1. Introduction

Student Access to Genetic Data refers to the legal rights, conditions, limitations and regulatory safeguards governing students' access to genetic information for educational, scientific, medical and research purposes.

Genetic data includes information obtained from DNA, RNA, chromosomes, genetic sequencing, inherited characteristics, genetic mutations and biological samples. Such information can reveal highly personal details about an individual, including hereditary diseases, biological relationships, ancestry and potential health risks.

Students in universities, medical colleges, biotechnology institutions, forensic science laboratories and research centres may require access to genetic data for:

Academic research and dissertation projects.

Human genetics and molecular biology education.

Medical and biotechnology research.

Genetic disease and population studies.

Forensic DNA analysis.

Bioinformatics and genomic data analysis.

Public-health and epidemiological research.

However, access to genetic information creates important legal questions: Who owns or controls genetic data? Can universities disclose student or patient genetic information? Can researchers access identifiable DNA records? What rights do minors have? Can genetic information be used to discriminate against students?

The central legal principle is that educational access to genetic data must be balanced against privacy, informed consent, confidentiality, research ethics and protection against genetic discrimination.

2. Meaning and Nature of Genetic Data

Genetic data is personal information derived from the genetic characteristics of an identified or identifiable individual.

It may include:

DNA sequencing information.

Whole-genome sequencing records.

Genetic disease susceptibility.

Carrier-status information.

Chromosomal abnormalities.

Ancestry and population-genetic information.

Familial and inherited genetic relationships.

Pharmacogenomic information.

Genetic information is particularly sensitive because it can reveal information not only about the person tested but also about biological relatives.

For example, a university conducting a genetic research project may obtain DNA samples from 500 students. Even if the research is academically legitimate, the university cannot automatically assume that students have consented to unrestricted collection, storage, publication or sharing of their genetic information.

3. Legal Framework in India

A. Constitutional protection

The Indian Constitution does not expressly create a separate fundamental right called the right to genetic privacy. However, several constitutional provisions protect individuals against misuse of genetic information.

Article 21 – Right to Life and Personal Liberty

Article 21 protects privacy, dignity, bodily autonomy and personal liberty. Genetic information is closely connected with personal identity and bodily integrity.

A university should not compel a student to undergo genetic testing merely because it considers such information academically useful.

Article 14 – Right to Equality

Article 14 prohibits arbitrary and discriminatory state action. Public educational institutions should not discriminate against students based on genetic characteristics, inherited diseases or genetic predispositions.

Article 19(1)(a) – Freedom of Speech and Expression

This provision supports academic freedom, scientific communication and the dissemination of research findings, subject to applicable legal restrictions and the rights of others.

Article 19(1)(g) – Freedom of Profession

This provision may also be relevant to the freedom of scientific and professional research, subject to reasonable restrictions.

B. Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act, 2023 (DPDP Act) establishes a framework for processing digital personal data in India.

Its relevance to genetic information includes:

Digital genetic records linked to identifiable students.

University genomic databases.

Digital storage of DNA sequencing results.

Disclosure of genetic information to research partners.

Security of student research records.

Processing of genetic data for academic purposes.

The Act does not establish a separate statutory category of sensitive personal data specifically for genetic information. Nevertheless, identifiable digital genetic information can fall within its general definition of personal data.

Universities must examine the applicable consent, lawful-use, security, children's-data and other requirements under the Act and rules in force.

C. Indian Council of Medical Research Guidelines

The Indian Council of Medical Research (ICMR) Ethical Guidelines for Biomedical and Health Research Involving Human Participants, 2017, provide particularly important safeguards.

Their chapter on human genetics addresses:

Informed consent for genetic testing.

Confidentiality of genetic information.

Storage and future use of biological samples.

Return of genetic research results.

Withdrawal from research.

Anonymisation and data sharing.

Intellectual property and commercialisation.

Community consent in population-based research.

These guidelines are especially important where universities conduct human-genetics research or collaborate with hospitals and biotechnology laboratories.

Indian Council of Medical Research

4. Major Legal Issues Concerning Student Access to Genetic Data

4.1 Right to access one's own genetic information

A student who participates in a genetic research project may have an interest in accessing the genetic information generated from their biological sample.

The right to access must be distinguished from a right to obtain another person's genetic information.

For example:

A student may seek their own genetic test results.

A student researcher may seek access to an approved research dataset.

A student cannot automatically demand another participant's identifiable DNA records.

Article 13 of UNESCO's International Declaration on Human Genetic Data recognises access to one's own genetic data, subject to specified exceptions.

