Cross-Border Telemedicine Genomics Governance.
1. Introduction
Cross-border telemedicine genomics governance refers to the legal, regulatory, ethical and institutional framework governing the provision of genomic healthcare services across national borders through digital communication technologies.
It involves situations in which a patient located in one country obtains genomic healthcare services from a healthcare provider, laboratory, genetic counsellor, biotechnology company or telemedicine platform situated in another country.
Examples include:
An Indian patient consulting a genetic specialist located in the United States through video conferencing.
A patient in Australia sending a DNA sample to a laboratory in Germany for whole-genome sequencing.
A foreign genomic laboratory transmitting genetic test results to an Indian hospital.
A patient receiving cross-border genetic counselling concerning hereditary cancer risks.
An international telemedicine platform providing pharmacogenomic recommendations based on a patient's genetic profile.
A foreign biotechnology company using genomic data to predict disease susceptibility for patients in another jurisdiction.
The subject combines several branches of law:
International healthcare regulation.
Medical licensing and professional responsibility.
Data protection and genetic privacy.
Medical negligence and professional liability.
Informed consent and patient autonomy.
Laboratory accreditation and diagnostic reliability.
Cross-border data transfers.
Artificial intelligence and algorithmic accountability.
International jurisdiction and enforcement of judgments.
Central legal problem: Which country's laws govern a genomic consultation when the patient, healthcare professional, laboratory, digital platform and genetic database are situated in different countries?
This question is particularly important because genetic information is not ordinary medical information. It can reveal inherited characteristics, disease predispositions, family relationships, ancestry and information about biological relatives who may never have consented to the testing.
2. Meaning and scope of cross-border telemedicine genomics
Cross-border telemedicine genomics has five principal components.
| Component | Legal significance |
|---|---|
| Remote genomic consultation | Medical licensing and professional jurisdiction |
| International genetic testing | Laboratory regulation and diagnostic standards |
| Genetic data transmission | Privacy and international data-transfer law |
| Genomic interpretation | Professional negligence and scientific reliability |
| Digital genomic recommendations | AI accountability and medical-device regulation |
The governance framework must regulate the entire process rather than treating the online consultation as an isolated medical transaction.
For example, a patient may consult a doctor in Country A, provide a DNA sample to a laboratory in Country B, store the results on a cloud server in Country C and receive an AI-generated treatment recommendation from a company in Country D.
Each stage may attract different legal obligations.
3. Jurisdiction and applicable law
Jurisdiction is one of the most difficult issues in cross-border telemedicine genomics.
Three principal jurisdictions may become relevant.
A. Patient-country jurisdiction
The country where the patient physically receives the consultation may regulate:
Medical practice within its territory.
Patient protection.
Consumer rights.
Medical advertising.
Genetic testing services.
Privacy and sensitive personal information.
Local healthcare standards.
B. Provider-country jurisdiction
The country where the doctor or genetic specialist is professionally established may regulate:
Professional registration.
Medical qualifications.
Ethical obligations.
Disciplinary proceedings.
Clinical standards.
Professional indemnity.
C. Laboratory-country jurisdiction
The country where genetic testing takes place may regulate:
Laboratory accreditation.
Sample handling.
Biosafety.
Diagnostic validation.
Quality control.
Research use of biological materials.
A contractual choice-of-law clause cannot automatically eliminate mandatory patient-protection laws applicable in another jurisdiction.
4. Medical licensing and professional regulation
The most important issue is whether a doctor or genetic counsellor can lawfully provide medical services to a patient located in another country without obtaining registration in the patient's country.
A. Professional licensing
Medical licensing is generally territorial. A medical professional's registration in one country does not automatically confer authority to practise medicine in every other country.
For example:
An Indian registered medical practitioner may provide telemedicine within the applicable Indian regulatory framework.
A US-licensed physician may be subject to state-specific telehealth licensing requirements when treating patients in another US state.
An Australian medical practitioner must comply with applicable Australian professional registration and conduct requirements.
