WHOLE-GENOME SEQUENCING REGULATORY FRAMEWORK AND LEGAL GOVERNANCE IN RUSSIA

1. INTRODUCTION

Whole-genome sequencing (WGS) is an advanced biotechnology technique used to determine the complete DNA sequence of an individual's genome. It enables researchers and healthcare professionals to identify genetic variations, inherited disorders, disease-associated mutations and potential genetic predispositions.

In Russia, whole-genome sequencing is relevant to clinical diagnostics, personalised medicine, population genetics, infectious-disease surveillance, biotechnology research and pharmaceutical development.

Russia does not have one comprehensive federal statute exclusively governing all whole-genome sequencing activities. Instead, WGS is regulated through several interconnected legal frameworks covering medical practice, genetic research, personal data, genetic engineering, bioethics and public-health surveillance.

The principal regulatory objective is to ensure that genomic information is collected and processed lawfully, medical sequencing is scientifically reliable, research participants are adequately protected and sensitive genetic information is not unlawfully disclosed or commercialised.

2. PRINCIPAL LEGISLATIVE FRAMEWORK

A. FEDERAL LAW NO. 323-FZ OF 21 NOVEMBER 2011 ON THE FUNDAMENTALS OF HEALTH PROTECTION

This legislation provides the principal framework for medical activities involving whole-genome sequencing.

Its important provisions include:

Article 13: Medical confidentiality.

Article 19: Patient rights.

Article 20: Informed voluntary consent to medical intervention.

Article 22: Patients' rights to receive information concerning their health.

Article 37: Organisation and provision of medical care according to applicable procedures and standards.

Where WGS is used for clinical diagnosis, medical institutions must comply with applicable requirements concerning medical intervention, confidentiality and patient information.

B. FEDERAL LAW NO. 152-FZ OF 27 JULY 2006 ON PERSONAL DATA

Whole-genome sequencing produces information capable of revealing highly sensitive details about individuals.

This legislation establishes requirements concerning the processing of personal information.

Important provisions include:

Article 5 – Principles and purposes of personal-data processing.

Article 6 – Legal grounds for processing.

Article 7 – Confidentiality of personal data.

Article 10 – Special categories of personal data.

Article 11 – Biometric personal data.

Article 12 – Cross-border transfer of personal data.

Article 18 – Obligations concerning the collection of personal data.

Article 19 – Personal-data security measures.

Genetic information is not automatically classified as biometric personal data under Article 11 merely because it originates from DNA sequencing. The specific legal classification depends on whether it is processed to establish an individual's identity.

However, identifiable genomic information can constitute personal data and may receive additional protection where it reveals health information or another special category of personal data.

C. FEDERAL LAW NO. 86-FZ OF 5 JULY 1996 ON STATE REGULATION IN THE FIELD OF GENETIC ENGINEERING ACTIVITIES

This legislation regulates relevant genetic-engineering activities and establishes biosafety safeguards.

Its relevance to WGS includes situations involving genetic modification, genetically engineered organisms and associated research operations.

It is important to distinguish sequencing from genetic engineering: analysing an existing DNA sample does not automatically constitute genetic modification.

D. FEDERAL LAW NO. 61-FZ OF 12 APRIL 2010 ON THE CIRCULATION OF MEDICINES

This legislation becomes relevant when whole-genome sequencing is used in pharmaceutical development, clinical trials, pharmacogenomics or the development of personalised medicinal products.

It establishes requirements concerning medicinal-product registration, clinical investigations, pharmaceutical quality and pharmacovigilance.

E. FEDERAL LAW NO. 242-FZ OF 29 JULY 2017 ON CITIZENS' HEALTH PROTECTION IN TERMS OF ENSURING INFORMATION SECURITY IN THE HEALTH SECTOR

This legislation introduced important amendments concerning the development of healthcare information systems and the protection of information in the healthcare sector.

It is relevant to digital genomic databases, electronic medical records and information systems used by healthcare institutions.

3. REGULATORY REQUIREMENTS FOR WHOLE-GENOME SEQUENCING

A. INFORMED CONSENT AND GENOMIC TESTING

Medical institutions and research organisations must establish an appropriate legal basis for collecting and processing biological samples and associated genomic information.

Consent documentation should explain:

The purpose of whole-genome sequencing.

