1. Introduction

Risk assessment based on genetic information refers to the process of evaluating an individual's potential health risks, inherited diseases, biological vulnerabilities, reproductive risks, or susceptibility to particular medical conditions by analysing their genetic information.

Genetic information includes DNA sequences, genetic mutations, inherited characteristics, genomic profiles, family medical histories, and predictive genetic test results.

Modern biotechnology and genomic medicine allow governments, healthcare institutions, insurance companies, employers, and research organisations to use genetic information to assess future risks. However, the use of such information raises serious legal and ethical questions concerning privacy, discrimination, informed consent, equality, bodily autonomy, and data protection.

The central legal question is: To what extent can an organisation use an individual's genetic information to predict risks without violating that individual's fundamental rights?

Risk assessment must distinguish between:

Actual medical conditions and predicted genetic susceptibility.

Scientifically established genetic findings and uncertain statistical predictions.

Voluntary genetic testing and compulsory genetic testing.

Legitimate medical risk assessment and discriminatory profiling.

A person carrying a genetic mutation is not necessarily suffering from the disease associated with that mutation. Therefore, genetic predisposition must not automatically be treated as proof of present illness or future incapacity.

2. Meaning and Scope of Genetic Risk Assessment

Genetic risk assessment involves analysing genetic information to identify the possibility that an individual may develop a particular disease or transmit an inherited condition to future generations.

For example, genetic testing may identify:

BRCA1 and BRCA2 mutations associated with increased risks of certain cancers.

Genetic variations associated with cardiovascular diseases.

Huntington's disease-associated mutations.

Inherited metabolic disorders.

Genetic conditions relevant to reproductive planning.

Pharmacogenomic variations affecting responses to medicines.

The assessment generally involves five stages:

Collection: Obtaining genetic samples or existing genetic records.

Analysis: Examining DNA sequences and genetic variations.

Interpretation: Determining the possible medical significance of identified variations.

Risk classification: Estimating the likelihood and seriousness of a particular condition.

Legal and clinical application: Deciding whether the information may legitimately influence medical treatment, insurance, employment, or public-health decisions.

The legal difficulty arises when predictive information is used beyond its original medical purpose.

3. Legal Framework Governing Genetic Risk Assessment

A. Right to privacy and personal autonomy

Genetic information is highly sensitive because it may reveal information about:

An individual's present and future health.

Biological relationships and family inheritance.

Reproductive characteristics.

Inherited disease susceptibility.

Potential medical conditions of biological relatives.

The right to privacy requires that genetic information should not be collected, stored, analysed, or disclosed without an appropriate legal basis.

In India, Article 21 of the Constitution protects life and personal liberty, including the right to privacy recognised in K.S. Puttaswamy v. Union of India (2017).

B. Protection against genetic discrimination

Genetic risk assessment can result in discrimination when an organisation treats a person unfavourably because of an inherited mutation or predicted medical condition.

Examples include:

Refusing employment because an applicant has a genetic predisposition to cancer.

Increasing insurance premiums based on genetic test results.

Denying medical services because of inherited disease susceptibility.

Treating individuals as medically unfit based on uncertain genetic predictions.

Excluding individuals from research or reproductive services based on genetic characteristics.

The law must distinguish between legitimate medical assessment and unfair treatment based on genetic status.

C. Genetic information and data protection

Genetic information requires heightened safeguards because it is difficult to change or replace once disclosed.

The relevant legal principles include:

Lawful collection and processing.

Informed consent, where required.

Purpose limitation.

Data minimisation.

Confidentiality.

Secure storage.

Restrictions on onward disclosure.

Appropriate retention and deletion.

Access to correction and applicable remedies.

D. Scientific accuracy and evidentiary reliability

Genetic risk assessments should be based on scientifically validated methods.

A genetic finding should not automatically be treated as conclusive evidence of disease. The assessment should consider penetrance, environmental factors, family history, age, clinical findings, and the limitations of available testing.

A distinction must also be made between pathogenic variants, variants of uncertain significance, and benign genetic variations.

4. Important Case Laws

The following judgments establish important principles concerning genetic privacy, DNA information, medical risk, discrimination, and the limits of compulsory genetic testing.

Case 1: S. and Marper v. United Kingdom (2008)

European Court of Human Rights · Grand Chamber · Application Nos. 30562/04 and 30566/04

Facts: The applicants challenged the indefinite retention of their fingerprints, DNA profiles, and cellular samples by the police, even though they had not been convicted of the offences concerned.

Legal issue: Whether retaining DNA information without adequate justification violated the right to privacy under Article 8 of the European Convention on Human Rights.

Judgment: The Court held that retaining DNA profiles and biological samples constituted interference with private life. Biological samples could reveal extensive genetic and health information, including information concerning relatives.