A foreign genetic specialist may need to comply with the professional requirements of the country where the service is legally treated as being provided.
Genetic counselling also presents a classification problem. Some countries regulate genetic counsellors as a distinct professional category, while others regulate particular activities through medical, laboratory or allied-health professional rules.
B. Indian legal position
India's Telemedicine Practice Guidelines, 2020, issued under the professional regulatory framework, prescribe requirements concerning:
Identification of the doctor and patient.
Establishment of a doctor-patient relationship.
Informed consent.
Appropriate communication technology.
Clinical evaluation.
Medical records.
Confidentiality and privacy.
Professional negligence and liability.
The guidelines do not create a general worldwide licence for Indian doctors or automatically authorise foreign doctors to practise in India.
For genomic teleconsultations, a registered medical practitioner must exercise independent professional judgment and should not rely exclusively on automated genetic interpretations where clinical assessment or specialist referral is necessary.
Press Information Bureau+1
C. European Union position
The EU has a specific legal framework under Directive 2011/24/EU on patients' rights in cross-border healthcare.
The general distinction is between healthcare actually provided in the country where the patient receives it and telemedicine, for which the relevant provider-establishment rule may apply.
This distinction became particularly important in the Court of Justice of the European Union's 2025 ruling discussed below.
5. Genetic data protection and international transfers
Genetic data is among the most sensitive categories of personal information because it can reveal information about both the individual and their biological relatives.
Cross-border telemedicine genomics may involve the transfer of:
DNA sequences.
Whole-genome sequencing results.
Exome sequencing results.
Carrier-screening reports.
Pharmacogenomic information.
Hereditary disease information.
Familial cancer-risk assessments.
Ancestry and biological relationship information.
Genomic interpretations generated by artificial intelligence.
A. European Union: GDPR
The General Data Protection Regulation (GDPR) provides an important model for genetic-data governance.
Article 4(13) expressly includes genetic data within personal data relating to inherited or acquired genetic characteristics that provide unique information about physiology or health.
Article 9 generally prohibits processing genetic and health data unless a recognised exception applies.
Relevant provisions include:
| GDPR provision | Legal significance |
|---|---|
| Article 5 | Purpose limitation, minimisation and accuracy |
| Article 6 | Lawful basis for processing |
| Article 9 | Special-category personal data |
| Article 13–14 | Transparency and information duties |
| Article 22 | Certain decisions based solely on automated processing |
| Article 32 | Security of processing |
| Article 35 | Data protection impact assessment |
| Articles 44–49 | International data transfers |
A genomic telemedicine platform must therefore establish an appropriate lawful basis, satisfy the applicable special-category condition, provide transparency and implement appropriate security measures.
International transfer restrictions
Where genomic data is transferred outside the European Economic Area, Chapter V of the GDPR becomes relevant.
Transfers may require:
An adequacy decision.
Standard contractual clauses.
Binding corporate rules.
An applicable statutory derogation.
Additional safeguards where necessary.
A patient's consent to genetic testing does not automatically satisfy every legal requirement for international data transfers.
European Commission
B. India: Digital Personal Data Protection Act, 2023
India's Digital Personal Data Protection Act, 2023, is relevant to digital processing of personal data in genomic telemedicine.
Its relevance includes:
Notice and consent requirements, subject to applicable statutory provisions.
Duties of data fiduciaries.
Security safeguards.
Breach-related obligations.
Rights of data principals.
Cross-border transfer restrictions under Section 16.
Regulatory oversight and penalties.
A significant distinction must be recognised: unlike the GDPR, the DPDP Act does not establish a separate statutory category called genetic data or special-category personal data.
However, genomic information remains personal data where it relates to an identifiable individual.
The Act's territorial scope and applicable commencement notifications must also be considered when analysing a particular cross-border arrangement.
C. Genetic information and family privacy
Genetic data creates a distinctive problem: one person's test may reveal information about several biological relatives.
