Data marketplaces for biological information

Introduction

Data marketplaces for biological information are digital platforms where biological and health-related datasets are exchanged, licensed, accessed or shared for research, commercial and scientific purposes. These marketplaces may contain genomic sequences, clinical trial results, microbiome information, molecular structures, agricultural genetic data and other biological datasets.

Biotechnology companies, pharmaceutical manufacturers, universities, hospitals and research institutions use such platforms to obtain information for drug discovery, personalised medicine, disease research and agricultural innovation. Biological data has significant economic value because it can support the development of medicines, diagnostic tools and new biotechnology products.

However, trading biological information creates legal and ethical concerns relating to privacy, informed consent, ownership, intellectual property, data security, commercial exploitation and cross-border transfers. Therefore, data marketplaces require a strong legal and regulatory framework.

Legal framework governing biological data marketplaces

In India, the Digital Personal Data Protection Act, 2023 is an important legal framework where biological information constitutes digital personal data. Genetic and health information linked to an identifiable individual may fall within its scope. Organisations processing such information must comply with applicable requirements concerning lawful processing, security safeguards and individual rights. Section 16 also empowers the Central Government to restrict transfers of personal data to specified countries or territories.

The Information Technology Act, 2000 and applicable cybersecurity requirements are also relevant to digital platforms. In particular, organisations must examine their obligations under the applicable provisions concerning unauthorised access, data protection and cybersecurity incidents.

The ICMR National Ethical Guidelines for Biomedical and Health Research Involving Human Participants, 2017 provide ethical guidance on informed consent, confidentiality, biological sample management and the secondary use of research information. These guidelines are particularly important when marketplaces deal with human genomic or clinical datasets.

Internationally, the General Data Protection Regulation (GDPR) regulates the processing of personal data in its territorial scope. Genetic and health information are special categories of personal data under Article 9. Articles 44–49 regulate international transfers of personal data. The GDPR does not prohibit every commercial use of biological data, but processing must satisfy its legal requirements.

The TRIPS Agreement, particularly Articles 7, 8 and 39, is relevant to intellectual property and the protection of undisclosed information. Article 39 protects qualifying confidential information against unfair commercial use and disclosure, subject to its requirements.

Ownership and commercial rights in biological information

One of the most complicated issues in biological data marketplaces is determining who controls the information being sold or licensed.

Different parties may have different legal interests:

Individuals may have privacy and consent-related rights concerning their personal biological information.

Hospitals and research institutions may control access to datasets generated through their activities.

Researchers may have contractual or intellectual property interests in databases and analytical results.

Biotechnology companies may hold licences or rights in proprietary databases and processing technologies.

Funding agencies may impose conditions on data access, publication and commercialisation.

It is important to distinguish ownership of a physical biological sample from rights relating to information derived from it. A person does not automatically own every database entry generated from their biological material, but the use of identifiable information may still require a valid legal basis and compliance with applicable consent and privacy obligations.

Informed consent and ethical considerations

Biological information marketplaces frequently involve secondary use of data. For example, genetic information initially collected for medical research may later be used for pharmaceutical development or artificial intelligence research.

Consent documents should explain the intended purposes, possible future uses, sharing arrangements, commercial involvement and relevant privacy risks. Broad consent may be appropriate in certain research settings, but it should not be treated as unlimited permission for every future commercial activity.

Special attention is necessary when dealing with Indigenous communities, vulnerable populations and rare genetic conditions. Commercial use of community-linked biological information without appropriate consultation may create ethical disputes and allegations of exploitation.

Data security and cross-border transactions

Biological data marketplaces should adopt technical and organisational safeguards, including encryption, access restrictions, authentication, audit records and secure transfer systems.

International transactions create additional difficulties because privacy, intellectual property and research regulations differ between countries. A marketplace operating across multiple jurisdictions should examine applicable transfer restrictions, contractual obligations and local regulatory requirements before allowing access.

Data anonymisation can reduce privacy risks, but genetic information may remain capable of identifying individuals when combined with other datasets. Therefore, removing names alone does not always make genomic information anonymous.

Important case laws

1. K.S. Puttaswamy v. Union of India (2017)

The Supreme Court of India recognised privacy as a fundamental right under Article 21. The judgment established important principles concerning informational privacy and individual autonomy. These principles are relevant to biological data marketplaces because genetic and medical information may reveal highly personal characteristics.

2. District Registrar and Collector v. Canara Bank (2005)

The Supreme Court recognised the importance of privacy and confidentiality in personal records. Its reasoning is relevant by analogy to biological databases, where unauthorised access or disclosure may violate legitimate confidentiality interests.

3. Samira Kohli v. Dr. Prabha Manchanda (2008)

The Supreme Court emphasised the importance of informed consent in medical treatment. Its principles are relevant when biological information is collected for research and later made available through commercial data platforms. Consent should reflect the nature and purpose of the proposed use.

4. Moore v. Regents of the University of California (1990)

The California Supreme Court considered whether a patient retained property rights in removed cells that were later used for commercial research. The court rejected the patient's conversion claim over the excised cells but recognised potential duties arising from a physician's failure to disclose relevant financial interests. The case is important for understanding the distinction between biological material, personal interests and commercial research rights.

5. Association for Molecular Pathology v. Myriad Genetics, Inc. (2013)

The United States Supreme Court held that naturally occurring DNA segments are not patent-eligible merely because they have been isolated. However, it distinguished complementary DNA (cDNA), which may qualify for patent protection in certain circumstances. The decision is relevant to marketplaces dealing with genetic information and biotechnology-related intellectual property.

Regulatory challenges and compliance requirements

Data marketplaces face several challenges, including unclear ownership arrangements, inadequate consent, unauthorised resale, inaccurate datasets and conflicts between commercial interests and research ethics.

A responsible marketplace should therefore:

Verify the legal authority of data providers.

Maintain clear licensing and data-sharing agreements.

Record the purposes for which data may be used.

Apply privacy and cybersecurity safeguards.

Establish procedures for complaints and data breaches.

Prevent unauthorised resale and prohibited secondary use.

Provide transparent terms concerning commercial benefits and access restrictions.

Conclusion

Data marketplaces for biological information can accelerate medical research, drug development and biotechnology innovation. However, their operation requires careful regulation because biological information may reveal sensitive details about individuals and communities. Indian privacy law, international data protection frameworks, intellectual property principles and research ethics collectively influence these platforms. Although direct judicial decisions specifically addressing biological data marketplaces remain limited, cases concerning privacy, informed consent, biological materials and genetic patents provide important legal guidance. A transparent and secure marketplace must balance scientific progress with individual rights, confidentiality and fair commercial practices.