Jorge Eduardo Jasso Cuéllar
Technological advancements in forensic science, including as part of the investigation of mass graves, have significantly changed the way identification and forensic examinations are conducted. For example, over the past decades, forensic practice has evolved from primarily relying on fingerprints and dental records to employing highly sophisticated genetic profiling techniques. At the same time, forensic information management changed from paper records to digital databases, enabling quick access and long-term storage of large volumes of data. This digital shift increased the efficiency and accuracy of forensic investigations while improving the protection of human rights, the identification of victims, and the pursuit of truth and justice.
However, rapid technological progress brings ethical and regulatory challenges. For instance, concerns about confidentiality and privacy in forensic science have long existed. The growth and use of digital technologies intensified these dilemmas and introduced new aspects that, arguably, require fresh perspectives. The collection of sensitive personal data, especially genetic information and background data, raises questions about data protection and responsibility. As forensic databases expand and the exchange of information becomes increasingly common, it is crucial to create rules and methods to safely preserve this information and protect basic rights such as privacy, equality, non-discrimination, and due process. Ultimately, poor data protection can affect public trust in the very institutions that handle this sensitive information.
In this context, the concept of data protection emerges. It refers to the body of laws governing the collection, processing, storage and transfer of personal information. Data protection aims to safeguard individual privacy while imposing responsibilities on those who manage and use data. Worldwide, technological development led to the creation of standards and laws to regulate data management in multiple sectors, such as institutions and communications. However, in the forensic context of mass grave investigations, it is not expressly clear how related databases are curated and best protected to safeguard the interests of all parties involved. Which raises a critical question: Whilst undoubtedly it is necessary to protect data obtained from mass grave investigations, how is this best progressed and achieved? To answer this question is the task of my PhD.
Forensic investigators have a dual responsibility: to ensure that forensic investigations are effective and scientific, while respecting the dignity and privacy of the individuals involved. Investigations of mass graves involve complex factors that make them particularly sensitive contexts, as they are often the result of conflict, organised violence, or gross human rights violations. Moreover, the remains found in these contexts, and the families that are left searching for loved ones, often belong to vulnerable communities. Therefore, the mishandling of their sensitive and personal information can lead not only to privacy violations but also to discrimination or persecution.
Furthermore, the information obtained from these investigations, particularly genetic profiles, can pose a significant risk as it contains highly personal and sensitive data. Beyond identification, the data can reveal details about ethnic background, family relationships, and possible medical conditions. Then, unauthorised access or misuse can expose individuals to discrimination, criminal investigations unrelated to the original case, immigration enforcement, surveillance, or biased profiling. This highlights the importance of collecting and processing data with specific and clearly articulated objectives and, wherever possible, based on consent, given that data collected to identify victims in mass graves should not be used for undisclosed secondary purposes.
Hence, protecting this data is crucial for both ethical and legal reasons. Families provide biological samples and personal information in the hope of finding and identifying their missing relatives. If they worry that their information might be used against them or shared without permission, they may hesitate to participate. This reluctance can slow down identification processes as well as access to truth and justice. Thus, building trust with families involved, based on clear efforts that respect dignity and privacy, is likely to encourage participation and cooperation.
How to ensure data protection?
It is important to acknowledge that the question of how to ensure adequate data protection in mass grave investigations is complex and involves multiple angles. It requires careful management of databases, procedures for collection, informed consent processes, control over data access, retention policies, and chain-of-custody protocols. Each of these elements must consider the risk and possible safeguards to ensure the protection of information.
Firstly, informed consent is vital for data protection. Families providing samples must get clear information on how the data will be collected, analysed, stored, and shared. Consent should be voluntary, specific, and easy to understand, taking cultural and language differences into account. This presents a significant challenge for data management organisations, as ensuring a complete understanding of how the information will be used with those differences, adding locational differences in some cases, is fundamental to gaining the participation and trust of families. Individuals should also be made aware of their rights, including the choice to withdraw consent when possible and the limits of confidentiality.
Additionally, secure database management is also important. Personal data should be stored in encrypted systems, with access limited to authorised personnel only. Clear protocols must define who can access the information, for what purposes, and under what conditions. Besides, proper chain-of-custody procedures are crucial for maintaining the integrity of the evidence and protecting related data. Long-term retention policies should be established in advance, specifying when and how samples and data will be destroyed once identification goals are met.
Finally, planning for data breaches is crucial. If there is unauthorised access, loss, or disclosure of sensitive information, responsible authorities should notify affected individuals promptly. Transparency in breach responses reassures policymakers, legal professionals, and the public, fostering confidence and accountability. While these are just some ideas on how to ensure data protection in mass graves, in-depth multidisciplinary analyses are needed to address this problem.
In conclusion, while technological advances have significantly improved forensic investigations of mass graves, they also increase the responsibilities for data protection because the data collected in these contexts are highly sensitive and require strong safeguards. Therefore, we must strive for effective data protection frameworks that ensure identification and contribution to justice without compromising dignity, privacy, or fundamental rights.