Legal Affairs

4.2 Informed consent

Consent is one of the most important legal requirements.

A university should explain:

What genetic information will be collected.

Why the information is needed.

Who will access the information.

Whether the information will be shared.

How long the information will be retained.

Whether the information may be used in future research.

Whether research findings will be returned to participants.

Consent must not be obtained through academic pressure.

For example, a professor cannot make participation in an unrelated DNA study compulsory merely to secure access to laboratory facilities or academic marks.

4.3 Privacy and confidentiality

Genetic information is unusually sensitive because it can reveal hereditary relationships and possible health conditions.

Universities should adopt:

Restricted-access databases.

Encryption and secure storage.

Research identification codes.

De-identification of datasets.

Confidentiality agreements.

Access logs and monitoring.

Rules governing external data transfers.

Anonymisation must be approached carefully because genomic information can sometimes be re-identified by combining it with other datasets.

4.4 Access for academic research

Students studying genetics, biotechnology, forensic science and molecular biology may need access to genetic datasets.

However, legitimate academic purposes do not automatically authorise unrestricted access.

A university should distinguish between:

Publicly available datasets: Students may generally use these according to their licences, terms and applicable law.

De-identified datasets: Access may be allowed subject to research approvals and safeguards.

Restricted clinical datasets: Access should ordinarily require institutional authorisation and appropriate ethical and legal safeguards.

Identifiable genetic datasets: These require particularly strict confidentiality and lawful access arrangements.

4.5 Genetic discrimination in educational institutions

Educational institutions should not use genetic information to determine a student's academic potential, intelligence, admission eligibility or suitability for ordinary educational programmes.

For example, a university should not reject an applicant because genetic testing suggests that the applicant may develop a hereditary neurological condition in the future.

Such conduct raises serious questions of equality, dignity, privacy and discrimination.

4.6 Access involving minors

Students under 18 require additional protection.

Research involving minors must follow applicable legal requirements concerning parental or guardian authorisation, the child's best interests, age-appropriate information and the child's developing capacity to participate in decisions.

A minor's opinion should be taken seriously, according to age and maturity.

Genetic testing for conditions that may not manifest until adulthood requires particular caution, especially where no immediate medical benefit exists.

4.7 Commercial use of student genetic data

Universities may collaborate with biotechnology companies, pharmaceutical companies and genomic research organisations.

Such collaboration creates risks involving:

Commercial exploitation.

Unauthorised licensing.

Patent-related disputes.

Disclosure to private companies.

Secondary use of biological samples.

Unfair distribution of research benefits.

A student's consent to participate in an academic project should not automatically be interpreted as consent to unrestricted commercial exploitation of their genetic information.

5. Important Case Laws

The following judgments establish legal principles relevant to genetic privacy, bodily autonomy, DNA testing and access to personal information. Not all directly concern university student databases; their principles are applicable by analogy.

Case 1: Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)

Supreme Court of India

Citation: (2017) 10 SCC 1.

Facts:

The case concerned the constitutional status of the right to privacy in India and the validity of the Aadhaar framework.

Judgment:

A nine-judge Constitution Bench unanimously recognised privacy as a fundamental right protected under Article 21 and other freedoms in Part III of the Constitution.

The judgment recognised informational privacy, bodily autonomy and individual control over personal information.

Relevance to student genetic data:

Genetic information is deeply connected with personal identity and private life. Therefore, a university's collection, storage and disclosure of identifiable student genetic information must respect constitutional privacy principles.

Government interference with privacy must satisfy the requirements of legality, legitimate state purpose and proportionality.

Legal principle: Genetic information deserves strong privacy protection as part of informational privacy and personal autonomy.

Indian Kanoon

Case 2: Selvi v. State of Karnataka (2010)

Citation: (2010) 7 SCC 263.

Facts:

The case concerned the involuntary administration of narco-analysis, polygraph examinations and brain electrical activation profile tests during criminal investigations.

Judgment:

The Supreme Court held that involuntary administration of these techniques violated constitutional protections under Articles 20(3) and 21.

The judgment emphasised mental privacy, personal liberty and protection against involuntary testimonial techniques.

Relevance:

Although this case did not concern genetic databases, it establishes an important principle against coercive scientific investigation.

A university should not force students to undergo genetic procedures without an appropriate legal and ethical basis.

Legal principle: Scientific investigation cannot automatically override bodily autonomy and constitutional protections.

Case 3: Sharda v. Dharmpal (2003)

Citation: (2003) 4 SCC 493.