The type of genetic information being analysed.

Whether incidental findings may be identified.

Whether results will be communicated to participants.

Whether information will be used for future research.

Whether genomic information will be shared with third parties.

Applicable storage and retention arrangements.

The available rights concerning personal information.

Consent to diagnostic sequencing should not automatically be treated as consent to unrelated commercial research.

B. GENOMIC DATA STORAGE AND LOCALISATION

Whole-genome sequencing generates extensive datasets that may be stored in hospitals, research laboratories, cloud systems and national research databases.

Article 18(5) of Federal Law No. 152-FZ establishes database-localisation requirements for specified processing operations involving personal data of Russian citizens.

Organisations must assess whether their genomic databases fall within these requirements.

Additional safeguards may be necessary when genomic datasets are transferred to international research partners.

C. CLINICAL VALIDATION AND LABORATORY QUALITY

Clinical WGS laboratories should establish quality-management systems covering:

Sample identification and traceability.

DNA extraction and preparation.

Sequencing accuracy.

Contamination prevention.

Variant-calling validation.

Bioinformatics quality assurance.

Interpretation of pathogenic variants.

Secure reporting of results.

Clinical findings should be interpreted by appropriately qualified professionals.

D. GENOMIC RESEARCH AND BIOBANKING

Whole-genome sequencing may involve long-term storage of biological samples and genomic information.

Research organisations should establish transparent governance policies addressing sample ownership or control, participant consent, permitted research purposes, access restrictions, retention periods and future use.

The legal treatment of biological samples and associated digital genomic records should be assessed separately.

E. POPULATION GENOMICS AND PUBLIC-HEALTH SURVEILLANCE

WGS can support national genetic research, infectious-disease surveillance and population-health programmes.

However, population-scale sequencing raises concerns regarding privacy, discrimination, secondary data use and the identification of individuals or biological relatives.

Public-health objectives do not automatically remove the requirement for a lawful basis for processing identifiable genomic information.

4. REGULATORY AUTHORITIES AND INSTITUTIONAL RESPONSIBILITIES

1. MINISTRY OF HEALTH OF THE RUSSIAN FEDERATION

Responsible for healthcare policy and relevant regulatory requirements concerning medical genetic testing and clinical practice.

2. ROSZDRAVNADZOR

The Federal Service for Surveillance in Healthcare supervises relevant healthcare activities and medical-device regulation within its statutory competence.

3. ROSKOMNADZOR

Supervises compliance with personal-data legislation, including relevant requirements concerning genomic information.

4. ROSPOTREBNADZOR

Exercises public-health and sanitary-epidemiological supervisory functions relevant to biological safety and public-health activities.

5. MINISTRY OF SCIENCE AND HIGHER EDUCATION

Oversees relevant scientific research and higher-education policy.

5. IMPORTANT CASE LAWS AND JUDICIAL AUTHORITIES

There is no established body of reported Russian judicial decisions specifically determining the legal requirements for whole-genome sequencing. The following judgments provide direct or analogous principles concerning genetic privacy, medical confidentiality, personal autonomy and biological information.

1. KONOVALOVA v. RUSSIA (2014) — DIRECT RUSSIAN MEDICAL-PRIVACY AUTHORITY

The European Court of Human Rights examined the presence of medical students during childbirth without adequately established consent.

The Court considered the protection of private life and medical autonomy under Article 8 of the European Convention on Human Rights.

Relevance: Clinical WGS must respect patient privacy and provide appropriate information concerning medical investigations and the use of clinical information.

2. S. AND MARPER v. THE UNITED KINGDOM (2008) — ANALOGOUS GENETIC-DATA AUTHORITY

The Grand Chamber examined the indefinite retention of fingerprints and DNA profiles belonging to individuals who had not been convicted.

It found that indiscriminate retention violated Article 8.

Relevance: This is particularly important for genomic databases because whole-genome information can reveal substantially more about an individual than a conventional identification profile. Retention and secondary use therefore require appropriate safeguards.

3. AYÇAGUER v. FRANCE (2017) — ANALOGOUS DNA-DATABASE AUTHORITY

The European Court of Human Rights examined the retention of DNA profiles in a national database and the proportionality of the retention arrangements.

