What Biological Sovereignty Actually Requires

Biological sovereignty has a founding document, and it was written in response to atrocity. On August 19, 1947, the American military tribunal at Nuremberg delivered its verdict in the Doctors' Trial -- the prosecution of 23 German physicians for conducting medical experiments on concentration camp prisoners without consent. The verdict included ten principles that defined the boundary between legitimate medical research and assault on the body. The first principle established the foundation: "The voluntary consent of the human subject is absolutely essential." Not conditionally essential. Not generally advisable. Absolutely essential. The Nuremberg Code did not qualify this requirement with exceptions for military necessity, scientific importance, or public health benefit. The body's consent was placed as a precondition that no external purpose could override.

The significance of the Nuremberg Code extends beyond its specific application to medical experimentation. It established a principle: the body is not available for use by others without the explicit, informed, voluntary agreement of the person whose body it is. This principle had precedents in philosophy -- Kant's categorical imperative, Locke's self-ownership, Mill's harm principle -- but the Nuremberg Code was the first time it was codified as an enforceable standard of international law. The atrocities that produced it demonstrated what happens when the body is treated as a resource for external purposes: not merely harm to individuals but the systematic dismantling of the boundary between persons and things that all ethical systems depend upon.

The Nuremberg Code's limitation was its scope. It applied specifically to medical experimentation. It did not address the broader uses of the body -- commercial, governmental, informational -- that would proliferate over the following eight decades. It did not anticipate genetic databases, biometric surveillance, or the continuous extraction of biological data through consumer devices. But its foundational principle -- that the body requires consent before it can be used -- remains the bedrock on which all subsequent biological sovereignty frameworks are built. Every gap in biological protection that this paper identifies is, at root, a failure to extend the Nuremberg principle to domains its authors could not have foreseen.

The Declaration of Helsinki, adopted by the World Medical Association in 1964 and revised seven times through 2013, extended the Nuremberg principles from the specific context of wartime experimentation to the general practice of medical research. Where the Nuremberg Code addressed the extreme case -- involuntary experimentation by state actors -- Helsinki addressed the routine case: the everyday practice of clinical research in which subjects must be protected from the pressures of institutional authority, financial incentive, and their own desire to contribute to medical progress. Helsinki introduced the requirement of ethics committee review, the principle of equipoise in clinical trials, and the obligation to make proven interventions available to research participants after the trial concludes.

Helsinki also relaxed one critical Nuremberg protection. Where the Nuremberg Code required that consent be obtained from the subject personally and without any element of force, fraud, deceit, duress, or other form of constraint, Helsinki permitted proxy consent -- consent given by a legally authorized representative for subjects who could not consent for themselves. This relaxation was medically necessary for pediatric and incapacitated-patient research, but it established a precedent: the body's consent could, under specified conditions, be given by someone other than the person whose body was at issue. This precedent would be extended, through subsequent legal and commercial frameworks, far beyond its original medical justification.

The UNESCO Universal Declaration on Bioethics and Human Rights, adopted on October 19, 2005, represented the most comprehensive international attempt to codify biological sovereignty principles. Article 3 established that "the interests and welfare of the individual should have priority over the sole interest of science or society." Article 5 required that "the autonomy of persons to make decisions, while taking responsibility for those decisions and respecting the autonomy of others, is to be respected." Article 6 specified that "any preventive, diagnostic and therapeutic medical intervention is only to be carried out with the prior, free and informed consent of the person concerned, based on adequate information." Article 9 addressed privacy and confidentiality of personal information, including genetic data.

The UNESCO Declaration is significant because it moved biological sovereignty from the domain of research ethics into the domain of human rights. Bodily autonomy was not merely a procedural requirement for investigators. It was a fundamental right of persons -- a right that imposed obligations on states, institutions, and commercial actors. The Declaration's limitation, however, was its enforceability. As a declaration rather than a treaty, it established norms rather than binding legal obligations. Nations could endorse the principles while maintaining domestic legal frameworks that permitted extensive biological data extraction, genetic commodification, and commercial use of biometric information without meaningful consent.

The Genetic Information Nondiscrimination Act of 2008 (GINA) was the United States' primary legislative response to the biological sovereignty challenges created by the Human Genome Project. GINA prohibited the use of genetic information in two specific domains: health insurance (Title I) and employment (Title II). Health insurers could not use genetic test results to deny coverage, adjust premiums, or impose preexisting condition exclusions. Employers could not use genetic information in hiring, firing, job placement, or promotion decisions. The law prohibited insurers and employers from requiring or requesting genetic testing or intentionally obtaining genetic information about individuals.

GINA's protections were real but circumscribed. The law did not cover life insurance, long-term care insurance, short-term disability insurance, or long-term disability insurance. A person whose genetic test revealed a predisposition to Alzheimer's disease was protected from discrimination by their health insurer and employer but not by their life insurer or long-term care provider -- precisely the institutions whose products would be most relevant to the condition. GINA applied only to employers with 15 or more employees, leaving workers at smaller firms unprotected. The law addressed discrimination based on genetic information but did not address the collection, storage, sale, or transfer of genetic data by commercial entities operating outside the health insurance and employment contexts.

The 23andMe bankruptcy exposed the most critical gap. When the company filed for Chapter 11 protection in March 2025, the genetic data of over 15 million customers became an asset in a commercial transaction. Existing privacy laws in every U.S. state contained exemptions for data transfers during bankruptcy proceedings, rendering consumers' right to opt out of data sales functionally useless. GINA's protections against discrimination were irrelevant -- the issue was not whether the data would be used to discriminate against individuals but whether the data could be sold at all. The answer, under existing law, was yes. Genetic information -- immutable, heritable, uniquely identifying -- was legally indistinguishable from any other business asset in a bankruptcy proceeding.