Facts:

The dispute concerned whether a matrimonial court could direct a party to undergo medical examination.

Judgment:

The Supreme Court recognised that courts possess power in appropriate cases to order medical examinations. However, such power must be exercised judicially and not arbitrarily.

The judgment also considered the relationship between medical examination and personal liberty.

Relevance:

Universities should not treat access to biological samples or genetic examination as an unlimited administrative power.

There must be a legitimate purpose and appropriate safeguards.

Legal principle: Medical examination must be justified in the circumstances and cannot be ordered arbitrarily.

Case 4: Goutam Kundu v. State of West Bengal (1993)

Citation: (1993) 3 SCC 418.

Facts:

The case involved a request for blood-group testing in a paternity dispute.

Judgment:

The Supreme Court cautioned against routinely ordering blood tests in paternity proceedings and recognised the importance of privacy and the legal presumptions governing legitimacy.

Relevance:

The case demonstrates that biological information cannot be demanded simply because it may be useful to another person.

Similarly, a student cannot obtain another student's genetic information merely because it would assist an academic investigation.

Legal principle: Biological testing must be justified by legal necessity and the circumstances of the case.

Case 5: Bhabani Prasad Jena v. Convenor Secretary, Orissa State Commission for Women (2010)

Citation: (2010) 8 SCC 633.

Facts:

The case concerned the request for DNA testing in a dispute involving the determination of parentage.

Judgment:

The Supreme Court held that DNA testing should not be ordered routinely. Courts must balance the need for scientific evidence against privacy, dignity and the interests of the parties concerned.

Relevance:

Universities and research institutions should similarly balance scientific usefulness against the privacy interests of research participants.

Legal principle: DNA testing requires careful judicial and ethical consideration; scientific accuracy alone does not justify every intrusion.

Case 6: Criminal Appeal No. 1013 of 2021 – Supreme Court of India

Relevant judgment: 2025 INSC 1304.

Legal significance:

The Supreme Court discussed the privacy implications of compelling DNA testing and applied the constitutional framework developed in Puttaswamy.

It emphasised that forced DNA testing is a serious intrusion into privacy and personal liberty and must satisfy legality, legitimate purpose and proportionality.

Relevance:

This reasoning is important for universities seeking access to student DNA samples. Academic convenience alone cannot justify coercive genetic testing.

Supreme Court of India

6. Important International Case Laws

Case 7: S. and Marper v. United Kingdom (2008)

European Court of Human Rights

Citation: Applications Nos. 30562/04 and 30566/04, Grand Chamber, 4 December 2008.

Facts:

The case concerned the retention of fingerprints, cellular samples and DNA profiles of individuals who had been arrested but not convicted.

Judgment:

The European Court of Human Rights held that the blanket and indefinite retention of such personal data violated Article 8 of the European Convention on Human Rights, which protects private and family life.

Relevance to students:

Universities should not retain students' DNA samples indefinitely merely because they were collected for a research or educational project.

Retention must be justified by the purpose, applicable law and appropriate safeguards.

Legal principle: Storage of genetic and biological information must respect privacy and proportionality.

Case 8: Maryland v. King (2013)

Citation: 569 U.S. 435 (2013), Supreme Court of the United States.

Facts:

The case concerned the collection of DNA samples from individuals arrested for serious offences under Maryland law.

Judgment:

The US Supreme Court upheld the particular DNA collection procedure under the Fourth Amendment, treating it as a permissible identification procedure in the circumstances.

Relevance to students:

The judgment illustrates that DNA collection may be permitted for specific legally recognised purposes, but it does not create a general right for educational institutions to collect or access students' genetic information.

Legal principle: DNA collection must be assessed according to the applicable legal authority, purpose and constitutional protections.

7. International Legal Framework

Several international instruments provide guidance for universities and research institutions.

Particularly important UNESCO provisions:

Article 8: Informed consent.

Article 9: Withdrawal of consent.

Article 10: Right to decide whether to receive research results.

Article 13: Access to one's own genetic information.

Article 14: Privacy and confidentiality.

Article 16: Restrictions on incompatible secondary use.

Article 18: International cooperation and cross-border circulation.

The UNESCO Declaration is an important international ethical framework, but it is not itself a directly enforceable treaty.

Legal Affairs+1

8. Rights and Responsibilities of Students

The legal position can be understood through the following distinction.

9. Responsibilities of Universities and Research Institutions

Universities should establish a comprehensive genetic-data governance framework.