The Court found that blanket and indiscriminate retention of the applicants' information was disproportionate.

Legal principle: Genetic information deserves heightened privacy protection. Its retention and use must be lawful, necessary, proportionate, and subject to safeguards.

Relevance: This case is important when governments or institutions retain genetic information to assess future risks without an adequate justification.

Bailii+1

Case 2: K.S. Puttaswamy v. Union of India (2017)

Supreme Court of India · (2017) 10 SCC 1

Facts: The case concerned the constitutional validity of the Aadhaar identification framework and the broader constitutional recognition of privacy.

Legal issue: Whether privacy is a fundamental right under the Indian Constitution.

Judgment: A nine-judge Constitution Bench unanimously recognised privacy as a fundamental right protected by Article 21 and other constitutional freedoms.

Legal principle: Personal information, bodily autonomy, and informational privacy form important aspects of constitutional privacy.

State interference with privacy must satisfy legality, legitimate State purpose, and proportionality.

Relevance: Genetic information is particularly sensitive personal information. Governmental genetic risk-assessment programmes must therefore have a proper legal basis and adequate safeguards.

Case 3: Bragdon v. Abbott (1998)

United States Supreme Court · 524 U.S. 624 (1998)

Facts: An individual living with HIV challenged a dentist's refusal to provide treatment in the dental office, citing the risk of HIV transmission.

Legal issue: Whether HIV infection could constitute a disability under the Americans with Disabilities Act (ADA).

Judgment: The Supreme Court held that HIV infection could constitute a disability under the ADA, including where the individual was asymptomatic. It also examined the assessment of direct threat and the need for an objective, individualised evaluation.

Legal principle: Medical risk assessments must rely on objective medical evidence rather than unsupported assumptions or stereotypes.

Relevance: Although this was not a genetic-testing case, its reasoning is relevant when institutions use predicted genetic health risks to justify exclusion or differential treatment.

Case 4: R. (S) v. Chief Constable of South Yorkshire Police (2011)

United Kingdom Supreme Court · [2011] UKSC 21

Facts: The litigation concerned the retention of DNA samples and profiles of individuals who had been arrested but not convicted.

Legal issue: Whether continued retention of DNA information was compatible with privacy rights following the European Court's decision in S. and Marper.

Judgment: The Supreme Court applied the reasoning of the European Court and allowed the appeals.

Legal principle: DNA retention systems must respect privacy and cannot rely on indiscriminate retention without appropriate justification.

Relevance: The case reinforces the requirement for proportionate handling of genetic information, including information that might later be used for risk assessment.

Bailii

Case 5: Maryland v. King (2013)

United States Supreme Court · 569 U.S. 435 (2013)

Facts: Police collected a DNA sample through a cheek swab from an individual arrested for a serious offence. The DNA profile helped identify him in connection with an earlier criminal investigation.

Legal issue: Whether collecting DNA from a qualifying arrestee as part of the booking procedure violated the Fourth Amendment.

Judgment: The Supreme Court upheld the DNA collection procedure in the circumstances of the case, treating it as a reasonable identification measure.

Legal principle: DNA collection may be justified for legitimate identification purposes, subject to the constitutional context and applicable safeguards.

Relevance: The case illustrates the distinction between DNA identification and broader genetic analysis. Permission to use DNA for identification does not automatically authorise its use for predicting medical conditions or genetic susceptibility.

LII / Legal Information Institute+1

Case 6: Association for Molecular Pathology v. Myriad Genetics, Inc. (2013)

United States Supreme Court · 569 U.S. 576 (2013)

Facts: Myriad Genetics claimed patent rights over isolated BRCA1 and BRCA2 genes associated with increased risks of breast and ovarian cancer.

Legal issue: Whether naturally occurring human genes isolated from the body could be patented.

Judgment: The Supreme Court held that naturally occurring DNA segments are products of nature and are not patent-eligible merely because they have been isolated.

However, synthetically created complementary DNA (cDNA) may be patent-eligible, subject to the applicable legal requirements.

Legal principle: Naturally occurring genetic information cannot be converted into patentable subject matter merely through isolation.

Relevance: This judgment is important because genetic risk assessment frequently depends on identifying naturally occurring genetic variations. It also distinguishes ownership of biological information from the patentability of genuinely engineered genetic materials.

5. Important Statutory Frameworks

A. India

1. Constitution of India

Article 14: Equality before the law.

Article 19: Protection of applicable constitutional freedoms.

Article 21: Privacy, dignity, and personal liberty.

2. Digital Personal Data Protection Act, 2023

The Act provides a framework for processing digital personal data, including applicable consent, lawful processing, security, and individual rights.

Importantly, genetic information is not separately enumerated as a special category in the Act. Its protection must therefore be considered within the applicable provisions of the general data-protection framework and other relevant laws.