For example, a patient undergoing hereditary breast-cancer testing may discover a pathogenic BRCA1 or BRCA2 variant. The result may have implications for siblings, children and other family members.
This creates competing legal interests:
Individual confidentiality.
Family members' interest in learning about inherited risks.
The patient's right to control disclosure.
The healthcare professional's duty to prevent foreseeable harm.
Public-health and research interests.
The law does not create an unrestricted right for relatives to access another person's genomic information.
6. Informed consent in cross-border genomic telemedicine
Informed consent is more complex in genomics than in ordinary telemedicine.
A patient should understand not merely that a genetic test will be conducted but also what the test may reveal and how the information will be used.
A legally adequate consent framework should address:
A. Clinical consent
Nature and purpose of genetic testing.
Expected clinical benefits.
Limitations of the test.
Possibility of false-positive and false-negative results.
Uncertain or inconclusive findings.
Incidental findings.
Alternative diagnostic methods.
B. Data-processing consent and legal basis
Collection and storage of genomic data.
Identity of the laboratory.
Country of data processing.
International data transfers.
Retention period.
Access by third-party service providers.
Secondary research and commercial use.
C. Family-related consent
Potential implications for biological relatives.
Procedures for communicating hereditary risks.
Limits of confidentiality.
Whether family members may be contacted.
D. Future-use consent
Reanalysis when scientific knowledge changes.
Use of anonymised or pseudonymised genomic information.
Biobank storage.
Research participation.
AI model development and validation.
A broad clause authorising all future uses of a patient's genome may be inadequate where the relevant purpose, risks and legal basis have not been properly explained.
7. Laboratory accreditation and diagnostic reliability
Cross-border genomic telemedicine depends heavily on the reliability of the laboratory performing the test.
A doctor may provide an accurate consultation but still deliver harmful advice if the underlying genetic report is scientifically unreliable.
Important regulatory considerations include:
Laboratory accreditation.
Analytical validity.
Clinical validity.
Clinical utility.
Sample identity and traceability.
Quality assurance.
Proficiency testing.
Variant classification standards.
Reporting of uncertain variants.
Reproducibility and confirmatory testing.
Relevant international frameworks include:
ISO 15189 for medical laboratory quality and competence.
ISO/IEC 17025 where applicable to testing and calibration laboratories.
US Clinical Laboratory Improvement Amendments (CLIA).
College of American Pathologists (CAP) accreditation.
EU In Vitro Diagnostic Medical Devices Regulation (IVDR), Regulation (EU) 2017/746.
These instruments do not have identical legal status. Some establish statutory requirements, while others operate as accreditation or quality standards.
Important distinction: A laboratory's accreditation in its home country does not automatically establish that its genetic test is authorised for clinical use in every destination country.
8. Important case laws
The following judicial decisions provide important principles for governing cross-border genomic telemedicine. Some directly concern telemedicine, while others establish related principles of privacy, consent, bodily autonomy, medical negligence and genetic research.
Case 1. UJ v Österreichische Zahnärztekammer (2025)
Directly relevant to cross-border telemedicine
Court: Court of Justice of the European Union.
Case number: C-115/24.
Judgment date: 11 September 2025.
Citation: ECLI:EU:C:2025:694.
Facts and legal issue:
The dispute concerned the legal classification of healthcare delivered through telemedicine in a cross-border treatment arrangement. The Court considered the relationship between the patient's location, the healthcare provider's establishment and the rules governing cross-border healthcare.
Judgment:
The Court clarified that telemedicine for the purposes of Directive 2011/24/EU involves healthcare supplied exclusively through information and communication technologies, at a distance, by a provider established in a Member State other than the patient's Member State of affiliation.
It also clarified that the healthcare provider's Member State of establishment is relevant for determining the applicable healthcare legislation for such telemedicine services.
Significance for genomic telemedicine:
This judgment is important when an EU-based genomic specialist provides remote consultation to a patient in another EU Member State.
