autonomy, and personal liberty. Unauthorised collection and misuse of genetic or medical information may violate these protections.

Article 20(3) – Protection Against Self-Incrimination: Compulsory collection of biological evidence may raise constitutional questions where it involves testimonial compulsion. However, the Supreme Court has distinguished physical evidence, such as fingerprints and DNA samples, from compelled testimonial statements.

Together, these constitutional provisions establish limits on the collection, storage, sharing, and use of biological information by public authorities.

4. Important Judicial Decisions and Case Laws

A. Justice K.S. Puttaswamy (Retd.) v. Union of India (2017) 10 SCC 1

This is the most important Indian judgment concerning privacy and government surveillance.

The Supreme Court, through a nine-judge Constitution Bench, unanimously recognised privacy as a fundamental right under Article 21 and other freedoms guaranteed by Part III of the Constitution.

The judgment recognised informational privacy, bodily autonomy, individual dignity, and personal control over information.

Relevance to bio-surveillance: Government authorities cannot collect and process genetic information, medical records, or biometric data without satisfying constitutional requirements. Surveillance must have legal authority, a legitimate purpose, and proportionality.

B. K.S. Puttaswamy v. Union of India (Aadhaar Judgment), (2019) 1 SCC 1

The Supreme Court examined the constitutional validity of the Aadhaar framework, particularly the collection, storage, and use of biometric and demographic information.

The Court upheld the Aadhaar framework subject to important limitations and struck down or restricted certain provisions, including aspects of private-sector access and mandatory linking.

Relevance to bio-surveillance: Large-scale collection of biometric information requires statutory safeguards, purpose restrictions, and protection against unauthorised disclosure. The judgment demonstrates that technological convenience cannot automatically justify unrestricted biological identification.

C. Selvi v. State of Karnataka (2010) 7 SCC 263

The Supreme Court considered the legality of involuntary narco-analysis, polygraph examinations, and brain electrical activation profile tests.

The Court held that involuntary administration of these techniques violated Article 20(3) and Article 21.

It recognised the importance of mental privacy, bodily integrity, and protection against compelled self-incrimination.

Relevance to bio-surveillance: Authorities cannot automatically compel individuals to undergo invasive neurological or physiological monitoring. Biological surveillance involving involuntary extraction or analysis of personal information must respect constitutional safeguards.

D. District Registrar and Collector v. Canara Bank (2005) 1 SCC 496

The Supreme Court considered statutory powers allowing government officials to inspect and seize private documents.

The Court recognised that privacy protections extend to confidential records and that governmental access must be supported by lawful authority.

Relevance to bio-surveillance: Medical records, genetic databases, laboratory reports, and confidential biological information should not be subjected to unrestricted governmental inspection.

E. Kharak Singh v. State of Uttar Pradesh (1964) 1 SCR 332

The Supreme Court examined police surveillance practices involving domiciliary visits and monitoring of suspected individuals.

The judgment recognised that intrusive surveillance could interfere with personal liberty. Its privacy analysis was subsequently reconsidered in Puttaswamy.

Relevance to bio-surveillance: Continuous monitoring of individuals through biological tracking systems may create restrictions on personal freedom even when no physical restraint is imposed.

F. R. Rajagopal v. State of Tamil Nadu (1994) 6 SCC 632

The Supreme Court recognised the right to privacy and considered restrictions on the publication of private information without consent.

The judgment established important principles concerning the protection of private personal information against unauthorised disclosure.

Relevance to bio-surveillance: Governments and biotechnology companies must protect confidential genetic, medical, and physiological information from unauthorised publication or disclosure.

National Digital Library of India+3

5. Legal Limitations on Government Bio-Surveillance

Constitutional jurisprudence establishes several important limitations.

A. Legality

Bio-surveillance must be authorised by valid legislation or another legally recognised source of authority. Government departments cannot introduce intrusive biological monitoring merely through administrative convenience.

B. Legitimate State Objective

Surveillance must serve a legitimate purpose, such as preventing serious infectious disease outbreaks, protecting public health, or investigating legally recognised threats.

C. Necessity and Proportionality

The surveillance method must be reasonably necessary for the stated objective. Authorities should consider less intrusive alternatives before collecting highly sensitive biological information.

D. Purpose Limitation

Biological information collected for medical treatment or disease prevention should not automatically be used for policing, employment screening, commercial profiling, or unrelated governmental purposes.

E. Data Minimisation

Authorities should collect only the biological information genuinely required to achieve the identified objective.

F. Storage and Retention Restrictions

Biological databases should have appropriate retention periods. Personal information should not be stored indefinitely without lawful justification.

G. Independent Oversight

Independent regulatory supervision, security audits, judicial review, and effective complaint mechanisms should be available to prevent arbitrary surveillance.

These principles are particularly important where AI systems analyse genetic or immunological information to classify individuals according to predicted health conditions.