1. Institutional Ethics Committee

Research involving human genetic material should undergo appropriate ethical review.

2. Data access policy

Access should be granted according to academic necessity, research approval and the sensitivity of the information.

3. Secure genetic databases

Institutions should use encryption, access controls and appropriate cybersecurity safeguards.

4. Student protection

Participation in research should not become an unfair condition for admission, examination, scholarships or academic progression.

5. Researcher accountability

Faculty members, laboratory personnel and research supervisors should be subject to confidentiality and professional obligations.

6. Data retention and destruction

Genetic samples and information should not be retained indefinitely without a lawful and justified purpose.

7. Publication safeguards

Academic publications should avoid identifying participants or revealing sensitive genetic information without appropriate authorisation.

10. Hypothetical Legal Examples

Example 1: University DNA database

A university collects DNA samples from students for a genetics research project. A professor subsequently provides identifiable DNA results to a pharmaceutical company without proper authorisation.

This may raise issues of privacy violations, unlawful disclosure, breach of consent and institutional accountability.

Example 2: Genetic discrimination in admission

A university rejects an applicant because genetic testing indicates a possible hereditary disease.

Such conduct may violate constitutional equality and privacy principles, depending on the circumstances and applicable law.

Example 3: Student access to research results

A student participates in a genetic study and requests access to their own genetic results.

The university should consider the student's access rights, the original consent arrangements, the reliability of the findings and appropriate counselling requirements.

Example 4: Access to another student's DNA

A postgraduate researcher requests identifiable genetic records of another student for a dissertation.

Academic interest alone does not justify disclosure. The researcher should obtain appropriate authorisation and use de-identified data wherever possible.

11. Major Legal Challenges

The principal challenges include:

Conflict between academic freedom and genetic privacy.

Unauthorised sharing of student DNA information.

Lack of specific genetic-data legislation in India.

Genetic discrimination in admissions and educational opportunities.

Unclear ownership and control of biological samples.

Commercial exploitation of genetic research.

Re-identification of supposedly anonymous genomic data.

Cross-border sharing of university genomic databases.

Protection of minors participating in genetic research.

Long-term storage and future use of student genetic information.

12. Suggestions for Legal and Regulatory Reforms in India

India should consider developing a more specialised framework for genetic information in educational and research institutions.

The following reforms would be useful:

Specific statutory safeguards for human genetic data.

Uniform genetic-data access policies for universities.

Stronger protection against genetic discrimination.

Independent supervision of institutional genomic databases.

Mandatory research consent and confidentiality standards.

Clear rules on secondary use and commercialisation.

Special protections for minor students.

Stronger penalties for unauthorised genetic-data disclosure.

Transparent cross-border genomic data-sharing procedures.

Appropriate procedures for access, correction and deletion where legally permissible.

13. Conclusion

Student Access to Genetic Data represents an important intersection of constitutional law, biotechnology law, medical ethics, educational rights and information privacy.

Universities must balance the legitimate objectives of scientific education and research against the fundamental rights of individuals.

The decisions in K.S. Puttaswamy, Selvi, Sharda, Goutam Kundu and Bhabani Prasad Jena provide important Indian legal principles concerning privacy, bodily autonomy and scientific testing. International decisions such as S. and Marper v. United Kingdom further demonstrate the importance of limiting the retention and use of genetic information.

The fundamental legal principle is that access to genetic data for educational advancement does not create unrestricted authority over an individual's genetic identity. Students should be able to participate in scientific research without sacrificing their privacy, dignity, autonomy or protection against discrimination.

14. Important Authorities for Further Study

Constitution of India – Articles 14, 19 and 21.

Digital Personal Data Protection Act, 2023.

ICMR Ethical Guidelines for Biomedical and Health Research Involving Human Participants, 2017.

UNESCO International Declaration on Human Genetic Data, 2003.

UNESCO Universal Declaration on the Human Genome and Human Rights, 1997.

Justice K.S. Puttaswamy v. Union of India (2017).

Selvi v. State of Karnataka (2010).

Sharda v. Dharmpal (2003).

Goutam Kundu v. State of West Bengal (1993).

Bhabani Prasad Jena v. Orissa State Commission for Women (2010).

S. and Marper v. United Kingdom (2008).

Maryland v. King (2013).

Research note: The cases concerning DNA testing and genetic privacy are relevant legal precedents, but there is no general Supreme Court ruling specifically establishing a standalone right of university students to access institutional genomic research databases. Such access must be assessed under the applicable privacy, data-protection, research and institutional rules.