It helps determine:
Which Member State's healthcare standards apply.
How cross-border telemedicine should be classified.
Whether the service falls within the Cross-Border Healthcare Directive.
Which professional and regulatory framework governs the remote service.
However, it does not resolve every issue concerning licensing, laboratory testing, genetic-data transfers or professional liability. Those questions may involve additional national and EU rules.
EUR-Lex+2
Case 2. Justice K.S. Puttaswamy (Retd.) v Union of India (2017)
Court: Supreme Court of India.
Citation: (2017) 10 SCC 1.
Facts and legal issue:
The case concerned whether the Constitution of India protects privacy as a fundamental right.
Judgment:
The Supreme Court unanimously recognised privacy as a fundamental right under Article 21 and other freedoms guaranteed by Part III of the Constitution.
The judgment recognised informational privacy, bodily autonomy and individual control over personal information as important dimensions of privacy.
Significance for genomic telemedicine:
Genomic information can expose deeply personal details about an individual's biological identity and health.
The principles in Puttaswamy are relevant to:
Unauthorised genomic-data disclosure.
Genetic surveillance.
Compulsory DNA collection.
Commercial exploitation of genetic information.
Unauthorised sharing with foreign laboratories.
Disclosure of hereditary disease information.
Automated profiling based on genomic characteristics.
The judgment provides a constitutional foundation for protecting genetic privacy in India.
Case 3. Samira Kohli v Dr. Prabha Manchanda (2008)
Court: Supreme Court of India.
Citation: (2008) 2 SCC 1.
Facts:
The case concerned medical treatment performed without obtaining sufficiently informed consent for the additional procedure.
Judgment:
The Supreme Court explained the requirements of valid informed consent. Consent must be real and informed, and the patient should receive adequate information about the nature and purpose of the proposed treatment, its benefits, risks and alternatives.
Significance for genomic telemedicine:
The decision is relevant where a genomic platform:
Conducts additional genetic testing without adequate consent.
Uses patient DNA for secondary research.
Discloses incidental genetic findings.
Provides pharmacogenomic recommendations.
Transfers biological samples to another country.
Uses genomic information for commercial purposes beyond the original clinical purpose.
The case supports the principle that consent to one medical procedure does not automatically authorise every subsequent medical or research use.
Case 4. Jacob Mathew v State of Punjab (2005)
Court: Supreme Court of India.
Citation: (2005) 6 SCC 1.
Facts:
The case concerned the criminal liability of medical professionals for alleged negligence.
Judgment:
The Supreme Court discussed the standard of medical negligence and the distinction between civil and criminal medical negligence.
For criminal liability, the Court emphasised the need for a sufficiently high degree of negligence rather than treating every error of professional judgment as a criminal offence.
Significance for genomic telemedicine:
The decision is relevant where a doctor:
Misinterprets a genetic variant.
Recommends inappropriate treatment based on genomic data.
Fails to refer a patient for confirmatory testing.
Relies uncritically on an unreliable foreign laboratory report.
Provides treatment without adequate clinical assessment.
A distinction must be maintained between civil negligence, professional misconduct and criminal negligence.
Case 5. Moore v Regents of the University of California (1990)
Court: Supreme Court of California, United States.
Citation: 51 Cal.3d 120; 793 P.2d 479.
Facts:
John Moore's biological materials were used for scientific research and commercial development without adequate disclosure of the physician's research and financial interests.
Judgment:
The Court recognised that the allegations could support claims involving breach of fiduciary duty and lack of informed consent. However, it rejected the conversion claim concerning ownership of the removed cells.
Significance for genomic telemedicine:
This case is particularly important for international genomic platforms.
Suppose a patient provides a DNA sample to a foreign laboratory for diagnosis, but the laboratory subsequently uses the material for commercial genomic research.
The legal questions include:
Was secondary use disclosed?
Was valid consent obtained?
Were commercial interests disclosed?
Did the healthcare professional breach fiduciary duties?
