For centuries, nations measured power through territory, military strength and economic resources. In the 20th century, oil became the strategic commodity that shaped geopolitics. In the 21st century, data has emerged as the new currency of power. Yet an even more consequential category of data is quietly accumulating across digital platforms worldwide: reproductive data.
Millions of women today voluntarily share intimate information through fertility trackers, menstrual health applications, pregnancy-monitoring platforms, wearable health devices and AI-driven wellness ecosystems. These technologies promise convenience, health insight and personalised care. What remains largely unexplored is the strategic significance of the vast repositories of reproductive information now being generated and analysed through artificial intelligence.
As governments race to establish AI dominance and data sovereignty, reproductive data may soon emerge as one of the most sensitive forms of strategic intelligence. The convergence of artificial intelligence, digital health technologies, fertility analytics, biometric surveillance and cross-border data flows has created a new security frontier that remains almost absent from India’s national security discourse. This article argues that it should not remain absent for long and draws on recent, documented incidents from four jurisdictions to show why.
Beyond Privacy: The Rise of Demographic Intelligence
The debate surrounding fertility applications has largely been confined to privacy law. Privacy matters, but the national security implications are potentially far more significant.
Historically, governments relied on censuses, surveys and public-health records to understand demographic patterns. Today, AI systems can process millions of individual data points in real time, building predictive models of population behaviour, reproductive trends, migration patterns and future workforce dynamics.
A fertility application does not merely record menstrual cycles. It can capture reproductive intentions, pregnancy planning, contraceptive use, sexual activity, lifestyle habits, emotional patterns, health conditions and behavioural preferences. Aggregated across millions of users, this becomes demographic intelligence capable of revealing regional fertility decline, population-ageing patterns, maternal-health vulnerabilities, future birth-rate projections, migration trends and long-term workforce availability.
For strategic planners, these are not merely health indicators. They are indicators of future national power. A state’s capacity to sustain economic growth, maintain industrial productivity, recruit military personnel and preserve social stability is directly influenced by demographic resilience. Reproductive data, at scale, is no longer simply personal information; it is strategic intelligence.
The Emergence of Reproductive Surveillance
The digital transformation of healthcare has introduced what may be termed reproductive surveillance. Traditionally, reproductive information existed within confidential doctor-patient relationships. Today, it is increasingly stored within cloud-based commercial ecosystems operating across multiple jurisdictions.
AI systems can infer not only current health conditions but future reproductive choices, fertility probabilities, pregnancy intentions and behavioural vulnerabilities. Unlike traditional surveillance, which observes present activity, AI-driven reproductive surveillance predicts future action. The concern is no longer simply whether information has been disclosed; it is whether algorithms can generate intelligence from data that individuals never consciously intended to reveal. The four case studies below illustrate how this risk has already moved from theory to documented practice.
Four Warnings from the Field
Reproductive-data risk is not speculative. It has already produced regulatory action, criminal prosecutions, allegations of demographic engineering, and a domestic breach scare in India itself. Each episode below carries a distinct lesson for security planners.
1. Flo Health and the Commercial Harvesting of Reproductive Data
Flo Health’s period and ovulation tracker became, at its peak, the most downloaded health application on the Apple App Store, used by more than a hundred million people worldwide. In 2021, the US Federal Trade Commission found that the company had, for years, shared sensitive data, including the fact of a user’s pregnancy, with Facebook, Google and other analytics firms, despite promising to keep that information private. A subsequent class-action lawsuit, Frasco v. Flo Health, alleged that the app disclosed information on menstruation, sex drive, contraceptive methods and mental wellbeing to third parties who faced no contractual limits on how they used it; the litigation produced settlements running into tens of millions of dollars through 2025.
The lesson: commercial femtech platforms routinely aggregate reproductive data at a scale and granularity that no single government census could replicate and that data moves through advertising pipelines few users ever see.
Millions of women share intimate information through fertility trackers, menstrual health applications, pregnancy-monitoring platforms, wearable health devices and AI-driven wellness ecosystems. What remains largely unexplored is the strategic significance of the vast repositories of reproductive information now being generated and analysed through artificial intelligence
2. Post-Dobbs America: When Period Data Becomes Prosecutorial Evidence
Following the 2022 US Supreme Court decision in Dobbs v. Jackson Women’s Health Organisation, which ended federal constitutional protection for abortion, researchers and advocacy groups documented a sharp rise in the use of digital records in pregnancy-related prosecutions. The advocacy organisation Pregnancy Justice identified over two hundred criminal cases in the year after Dobbs alone tied to pregnancy, abortion, or pregnancy loss. Legal analysts and privacy researchers have since warned that data held on centralised servers as opposed to on-device storage remains vulnerable to subpoena, and several US states have pursued out-of-state medical records in abortion-related investigations.
