REFERENCE GENOME LEGAL AUTHORITY SYSTEMS: REGULATORY GOVERNANCE, GENOMIC DATA ACCESS AND JUDICIAL PRECEDENTS

1. INTRODUCTION

Reference genome legal authority systems refer to the institutional, statutory and regulatory frameworks governing the creation, validation, maintenance, use, sharing and protection of reference genomic databases. A reference genome provides a standardised genomic sequence used in scientific research, genetic testing, disease investigation and biotechnology development.

These systems are important because reference genomic information may contain sensitive biological and population-related information. Its collection, processing, commercial use, international transfer and publication raise questions concerning individual privacy, informed consent, scientific accountability, intellectual property, national data governance and public interest.

In India, reference genome governance involves constitutional protections, biotechnology research guidelines, data-protection legislation, biomedical ethics standards and applicable biodiversity and biological-resource laws. An effective legal authority system must ensure that genomic resources are scientifically reliable, lawfully obtained, securely maintained and used for legitimate purposes.

2. LEGAL FRAMEWORK IN INDIA

A. DIGITAL PERSONAL DATA PROTECTION ACT, 2023

The Act establishes a statutory framework for processing digital personal data. Where identifiable genomic information qualifies as digital personal data, applicable requirements concerning lawful processing, notice, consent or other permitted grounds, security safeguards and individual rights become relevant.

B. INFORMATION TECHNOLOGY ACT, 2000

The Act provides a legal framework addressing electronic records, cybersecurity and certain forms of unauthorised access or misuse. Section 43A and the associated SPDI Rules, 2011 historically provided protections concerning sensitive personal data, including specified health information and medical records, subject to the applicable legal transition and commencement framework.

C. BIOLOGICAL DIVERSITY ACT, 2002

The Act regulates access to biological resources and associated traditional knowledge, including applicable approval, intimation and benefit-sharing requirements. Its relevance depends on the biological resources involved and the identity and status of the accessing institution.

D. ENVIRONMENT (PROTECTION) ACT, 1986

The Act provides broader regulatory authority for environmental protection. It is relevant where genomic research involves regulated biological activities or environmental implications.

E. ICMR NATIONAL ETHICAL GUIDELINES

The Indian Council of Medical Research's National Ethical Guidelines for Biomedical and Health Research Involving Human Participants, 2017 provide important ethical standards concerning informed consent, genetic research, confidentiality, biological samples and responsible research governance.

F. CONSTITUTION OF INDIA

Article 21 protects privacy and personal liberty, while Article 14 requires non-arbitrary governmental action. These constitutional protections are important when public institutions collect, retain, share or use identifiable genomic information.

3. MAJOR LEGAL AUTHORITY SYSTEMS

A. GENOMIC DATABASE GOVERNANCE

Reference genome repositories require institutional responsibility for data quality, lawful collection, access authorisation, record maintenance and appropriate protection against unauthorised disclosure.

B. SCIENTIFIC VALIDATION AUTHORITY

Institutions responsible for reference genomes should maintain transparent scientific validation and documentation procedures. Scientific standards must be distinguished from legal approval: publication or technical acceptance does not automatically confer statutory authority.

C. GENOMIC DATA ACCESS CONTROL

Access to identifiable genomic information should be governed by lawful authority, research ethics approvals, appropriate consent or other valid legal grounds, and confidentiality safeguards.

D. NATIONAL DATA GOVERNANCE

Public authorities must establish clear responsibilities for genomic information collected through government-funded research, public healthcare institutions and national research programmes.

E. COMMERCIAL AND INTERNATIONAL USE

Commercial exploitation and international transfer of genomic information may raise additional questions concerning privacy, contractual obligations, intellectual property, biodiversity regulation and applicable cross-border data-transfer restrictions.

4. IMPORTANT JUDICIAL PRECEDENTS

1. JUSTICE K.S. PUTTASWAMY (RETD.) v. UNION OF INDIA (2017)

Direct authority: The Supreme Court recognised privacy as a fundamental right under Article 21 and Part III of the Constitution. The judgment established legality, legitimate State purpose and proportionality as essential requirements for privacy-intrusive measures.

Application: Collection, storage and sharing of identifiable human genomic information must respect constitutional privacy protections.

2. SELVI v. STATE OF KARNATAKA (2010)

Direct analogous authority: The Supreme Court held that involuntary administration of narco-analysis, polygraph examinations and brain electrical activation profile tests violates constitutional protections relating to personal liberty and mental privacy.

Application: The judgment supports safeguards against involuntary biological and genetic investigations.

3. DISTRICT REGISTRAR AND COLLECTOR v. CANARA BANK (2005)

Direct analogous authority: The Supreme Court recognised the importance of privacy and confidentiality of personal records. It examined the limits of governmental access to private information.

Application: Genomic repositories should establish lawful access procedures and prevent unauthorised disclosure of confidential genetic records.