Does the applicable law recognise a property interest in the biological material?
The case does not establish a universal international rule of ownership over genetic data or biological samples.
Case 6. Greenberg v Miami Children's Hospital Research Institute (2003)
Court: United States District Court, Southern District of Florida.
Citation: 264 F. Supp. 2d 1064.
Facts:
The dispute involved families and organisations that contributed biological materials and information to research into Canavan disease. The dispute concerned the subsequent patenting and control of research discoveries.
Judgment:
The court addressed claims involving informed consent, fiduciary duties, unjust enrichment and property interests in research materials and discoveries.
Significance for genomic telemedicine:
The case highlights the legal difficulties associated with using patient-contributed genetic material for purposes beyond the original diagnostic arrangement.
It is relevant to:
Cross-border genomic research.
International biobanks.
Genetic sample ownership.
Commercial exploitation of genomic discoveries.
Research consent.
Patient expectations regarding benefit sharing.
It should not be interpreted as establishing a universal patient ownership right over all genetic discoveries.
Case 7. Association for Molecular Pathology v Myriad Genetics, Inc. (2013)
Court: Supreme Court of the United States.
Citation: 569 U.S. 576.
Facts:
The dispute concerned patent eligibility of isolated human genes, particularly BRCA1 and BRCA2.
Judgment:
The Supreme Court held that naturally occurring DNA segments are not patent-eligible merely because they have been isolated. It distinguished naturally occurring DNA from synthetically created complementary DNA (cDNA).
Significance for genomic telemedicine:
The decision is relevant to the intellectual-property governance of genomic diagnostic platforms.
It affects questions involving:
Genetic testing technologies.
Patent rights over diagnostic methods.
Access to genomic tests.
International licensing arrangements.
Commercialisation of genomic technologies.
It does not determine patient privacy rights or the legality of cross-border transmission of genetic information.
9. Medical negligence and cross-border liability
Medical negligence becomes complicated when the doctor, patient, laboratory and platform operate in different countries.
Consider this hypothetical situation:
An Indian patient consults a genetic specialist in the United Kingdom. The specialist interprets a foreign laboratory's report incorrectly and recommends a medication that causes serious injury.
Potential defendants may include:
The foreign genetic specialist.
The genomic laboratory.
The telemedicine platform.
The prescribing healthcare professional.
The company responsible for the genetic interpretation software.
A. Standard of care
The standard of care should consider:
Qualifications of the specialist.
Accepted clinical guidelines.
Scientific validity of the genetic test.
Quality of laboratory interpretation.
Availability of confirmatory testing.
Adequacy of clinical history.
Limitations of remote assessment.
Whether an in-person examination was necessary.
B. Causation
The claimant must establish an appropriate causal connection between the alleged breach and the injury.
Genomic medicine creates special causation problems because disease outcomes may depend on multiple factors, including:
Genetic predisposition.
Environmental exposure.
Lifestyle.
Other medications.
Family history.
Incomplete penetrance.
Variable expressivity.
For example, a patient may carry a disease-associated genetic variant but never develop the disease. A subsequent injury cannot automatically be attributed to the genetic consultation.
C. Vicarious and platform liability
A telemedicine company may face liability depending on its role.
A platform that merely provides communication infrastructure may have a different legal position from one that:
Employs doctors.
Selects genetic specialists.
Controls clinical protocols.
Generates diagnostic recommendations.
Markets tests as clinically validated.
Determines treatment pathways.
Contractual disclaimers cannot automatically exclude liability for negligent professional services or statutory consumer protections.
10. Artificial intelligence in cross-border genomic telemedicine
Artificial intelligence is increasingly used in genomic healthcare to interpret genetic variants, predict disease susceptibility and recommend treatment.
AI-based genomic services create additional regulatory questions.
Major areas of governance:
Algorithmic accuracy: Whether the system has been adequately validated.
Clinical transparency: Whether the doctor can understand the basis of a recommendation.