3. Criminal Procedure (Identification) Act, 2022

The Act provides a framework for taking and preserving specified measurements for identification and investigation purposes. Its provisions should not be treated as a general authorisation for medical genetic profiling.

4. DNA Technology (Use and Application) Regulation Act, 2019

The proposed DNA Technology (Use and Application) Regulation Bill, 2019 did not become an enacted statute. It should not be cited as currently operative law.

B. United States

Genetic Information Nondiscrimination Act, 2008 (GINA)

GINA prohibits genetic discrimination in employment and specified forms of health insurance.

It restricts employers from using genetic information in decisions concerning:

Recruitment.

Hiring.

Promotion.

Termination.

Salary and employment benefits.

It also restricts the acquisition and disclosure of genetic information, subject to statutory exceptions.

The protection does not extend to every type of insurance. In particular, GINA does not generally prohibit genetic discrimination in life, disability, or long-term-care insurance.

U.S. Equal Employment Opportunity Commission+1

C. European Union

General Data Protection Regulation (GDPR), 2016

Article 4(13) defines genetic data, while Article 9 treats genetic data as a special category of personal data.

Processing is generally prohibited unless an applicable exception under Article 9(2) is satisfied.

Important requirements include:

Lawful processing.

Appropriate safeguards.

Data minimisation.

Purpose limitation.

Data security.

Accountability.

6. Major Legal Issues in Genetic Risk Assessment

7. Legal Responsibilities of Institutions

Institutions conducting genetic risk assessments should follow certain responsibilities.

Healthcare institutions

Explain the purpose and limitations of genetic testing.

Obtain appropriate consent.

Protect confidential genetic records.

Provide counselling where appropriate.

Avoid presenting uncertain predictions as definite diagnoses.

Employers

Avoid discriminatory genetic screening.

Do not use genetic susceptibility as a substitute for assessing actual job-related capacity.

Protect genetic information obtained through lawful exceptions.

Insurance organisations

Follow applicable anti-discrimination and insurance laws.

Ensure that risk assessment is based on legally permissible information.

Avoid misleading conclusions from uncertain genetic findings.

Government authorities

Establish clear legal authority for genetic data collection.

Ensure independent oversight.

Restrict access and secondary use.

Provide remedies against unlawful disclosure and misuse.

8. Challenges in Genetic Risk Assessment

Several emerging challenges require regulatory attention.

Predictive uncertainty: A genetic mutation does not always result in disease.

Artificial intelligence: AI systems may generate inaccurate health-risk predictions from genomic datasets.

Familial discrimination: One person's genetic results may indirectly affect relatives.

Commercial exploitation: Genetic information may be used for commercial profiling.

Cross-border transfers: Genetic information may be transferred to jurisdictions with different privacy protections.

Algorithmic bias: Genetic datasets may inadequately represent particular populations.

Reproductive consequences: Genetic risk predictions may influence reproductive choices and raise questions of autonomy and equality.

9. Principles for a Fair Genetic Risk Assessment System

An effective legal framework should incorporate the following principles:

Necessity: Collect genetic information only where a legitimate need exists.

Proportionality: Ensure that the intrusion is proportionate to the objective.

Accuracy: Use validated scientific methods.

Transparency: Explain how genetic risk scores are calculated.

Consent: Respect informed consent and applicable legal exceptions.

Confidentiality: Prevent unauthorised disclosure.

Non-discrimination: Prevent unjustified adverse treatment based on genetic predisposition.

Accountability: Provide mechanisms for challenging incorrect assessments.

Human oversight: Avoid allowing automated genetic predictions to determine important decisions without appropriate review.

10. Conclusion

Risk assessment based on genetic information is an important development in modern biotechnology, medical science, and preventive healthcare. It enables early identification of inherited diseases, personalised medical treatment, and better understanding of biological susceptibility.

However, genetic predictions can also create serious risks of privacy violations, discrimination, inaccurate medical classification, and misuse of biological information.

The decisions in Puttaswamy, S. and Marper, Bragdon, Maryland v. King, and Myriad Genetics provide important legal foundations for understanding privacy, scientific assessment, bodily autonomy, and the limits of genetic information use.

The fundamental legal principle is that genetic susceptibility should not automatically become a legal disadvantage. Genetic risk assessment must be scientifically reliable, legally authorised, proportionate, transparent, and consistent with individual dignity and equality.

11. Important Case Law Revision Table

Research note: These judgments do not all directly concern predictive genetic risk scoring. Some establish broader principles applicable by analogy. In India, the constitutional privacy framework is particularly important, while specific genetic discrimination protections remain less developed than under the US GINA framework.

I can also prepare this topic as an 800–1000-word academic research paper with Indian, Australian, US and international case laws, including proper legal citations.