Whether or not any single prosecution has yet relied directly on period-tracker data, the structural vulnerability is now well established: reproductive data held in the cloud can be compelled through legal process, turning a health app into a potential instrument of the state against the very individual it was designed to serve.
3. Xinjiang: Reproductive Data as an Instrument of Demographic Engineering
The most extreme illustration of reproductive data as a security instrument comes from China’s Xinjiang region. A 2020 Associated Press investigation, drawing on government statistics, internal documents and interviews with former detainees, found that Uyghur and other minority women were subjected to mass pregnancy checks, forced IUD insertion and sterilisation, with birth rates in some Uyghur-majority prefectures falling by more than 60% between 2015 and 2018. Independent researchers have linked these measures to Xinjiang’s broader digital-surveillance architecture, including predictive-policing platforms that flag individuals for detention based on aggregated behavioural and biometric data. Beijing has strongly disputed this characterisation, describing the underlying research as politically motivated.
Whatever one’s assessment of the competing claims, the episode demonstrates something security planners cannot ignore: reproductive and demographic data, once centralised and computationally tractable, can become a lever for coercive population policy rather than merely a health-management tool.
4. CoWIN: India’s Own Reminder of Fragile Health-Data Sovereignty
India need not look abroad for a cautionary tale. In June 2023, reports emerged that a Telegram bot was returning the personal details of citizens registered on CoWIN, the government’s COVID-19 vaccination portal, including Aadhaar, passport and voter-ID numbers, dates of birth and vaccination centres, simply in response to a phone number query. The Ministry of Health disputed that the CoWIN database itself had been breached, attributing the exposure to previously compromised data circulating elsewhere, and asked CERT-In to investigate. Opposition leaders called it “a matter of serious national concern.”
Regardless of the precise technical origin of the leak, the episode revealed how quickly a large, centralised, government-linked health dataset, encompassing identity documents alongside medical status, can surface in unauthorised channels, and how contested the question of accountability becomes once it does. A comparable exposure involving reproductive or maternal-health data, linked to Aadhaar or the Ayushman Bharat Digital Mission, would carry graver consequences still, given the sensitivity of the underlying information and its demographic granularity.
Why Defence Analysts Should Pay Attention
At first glance, fertility data may appear unrelated to national security. The reality is different.
Modern security increasingly extends beyond military platforms into information systems, cyberspace, artificial intelligence and societal resilience. The concept of national security has evolved from protecting borders to protecting the systems that sustain national power and population resilience is one of those systems.
A fertility application can reveal reproductive intentions, pregnancy planning, health conditions and behavioural preferences. Aggregated across millions of users, this becomes demographic intelligence capable of revealing regional fertility decline, population ageing patterns, maternal health vulnerabilities, future birth rate projections, migration trends, and long-term workforce availability
A country experiencing demographic decline faces a shrinking defence recruitment pool, a contracting labour force, rising social-welfare burdens, economic stagnation and reduced long-term strategic competitiveness. Consequently, access to predictive demographic intelligence offers real insight into a nation’s future trajectory. An adversary no longer needs espionage networks alone to understand demographic vulnerabilities; large-scale commercial data ecosystems may offer unprecedented visibility into societal trends. The strategic competition of the future may therefore involve not only control over technology but control over the data that shapes demographic forecasting.
The Constitutional Dimension
For legal scholars, reproductive data raises profound constitutional questions. The Supreme Court of India, in Justice K.S. Puttaswamy v. Union of India (2017), recognised privacy as a fundamental right under Article 21 and affirmed informational privacy, bodily integrity and decisional autonomy as essential elements of human dignity. Reproductive choices are intrinsically linked to these protections.
But artificial intelligence introduces complexities that constitutional jurisprudence has only begun to address. Traditional privacy law protects information that an individual discloses. Artificial intelligence increasingly generates intelligence through inference. A fertility platform may never directly ask whether a woman intends to conceive, yet predictive algorithms may infer that possibility with considerable accuracy from behavioural patterns and health indicators alone.