Bias: Whether the model performs differently across populations.
Human supervision: Whether a qualified professional reviews clinically significant recommendations.
Data provenance: Whether training data were lawfully obtained.
Cybersecurity: Whether genomic information is protected against unauthorised access.
Accountability: Whether responsibility lies with the developer, laboratory, doctor or platform.
A particularly serious problem is population bias.
A genomic algorithm trained predominantly on European ancestry datasets may perform less reliably for patients whose genetic backgrounds are underrepresented.
Consequently, an international genomic platform should establish population-specific validation and communicate uncertainty rather than presenting probabilistic results as definitive diagnoses.
The EU AI Act, Regulation (EU) 2024/1689, may also become relevant where genomic AI systems fall within its high-risk classifications, particularly when used as regulated medical-device components or in other specified high-risk contexts.
11. International regulatory frameworks
Cross-border genomic telemedicine is affected by several international instruments and national regulatory systems.
| Framework | Relevance |
|---|---|
| WHO Global Strategy on Digital Health 2020–2025 | Digital healthcare governance |
| GDPR | Genetic and health-data protection |
| EU Directive 2011/24/EU | Cross-border healthcare |
| EU Regulation 2017/746 (IVDR) | In-vitro diagnostic devices |
| EU AI Act 2024/1689 | AI governance |
| UNESCO Universal Declaration on the Human Genome and Human Rights, 1997 | Human genetic dignity and rights |
| UNESCO International Declaration on Human Genetic Data, 2003 | Genetic-data protection |
| Oviedo Convention, 1997 | Human rights and biomedicine, where applicable |
| Cartagena Protocol on Biosafety, 2000 | Relevant aspects of transboundary movement of living modified organisms, not ordinary clinical genomic reports |
An important distinction is that international declarations and guidelines do not necessarily create directly enforceable obligations. Their legal effect depends on their status, domestic implementation and applicable treaties.
12. Special legal position in Australia
Australia provides another important comparative framework.
The principal legislation and regulatory institutions include:
A. Privacy Act 1988 (Cth)
The Privacy Act regulates personal information, including sensitive health information and genetic information in relevant circumstances.
Its Australian Privacy Principles address collection, use, disclosure, security and overseas disclosure of personal information.
APP 8 is particularly relevant to overseas disclosure.
B. Health Practitioner Regulation National Law
This framework governs registration and professional conduct of regulated healthcare practitioners through the Australian National Registration and Accreditation Scheme.
C. Therapeutic Goods Act 1989 (Cth)
This legislation becomes relevant where genomic diagnostic software or associated products fall within the regulatory definition of therapeutic goods or medical devices.
D. National Pathology Accreditation Advisory Council
Its standards and accreditation framework are relevant to the quality and reliability of pathology services.
E. Gene Technology Act 2000 (Cth)
This legislation regulates dealings with genetically modified organisms. It should not be confused with a general law governing ordinary human genetic testing.
F. National Statement on Ethical Conduct in Human Research
This provides an important ethical framework for research involving human genomic information and biological samples.
13. Contractual governance of international genomic services
A cross-border genomic telemedicine agreement should clearly identify the responsibilities of all participating entities.
Important contractual provisions include:
| Contractual provision | Purpose |
|---|---|
| Jurisdiction clause | Identifies the agreed forum, subject to mandatory law |
| Choice-of-law clause | Determines applicable contractual law |
| Professional responsibility | Identifies clinical responsibilities |
| Laboratory warranty | Establishes testing and quality obligations |
| Data-processing agreement | Regulates processing and transfer |
| Confidentiality clause | Protects genomic information |
| Consent requirements | Defines authorised uses |
| Cybersecurity obligations | Protects against data breaches |
| Indemnification | Allocates specified financial risks |
| Dispute resolution | Provides mechanisms for resolving disputes |
A contract should also address the consequences of a laboratory error, an incorrect genomic interpretation, an unauthorised secondary use of DNA samples and a cybersecurity incident.
