Rules, ethics and ownership

What triggers regulation at all

Two philosophies have been in tension since the beginning. The European Union regulates the technique: Directive 2001/18/EC on deliberate release and Regulation 1829/2003 on GM food and feed apply because of how an organism was made. The Court of Justice of the European Union confirmed that organisms produced by newer mutagenesis techniques fall within that regime, which brought gene-edited plants inside it, and a separate legislative proposal on new genomic techniques has been working through the EU institutions since.

The United States regulates the product, under the Coordinated Framework for Regulation of Biotechnology, which distributes responsibility between the USDA, the FDA and the EPA according to what the organism does rather than how it was made. The United Kingdom has taken a third route with the Genetic Technology (Precision Breeding) Act, which creates a lighter pathway for plants — and, in a later phase, animals — where the genetic change could have occurred through traditional breeding.

None of these is obviously right. Process-based rules capture novelty consistently but treat indistinguishable outcomes differently. Product-based rules treat like with like but depend on being able to define and detect the relevant characteristic. Detection matters commercially: if an edited plant carries no foreign DNA, an importer enforcing a process-based rule may have no analytical way to tell.

The international layer

The Cartagena Protocol on Biosafety, adopted under the Convention on Biological Diversity, governs transboundary movement of living modified organisms through advance informed agreement and the Biosafety Clearing-House. Its supplementary Nagoya–Kuala Lumpur Protocol addresses liability and redress. The Nagoya Protocol, a separate instrument, covers access to genetic resources and the fair and equitable sharing of benefits arising from their use — the framework behind national access permits for sampling biological material.

The unresolved argument there concerns digital sequence information. If a sequence is published in a public database and a company uses it without ever handling the physical sample, the original access-and-benefit-sharing logic does not obviously bite. Parties to the Convention have been negotiating a multilateral mechanism to handle exactly that, and it is the live fault line between open science norms and sovereignty over biological resources.

Human editing: the somatic line

There is broad international agreement on one distinction. Somatic editing changes cells in one person and is regulated as a medicine, with the usual trial and approval machinery. Heritable editing changes embryos or gametes so that the change passes to descendants, and it is prohibited or unlawful in a large number of countries; the Council of Europe's Oviedo Convention contains an explicit prohibition for its parties.

The announcement in China of babies born from edited embryos produced near-universal condemnation from scientific bodies and led to criminal proceedings under Chinese law. In its wake the World Health Organization convened an expert advisory committee that published a governance framework and recommendations covering registries, oversight and whistleblowing, and the international summit series on human genome editing has continued to argue that heritable editing is not currently acceptable.

Ethically the argument is not only about safety. It touches consent from people who do not yet exist, the difference between treating disease and selecting traits, and the risk of narrowing what counts as an acceptable human body. Those questions do not resolve with better off-target data.

Ownership

Patents shaped this field early. In the United States, the Supreme Court held in Association for Molecular Pathology v. Myriad Genetics that isolated naturally occurring DNA is not patent-eligible, while complementary DNA may be. The CRISPR patent position has been contested for years between the Broad Institute and the University of California and its partners, with proceedings before the US Patent Trial and Appeal Board and separate outcomes at the European Patent Office — which is why licensing for a given application can depend on jurisdiction.

In agriculture, plant variety protection under the UPOV framework sits alongside patents, and the interaction between the two determines whether a farmer may save seed and whether a breeder may use a protected variety for further breeding. That is a policy choice, not a technical consequence.

Biosecurity and data

Synthesising DNA to order raises dual-use concerns, and the response has been largely voluntary: members of the International Gene Synthesis Consortium screen orders and customers against sequences of concern, and several governments have issued screening guidance for federally funded work. Whether voluntary screening is sufficient as benchtop synthesis becomes more widely available is an open policy question.

Genetic data is also personal data. Under the GDPR, data concerning health and genetic data are special categories with a higher bar for lawful processing. In the United States, the Genetic Information Nondiscrimination Act restricts the use of genetic information in health insurance and employment, though its coverage has recognised gaps. For consumer genomics, the practical issues are secondary use, onward sharing with research partners, and what happens to a database if the company changes hands.

This page describes frameworks; it is not legal advice, and anyone with an actual compliance question should take it to a qualified lawyer in the relevant jurisdiction.