The judgment emphasised the importance of safeguards governing the retention of genetic identification information.

Relevance: Russian genomic research institutions should establish proportionate retention and access-control policies for identifiable genomic information.

4. GASKIN v. THE UNITED KINGDOM (1989) — ANALOGOUS PERSONAL-INFORMATION ACCESS AUTHORITY

The Court examined access to confidential records concerning an individual's childhood and personal history.

It recognised the importance of access to information relating to personal identity and development.

Relevance: The judgment provides analogous guidance for governance policies addressing access to personal genomic information and the rights of individuals concerning their records.

5. GLASS v. THE UNITED KINGDOM (2004) — ANALOGOUS INFORMED-CONSENT AUTHORITY

The Court examined medical treatment administered despite parental opposition without appropriate judicial authorisation.

It found a violation of Article 8.

Relevance: The judgment supports the importance of lawful medical decision-making and consent safeguards when WGS is incorporated into clinical treatment.

6. V.C. v. SLOVAKIA (2011) — ANALOGOUS GENETIC AND BODILY-AUTONOMY AUTHORITY

The Court examined sterilisation performed without valid informed consent.

It emphasised the protection of bodily integrity and personal autonomy.

Relevance: Genetic testing and biological sampling should respect individual autonomy, particularly where sequencing may reveal sensitive inherited characteristics.

These cases are comparative interpretative authorities rather than direct judgments concerning Russian whole-genome sequencing legislation. The European Convention ceased to apply to Russia in respect of acts or omissions occurring after 16 September 2022, although earlier judgments remain relevant to historical legal analysis.

6. LIABILITY AND REGULATORY ENFORCEMENT

Violations involving whole-genome sequencing may result in administrative, civil or criminal consequences.

A. ADMINISTRATIVE LIABILITY

Article 13.11 of the Russian Code of Administrative Offences provides administrative liability for various violations of personal-data legislation.

Healthcare and laboratory organisations may face sanctions for unlawful processing, inadequate protection or other statutory violations.

B. CIVIL LIABILITY

Individuals may pursue appropriate claims where unlawful disclosure of genomic information, defective medical services or negligent diagnostic interpretation causes legally recognised harm.

C. CRIMINAL LIABILITY

Article 137 of the Russian Criminal Code may become relevant where unlawful collection or disclosure of information concerning private life satisfies its statutory elements.

Other criminal provisions may apply to unlawful access to protected computer information or conduct involving serious professional negligence.

D. INSTITUTIONAL AND REGULATORY LIABILITY

Regulatory authorities may impose corrective measures, administrative penalties or other statutory consequences for violations of applicable healthcare, laboratory and data-protection requirements.

7. PRACTICAL COMPLIANCE REQUIREMENTS

Russian hospitals, sequencing laboratories, universities and biotechnology companies should:

Establish the correct legal classification of each sequencing activity.

Obtain an appropriate legal basis for biological-sample collection and genomic-data processing.

Maintain documented informed-consent procedures.

Implement validated sequencing and bioinformatics quality systems.

Establish clear policies for incidental findings.

Protect identifiable genomic information under Federal Law No. 152-FZ.

Review database-localisation and cross-border transfer requirements.

Establish controlled access to genomic databases.

Define retention and deletion policies consistent with applicable legal obligations.

Separate clinical diagnostic sequencing from unrelated research and commercial activities.

Establish independent ethical review where required.

Maintain procedures for investigating genomic-data breaches.

8. CONCLUSION

Whole-genome sequencing in Russia is governed through an interconnected framework of healthcare, personal-data protection, genetic-engineering, pharmaceutical and scientific-research legislation.

Federal Laws Nos. 323-FZ, 152-FZ, 86-FZ and 61-FZ provide important legal foundations for medical sequencing, genomic privacy, biotechnology research and pharmaceutical applications.

The most significant regulatory challenges concern informed consent, genomic-data confidentiality, database localisation, international research collaboration, clinical accuracy and the long-term protection of genetic information.

Although direct Russian judicial precedent specifically concerning whole-genome sequencing remains limited, decisions involving DNA databases, medical privacy and bodily autonomy provide useful interpretative guidance.

Ultimately, a legally compliant WGS system must combine scientific reliability, lawful data processing, patient autonomy, strong cybersecurity and responsible genomic research governance.