Importantly, contractual arrangements cannot override mandatory regulatory requirements or eliminate the rights of patients who are not parties to the contract.
14. Enforcement and regulatory accountability
Effective governance requires coordination among multiple regulatory authorities.
A. Medical regulators
Responsible for professional registration, clinical conduct and disciplinary proceedings.
B. Data protection authorities
Responsible for investigating unlawful processing, unauthorised disclosure and breaches of applicable privacy legislation.
C. Laboratory regulators
Responsible for diagnostic standards, laboratory quality and accreditation requirements.
D. Consumer protection authorities
Responsible for misleading genetic-test advertisements, unfair contractual terms and deceptive claims about diagnostic accuracy.
E. Courts and tribunals
Responsible for determining negligence, contractual liability, compensation, privacy violations and other legal disputes within their jurisdiction.
Major enforcement difficulties
Difficulty serving foreign healthcare providers.
Lack of cooperation between national regulators.
Conflicting privacy requirements.
Difficulty obtaining foreign laboratory records.
Enforcement of foreign judgments.
Uncertainty about the location of genomic databases.
Problems establishing causation in genomic negligence.
Differences in medical licensing systems.
International judicial cooperation, mutual legal assistance arrangements and applicable judgment-recognition rules may assist in resolving these difficulties.
15. Major governance challenges
The following are particularly significant unresolved or developing issues.
1. Fragmented jurisdiction
Different countries may regulate the consultation, laboratory testing and data processing separately.
2. Genetic discrimination
Employers, insurers or other organisations may misuse genomic predictions in decisions affecting individuals.
3. Familial confidentiality
One patient's genomic findings may reveal medically significant information about relatives.
4. Commercial exploitation
Foreign laboratories may use patient samples or genomic information for commercial research without adequately addressing the original consent arrangements.
5. Scientific uncertainty
A variant of uncertain significance should not be treated as a confirmed disease-causing mutation.
6. Digital exclusion
Patients without reliable internet access, adequate digital literacy or access to genetic counselling may be disadvantaged.
7. Algorithmic discrimination
Genomic prediction systems may perform unequally across populations.
8. Regulatory arbitrage
Companies may establish operations in jurisdictions with less demanding regulatory requirements while marketing services internationally.
9. Long-term data storage
Genomic information can remain scientifically and personally relevant for decades, creating difficulties concerning retention, deletion and future use.
10. Cross-border family disputes
Different countries may apply different standards concerning disclosure of hereditary disease risks to biological relatives.
16. Practical governance model for cross-border telemedicine genomics
A comprehensive governance framework should follow a ten-stage model.
Ten-stage regulatory governance framework
Patient identification and jurisdiction
Establish the patient's physical location, identity and applicable healthcare laws.
Professional verification
Verify the qualifications and registration of the doctor and genetic specialist.
Informed consent
Obtain meaningful consent for consultation, testing and data processing.
Laboratory verification
Check accreditation, test validation and quality assurance.
Sample-chain management
Maintain sample identity, traceability and secure international shipment.
Data-transfer compliance
Identify the destination countries, processors and lawful transfer mechanisms.
Clinical interpretation
Ensure qualified human review of significant genomic findings.
Patient communication
Explain findings, uncertainties, incidental results and available treatment options.
Liability allocation
Establish responsibility for medical errors, laboratory failures and platform misconduct.
Continuity and accountability
Provide follow-up, secure record retention, complaint mechanisms and regulatory cooperation.
17. Hypothetical case study
Facts:
An Indian woman consults a genetic specialist operating in the United States through an international telemedicine platform.
The specialist recommends hereditary cancer screening. The patient's DNA sample is transported to a laboratory in Germany. The laboratory identifies a potentially pathogenic genetic variant.
The results are transferred to a cloud server in another country. An AI platform then generates a recommendation for preventive surgery.
The patient undergoes surgery in India but later discovers that the genetic variant was incorrectly classified.