6. Data Protection and Bio-Surveillance Under Indian Law

The Digital Personal Data Protection Act, 2023 establishes a statutory framework for processing digital personal data. It is relevant to bio-surveillance systems that collect identifiable medical, genetic, and physiological information.

Important principles include:

Consent and transparency: Individuals should receive appropriate information about the processing of their personal data, subject to applicable statutory exceptions.

Purpose limitation: Personal data should be processed for legally permitted purposes.

Data security: Organisations must adopt appropriate safeguards against unauthorised access and disclosure.

Individual rights: The legislation provides rights concerning access to information about processing, correction, erasure, and grievance redressal, subject to its provisions.

Accountability: Data fiduciaries have statutory responsibilities concerning personal data processing.

An important legislative development is the notification of the Digital Personal Data Protection Rules, 2025. However, commencement is phased: the principal data-processing obligations under Sections 3–17 of the Act are scheduled to commence 18 months after publication of the November 2025 notification. Therefore, they should not be treated as fully operative on 4 November 2026.

India Code+3

The constitutional right to privacy under Article 21 remains independently applicable.

7. Civil Liberties Risks Associated with Bio-Surveillance

Several significant civil liberties concerns arise from the expansion of biological monitoring.

A. Violation of bodily autonomy

Compulsory collection of blood, DNA, saliva, and other biological samples may interfere with individual bodily autonomy, particularly where collection is invasive or unsupported by law.

B. Genetic discrimination

Employers, insurance companies, and public authorities may misuse genetic information to classify individuals according to inherited disease risks or biological characteristics.

C. Mass surveillance

Population-wide biological monitoring may create a system in which individuals are continuously observed without adequate justification.

D. Freedom of movement

Digital health certificates and biological identification systems may restrict access to public spaces, employment, or transportation without sufficient legal safeguards.

E. Discrimination and exclusion

Predictive bio-surveillance may disproportionately affect vulnerable communities and individuals with particular genetic or medical characteristics.

F. Commercial exploitation

Private biotechnology companies may use biological information for profiling, commercial research, or developing predictive health products without appropriate legal authority.

8. Public Health Emergencies and Limits on Individual Freedom

During pandemics and serious infectious disease outbreaks, governments may require certain forms of biological surveillance to protect public health.

Examples include:

Mandatory reporting of specified infectious diseases.

Testing and monitoring of individuals in legally prescribed circumstances.

Contact tracing and outbreak investigation.

Monitoring vaccination coverage.

Genomic sequencing of pathogens.

Temporary quarantine and isolation measures.

However, public-health emergencies do not eliminate constitutional protections.

Any restriction must have a lawful basis, pursue a legitimate public-health objective, and satisfy necessity and proportionality.

Surveillance measures should also be reviewed periodically. Emergency biological databases should not automatically become permanent population-monitoring systems.

The legal framework should distinguish between monitoring infectious pathogens for public-health purposes and collecting identifiable genetic information from individuals.

9. Recommendations for Strengthening Civil Liberties Protection

A comprehensive legal framework for bio-surveillance should incorporate the following safeguards:

Mandatory legislative authorisation: Intrusive biological surveillance should require clear legal authority.

Informed consent: Consent should be obtained wherever legally required, with appropriate safeguards against coercion.

Independent oversight: Specialised authorities should review sensitive genetic and immunological surveillance programmes.

Genetic privacy protection: Access to DNA databases should be strictly controlled.

Algorithmic transparency: AI-based biological classification systems should be subject to independent assessment.

Non-discrimination: Biological information should not be used for arbitrary exclusion from employment, education, healthcare, or public services.

Limited retention: Authorities should establish clear rules for deleting biological information when its lawful purpose has expired.

Effective remedies: Individuals should have access to complaints mechanisms, judicial remedies, and compensation where legally available.

Emergency safeguards: Temporary public-health surveillance measures should be subject to periodic review and appropriate termination requirements.

10. Conclusion

Civil liberties limits on bio-surveillance are essential to maintaining a balance between technological advancement, public-health protection, and constitutional freedom.

The expansion of genetic databases, biometric identification, immunological monitoring, and AI-driven biological prediction creates significant challenges for privacy, bodily autonomy, dignity, equality, and personal liberty.

Indian constitutional jurisprudence, particularly Justice K.S. Puttaswamy v. Union of India, Selvi v. State of Karnataka, and District Registrar v. Canara Bank, provides an important foundation for controlling excessive biological surveillance.

Article 21 protects individuals against unjustified interference with their privacy and personal liberty, while Articles 14, 19, and 20(3) provide additional safeguards in appropriate circumstances.

Ultimately, bio-surveillance should operate under clear legislation, proportionality requirements, data-protection safeguards, independent supervision, and effective judicial remedies. Scientific progress and public-health security must not become justifications for unrestricted governmental or commercial control over an individual's biological identity.