4. SHARDA v. DHARMPAL (2003)

Direct analogous authority: The Supreme Court considered whether a civil court could direct medical examination in appropriate circumstances. It recognised that privacy is important but not absolute and must be balanced against legitimate legal requirements.

Application: Genomic examination and access to genetic information require appropriate legal justification.

5. SAMIRA KOHLI v. DR. PRABHA MANCHANDA (2008)

Direct authority: The Supreme Court explained the requirements of valid medical consent, including competence, voluntariness and adequate disclosure of relevant information.

Application: These principles are important when obtaining consent for genomic research, biological sample collection and secondary research use.

6. JUSTICE K.S. PUTTASWAMY (RETD.) v. UNION OF INDIA (AADHAAR CASE, 2018)

Direct analogous authority: The Supreme Court examined the constitutional validity of the Aadhaar framework and considered safeguards governing biometric information, data retention and permitted use.

Application: The judgment provides important principles for designing secure genomic databases and limiting access to sensitive biological information.

7. DIVYA PHARMACY v. UNION OF INDIA (2018)

Direct authority concerning biodiversity governance: The Uttarakhand High Court examined benefit-sharing obligations under the Biological Diversity Act, 2002. It recognised that Indian entities undertaking regulated commercial utilisation of biological resources may also be subject to fair and equitable benefit-sharing obligations.

Application: Where reference genome research involves non-human Indian biological resources, applicable biodiversity access and benefit-sharing requirements must be considered.

5. REGULATORY AUTHORITIES AND THEIR RESPONSIBILITIES

The following institutions have relevant responsibilities within India's genomic governance framework:

Department of Biotechnology (DBT): Supports biotechnology research, national genomic initiatives and research governance.

Indian Council of Medical Research (ICMR): Provides ethical guidance for biomedical research involving human participants and biological samples.

National Biodiversity Authority (NBA): Regulates applicable access and benefit-sharing requirements involving biological resources.

Institutional Ethics Committees: Review research involving human participants and oversee ethical compliance.

Data Protection Board of India: Performs statutory functions under the DPDP Act as its relevant provisions become operational.

Ministry of Electronics and Information Technology: Responsible for the national digital-data protection regulatory framework.

The Genome India Project provides an important example of national genomic research governance. Parliamentary information describes the use of coded and anonymised participant information and controlled researcher access. <Cite refs={["turn841762search37"]}/>

6. PRACTICAL LEGAL COMPLIANCE REQUIREMENTS

Establish clear institutional authority for managing reference genome databases.

Obtain appropriate informed consent for human genomic research.

Maintain documented ethical approvals and research permissions.

Distinguish identifiable individual genomic data from genuinely anonymised reference datasets.

Establish access-control and confidentiality policies.

Maintain accurate records of genomic data collection and authorised use.

Establish procedures for data correction, withdrawal where applicable and retention.

Review commercial and international data-sharing arrangements.

Determine whether non-human biological resources trigger biodiversity legislation.

Establish procedures for investigating unauthorised access and data disclosure.

Important current-law consideration: The DPDP Rules, 2025 were notified in November 2025, but the Act has a phased commencement schedule. As of 1 November 2026, its principal processing provisions are scheduled to commence on 13 May 2027. The relevant provisions of the Information Technology Act and SPDI Rules therefore remain important during the transition. <Cite refs={["turn841762search1","turn841762search2","turn841762search3"]}/>

7. LEGAL CONSEQUENCES OF NON-COMPLIANCE

Failure to establish appropriate genomic authority and governance systems may result in:

Constitutional litigation involving privacy and personal liberty.

Regulatory action for unlawful data processing or inadequate safeguards, where applicable provisions are in force.

Institutional disciplinary proceedings.

Contractual and civil liability for misuse or unauthorised disclosure.

Biodiversity-related penalties or other statutory consequences where applicable.

Suspension of research activities for ethical or regulatory violations.

An important distinction must be maintained: a human reference genome does not automatically constitute identifiable personal information. However, underlying individual genomic records may remain identifiable or capable of re-identification. Similarly, the Biological Diversity Act's definition of biological resources expressly excludes human genetic material, while non-human biological resources may fall within its regulatory framework. <Cite refs={["turn841762search7","turn841762search11"]}/>

8. CONCLUSION

Reference genome legal authority systems are essential for ensuring responsible genomic research, scientific reliability, privacy protection and lawful access to biological information.

India's constitutional framework, privacy jurisprudence, biomedical research guidelines, digital-data protection legislation and biodiversity regulations collectively provide important foundations for genomic governance.

The judgments in Puttaswamy, Selvi, Samira Kohli and Divya Pharmacy establish significant principles concerning privacy, consent, bodily autonomy and biological-resource governance. Although Indian courts have not yet developed a comprehensive standalone jurisprudence specifically governing reference genome repositories, these precedents provide a legal foundation for their regulation.

Ultimately, reference genome governance must balance scientific advancement with individual rights, institutional accountability, biodiversity protection and responsible management of genomic information.