Legal questions:
| Legal issue | Applicable legal principles |
|---|---|
| Was the foreign specialist authorised to provide the service? | Medical licensing laws |
| Was the test properly validated? | Laboratory and diagnostic regulation |
| Was informed consent obtained? | Medical consent principles |
| Was international data transfer lawful? | Applicable privacy and transfer laws |
| Was the AI recommendation reliable? | Medical-device and AI regulation |
| Was the doctor negligent? | Medical negligence principles |
| Was the platform responsible? | Contractual, consumer and intermediary liability |
| Where can the patient sue? | Jurisdiction and private international law |
Relevant case laws:
Puttaswamy — informational privacy.
Samira Kohli — informed consent.
Jacob Mathew — medical negligence.
Moore v Regents — disclosure and commercial use of biological materials.
UJ v Österreichische Zahnärztekammer — cross-border telemedicine jurisdiction within the EU framework.
The patient may have claims against more than one entity, but the availability and success of each claim will depend on the applicable law, evidence, jurisdiction and causal connection.
18. Suggestions for legal and regulatory reform
A stronger international governance framework should incorporate the following reforms.
1. International genomic telemedicine standards: Establish common minimum standards for clinical quality, patient protection and laboratory reliability.
2. Mutual recognition of professional qualifications: Develop mechanisms for verifying foreign healthcare professionals without abandoning national licensing safeguards.
3. Genetic-data transfer safeguards: Introduce clear rules for international genomic transfers, including onward transfers and third-party access.
4. Mandatory genomic consent protocols: Separate clinical testing consent from research, commercialisation and AI-training permissions.
5. International laboratory verification: Develop interoperable accreditation and proficiency-testing systems.
6. AI transparency: Require disclosure of clinically significant algorithmic limitations and human oversight.
7. Cross-border compensation mechanisms: Improve access to remedies where the patient and healthcare provider are located in different countries.
8. Familial genetic privacy: Develop proportionate rules for communicating hereditary risks while protecting individual confidentiality.
9. Long-term genomic accountability: Establish appropriate retention, reanalysis, security and deletion policies.
10. Regulatory cooperation: Improve information-sharing between medical councils, privacy authorities, laboratory regulators and courts.
19. Conclusion
Cross-border telemedicine genomics represents a complex intersection of international healthcare law, biotechnology regulation, genetic privacy, medical ethics and private international law.
Its principal challenge is that genomic healthcare is not confined to a single geographical location. The patient may be in one country, the specialist in another, the laboratory in a third and the genomic database in a fourth.
The judicial decisions in Puttaswamy, Samira Kohli, Jacob Mathew, Moore and UJ v Österreichische Zahnärztekammer provide important legal principles concerning privacy, informed consent, medical negligence, biological materials and cross-border telemedicine.
However, no single judgment creates a complete international legal regime for genomic telemedicine.
The most effective approach is a coordinated system that combines territorial medical licensing, informed consent, secure genomic-data transfers, laboratory accreditation, scientific validation, AI accountability and accessible cross-border remedies.
Ultimately, cross-border telemedicine genomics governance must protect patient autonomy, genetic privacy, scientific reliability and professional accountability without unnecessarily restricting access to international genomic healthcare.
20. Important legislation and reference materials
For further legal research, the following primary materials are particularly useful:
India — Telemedicine Practice Guidelines, 2020.
India — Digital Personal Data Protection Act, 2023.
EU — General Data Protection Regulation.
EU — In Vitro Diagnostic Medical Devices Regulation 2017/746.
EU — Artificial Intelligence Act 2024/1689.
UNESCO — International Declaration on Human Genetic Data.
Research note: The case laws discussed above do not all directly concern cross-border telemedicine genomics. Several are analogous authorities establishing principles that can be applied to genomic healthcare disputes. Their precedential force differs by jurisdiction. The EU's 2025 UJ judgment is directly concerned with cross-border telemedicine, whereas the Indian and US decisions address related legal doctrines.

comments