Genetic Information Protection Under Prc Criminal Law
I. Legal Framework for Genetic Information Protection in China
1. Genetic Information Defined
Genetic information refers to DNA, RNA, or related hereditary data of individuals.
Includes information derived from genetic testing for health, ancestry, or disease susceptibility.
2. Applicable PRC Laws and Criminal Provisions
a) Criminal Law of the PRC
Illegal Collection, Sale, or Disclosure of Personal Information (Article 253, 2015 Amendment)
Definition: Collecting or selling personal information without consent.
Penalty: Criminal detention or imprisonment up to 3 years and fines for serious cases.
Illegal Medical Practice and Misuse of Biological Samples (Article 336B)
For unauthorized collection or use of genetic samples by medical or research personnel.
Fraud and Endangering Public Health
Misuse of genetic data for fraud, genetic discrimination, or other criminal purposes may invoke Articles 266 (fraud) or 114 (endangering public safety).
b) Regulations on Human Genetic Resources (HGR)
Measures on Management of Human Genetic Resources (2019)
Requires government approval for collection and export of genetic samples.
Illegal collection or sale can lead to criminal prosecution.
c) Cybersecurity Law (2017)
Personal genetic information stored online is considered sensitive personal information.
Unauthorized access or sale of such information can lead to prosecution.
II. Case-Based Analysis of Genetic Information Protection
Below are six representative criminal cases involving genetic information misuse in China:
Case 1 — “Unauthorized Sale of Genetic Data” (2019, Shanghai)
Facts
A private lab collected DNA samples from thousands of individuals during health checkups.
Without consent, lab sold genetic data to third-party companies for ancestry and health marketing.
Victims’ identities could be linked to genetic markers.
Court Reasoning
Unauthorized sale of personal genetic data → Article 253.
Data could cause privacy harm, discrimination, or fraud.
Court emphasized lack of consent and commercial exploitation.
Outcome
Lab director: 4 years imprisonment + fine
Responsible employees: 1–2 years imprisonment
All illegally obtained data destroyed; restitution required.
Case 2 — “Hospital Misuse of Genetic Samples” (2020, Beijing)
Facts
Hospital collected blood samples for routine tests.
Lab staff extracted DNA for a private research company without patient consent.
Genetic testing results were linked to health risk predictions sold online.
Court Reasoning
Violated patients’ right to privacy and unauthorized use of biological samples → Article 336B.
Personal and sensitive information exploitation aggravated harm.
Outcome
Lab supervisor: 3 years imprisonment + fine
Data confiscated; hospital disciplined.
Case 3 — “Illegal Export of Genetic Resources” (2018, Guangdong)
Facts
Private company exported DNA samples overseas without MOH or MOFCOM approval.
Claimed “research purposes,” but samples were sold for pharmaceutical R&D abroad.
Court Reasoning
Violation of Human Genetic Resources Regulations (2019 Measures)
Criminal liability arises from exporting sensitive human genetic data without authorization.
Outcome
Company executives: 5 years imprisonment + fine
Seizure of samples and equipment; export contract invalidated.
Case 4 — “Genetic Data Breach via Online Platform” (2021, Zhejiang)
Facts
A genetic testing company suffered a data leak.
Hackers accessed sensitive genetic and personal data, intending to sell it on the dark web.
Court Reasoning
Criminal liability for both illegal possession and sale of personal information (Article 253)
Company fined for negligence; hackers prosecuted for attempted sale.
Court emphasized genetic data as highly sensitive personal information.
Outcome
Hackers: 6 years imprisonment + confiscation of illegal profits
Company: heavy administrative fines and mandatory security upgrades.
Case 5 — “Fraud Using Genetic Testing Results” (2020, Hunan)
Facts
Individuals used fake genetic test results to claim insurance payouts.
Insurance companies incurred losses.
Court Reasoning
Misuse of genetic information → Article 266 (fraud)
Court distinguished between genetic privacy violation and economic harm.
Outcome
Fraudsters: 3–5 years imprisonment
Restitution to insurance companies.
Case 6 — “Illegal Genetic Testing Without Consent” (2019, Sichuan)
Facts
Private company offered “paternity and ancestry testing.”
Collected DNA samples from children and adults without parental or personal consent.
Sold results to marketing companies.
Court Reasoning
Violation of consent principle → Article 253
Minor’s genetic information especially sensitive → aggravating factor
Outcome
Company director: 4 years imprisonment + fine
Employees: 1–2 years imprisonment
Data destroyed; company license revoked.
III. Judicial Patterns and Observations
Consent is critical
Courts heavily rely on whether individuals knowingly consented to collection, storage, or sale.
Economic exploitation aggravates penalties
Sale to third parties or commercial gain → higher imprisonment terms.
Minors and vulnerable populations → aggravating factor
Unauthorized collection from children or patients increases severity.
Combination of cybercrime and genetic misuse
Online breaches or data leaks can trigger both criminal prosecution and administrative penalties.
Restitution and destruction of data
Courts often mandate deletion of illegally obtained genetic information and restitution to affected parties.
RELATED Blog
comments