The American Civil Liberties Union has noted that GINA is now over 15 years old and urgently needs updating to address epigenetic data, microbiome data, and the novel forms of biological information that genomic advances have made available since 2008. The Don't Sell My DNA Act, introduced in Congress following the 23andMe bankruptcy, represents an initial attempt to classify genetic data as personally identifiable information under the Bankruptcy Code. But the structural problem extends far beyond bankruptcy: there is no comprehensive federal framework governing the collection, use, sale, or transfer of biological data by commercial entities. The Nuremberg principle -- that the body requires consent before it can be used -- has no operational expression in the domain of commercial biological data extraction.

Bodily autonomy occupies a contested position in constitutional law. In the United States, there is no explicit constitutional right to bodily autonomy. The protections that exist have been constructed through judicial interpretation of the Fourth Amendment (protection against unreasonable searches and seizures), the Fourteenth Amendment (due process and equal protection), and the common law doctrine of bodily integrity. The Supreme Court recognized a constitutional right to refuse unwanted medical treatment in Cruzan v. Director, Missouri Department of Health (1990), grounding it in the liberty interest protected by the Due Process Clause. The Court's reasoning acknowledged a "constitutionally protected liberty interest in refusing unwanted medical treatment" that derived from the common law tradition of informed consent.

The reproductive autonomy dimension of bodily sovereignty has been the most politically contested. Roe v. Wade (1973) grounded reproductive rights in a right to privacy derived from the penumbras of the Bill of Rights. Planned Parenthood v. Casey (1992) reformulated the right in terms of liberty and the concept of "ordered liberty," while permitting state regulation that did not impose an "undue burden." Dobbs v. Jackson Women's Health Organization (2022) overturned both precedents, holding that the Constitution does not confer a right to abortion and returning regulatory authority to individual states. The doctrinal instability of reproductive autonomy in American constitutional law illustrates a broader structural problem: bodily sovereignty protections that depend on judicial interpretation of implied rights are inherently vulnerable to judicial reversal.

International constitutional frameworks provide instructive contrasts. The German Basic Law (Grundgesetz) establishes in Article 1 that "human dignity shall be inviolable" and in Article 2 that "every person shall have the right to free development of his personality insofar as he does not violate the rights of others" and "every person shall have the right to life and physical integrity." The South African Constitution explicitly protects "the right to bodily and psychological integrity" in Section 12(2), including "the right to make decisions concerning reproduction" and "the right not to be subjected to medical or scientific experiments without informed consent." These constitutional provisions establish bodily sovereignty as an explicit, textually grounded right rather than an implicit derivation from other rights.

The constitutional dimension matters because it determines the hierarchy of competing interests. When biological data extraction is challenged legally, the question becomes whether the individual's interest in controlling their biological information outweighs the commercial interest in processing it. Without an explicit constitutional grounding for bodily sovereignty, this balance is determined by legislatures subject to commercial lobbying pressure -- the same commercial interests that profit from biological data extraction. A complete biological sovereignty framework would require constitutional-level protection for the body and its data, not merely statutory protections that can be amended, waived through terms-of-service agreements, or rendered inapplicable through bankruptcy exemptions.

Biological sovereignty, synthesized from the documentary record of the frameworks that have attempted to establish it, requires five conditions. First, informed consent as an absolute precondition for any collection, use, or transfer of biological data -- extending the Nuremberg principle from the medical research context to all commercial and governmental uses of biological information. This means consent that is specific (not buried in omnibus terms-of-service agreements), revocable (the subject can withdraw consent and require deletion of data at any time), and non-transferable (consent given to one entity cannot be transferred to another through sale, merger, or bankruptcy).

Second, inalienability of biological data as a category. The 23andMe bankruptcy demonstrated that current legal frameworks treat genetic data as a transferable commercial asset. Biological sovereignty requires that certain categories of data -- genetic sequences, biometric identifiers, continuous health monitoring data -- be classified as inalienable: incapable of being sold, transferred, or seized, regardless of the contractual or legal context. This is not a novel legal concept. Many jurisdictions already classify certain rights as inalienable -- the right to vote, the right to bodily integrity in criminal law, the right to refuse slavery. Extending inalienability to biological data follows the same logic: some aspects of the person are not available for commercial transaction.

Third, constitutional-level protection for bodily autonomy that is explicit rather than inferred. The doctrinal instability of bodily autonomy in American constitutional law -- where reproductive rights were recognized, qualified, and then reversed over a fifty-year period -- demonstrates that implied protections are insufficient for rights that commercial and political interests have incentives to erode. The South African constitutional model, which explicitly protects "the right to bodily and psychological integrity," provides a template.

Fourth, institutional structures that make biological sovereignty practically exercisable. The Nuremberg principle of informed consent is meaningless if the information environment makes informed decision-making impossible. A biological sovereignty framework requires: mandatory plain-language disclosure of all biological data collection practices; independent oversight bodies with authority to audit biological data processing; public registries of entities that collect, process, and monetize biological data; and legal standing for individuals and communities to challenge biological data practices without the prohibitive cost of private litigation. The indigenous data sovereignty movements -- particularly the OCAP (Ownership, Control, Access, Possession) and CARE (Collective Benefit, Authority to Control, Responsibility, Ethics) frameworks developed by indigenous communities to govern the use of their genetic and health data -- provide operational models for what institutional biological sovereignty infrastructure looks like in practice.