This is the challenge of predictive reproductive surveillance. The constitutional question extends beyond informational privacy: it concerns whether individuals retain meaningful autonomy when algorithms can anticipate intimate life decisions before those decisions are consciously made.
Towards a Doctrine of Reproductive Data Sovereignty
India’s national-security framework already recognises that certain categories of information possess strategic value. Defence intelligence, critical-infrastructure data, geospatial information and strategic communications are treated as sensitive assets precisely because of their security implications.
It is time to ask a new question: should large-scale reproductive datasets be treated as strategic national assets? This article proposes the concept of Reproductive Data Sovereignty, the principle that reproductive information generated by a nation’s population possesses strategic significance and must be governed in a manner that protects both individual rights and collective national interests.
The rationale is straightforward. When reproductive information from millions of citizens is aggregated and analysed through AI systems, it ceases to be merely personal data and becomes demographic intelligence capable of influencing economic planning, public policy, security forecasting and geopolitical assessment. Scholarship on collective privacy has similarly argued that reproductive-health data affects not only individuals but families, communities and broader social groups, a point the Flo Health and Xinjiang case studies both illustrate, at very different scales and for very different reasons.
Is India’s Data Protection Framework Adequate?
India has taken meaningful steps towards data governance through the Digital Personal Data Protection Act, 2023, which protects digital personal data while balancing legitimate processing requirements and establishes obligations for data fiduciaries, rights for individuals, and mechanisms for enforcement and grievance redressal.
The digital transformation of healthcare has introduced what may be termed reproductive surveillance. Traditionally, reproductive information existed within confidential doctor-patient relationships. Today, it is increasingly stored within cloud-based commercial ecosystems operating across multiple jurisdictions
However, the existing framework remains centred on privacy, consent and data processing. It was not specifically designed to address AI-driven demographic profiling, predictive reproductive analytics, strategic population intelligence, the national-security implications of reproductive datasets, or the cross-border exploitation of reproductive information. This is an important regulatory gap. The CoWIN episode showed how quickly a large government-linked health dataset can become a point of public anxiety even in the absence of a confirmed breach; a similar incident involving reproductive or maternal-health records, increasingly digitised through the Ayushman Bharat Digital Mission, would test a framework that was not built with demographic-security consequences in mind.
The law protects the citizen as a data principal. It does not yet fully address the protection of the nation as a demographic entity. As India continues to implement and strengthen its data-protection regime, policymakers may need to examine whether particularly sensitive health and reproductive datasets require enhanced safeguards, localisation measures or strategic oversight.
A Feminist National Security Perspective
The strategic significance of reproductive data also demands a feminist national-security approach. Traditional security frameworks focus on states, territory and military threats. Feminist security scholarship reminds us that the security of individuals is inseparable from the security of nations.
Women’s organisations are increasingly becoming sites of data extraction. Their reproductive choices generate commercially valuable datasets. Their health information fuels AI models and digital-health ecosystems and, as Xinjiang shows in its starkest form, can be turned against the very communities that generate it. The governance of reproductive data is therefore not simply a question of privacy. It is a question of autonomy, dignity, technological justice and national resilience.
The transformation of reproductive experience into an algorithmic resource requires legal and policy responses that treat women not merely as data subjects, but as rights-bearing citizens whose information carries both personal and strategic significance.
Policy Directions
Four steps merit early consideration by Indian policymakers and security planners:
- Classify large-scale, aggregated reproductive and maternal-health datasets, including those generated through the Ayushman Bharat Digital Mission, as a distinct, higher-sensitivity category under India’s data-protection and cybersecurity architecture.
- Mandate data-localisation and strict onward-transfer controls for commercial femtech and fertility-tracking platforms operating in India, closing the gap the DPDP Act’s general provisions leave open.
- Require periodic national-security impact assessments of large government-linked health databases, drawing lessons from the CoWIN episode, before further integration with identity systems such as Aadhaar.
- Institutionalise a feminist security lens within India’s strategic-planning bodies, so that demographic and reproductive-data risk is assessed alongside conventional military and cyber threats, not after them.
India has taken meaningful steps towards data governance through the Digital Personal Data Protection Act, 2023, which protects digital personal data while balancing legitimate processing requirements and establishes obligations for data fiduciaries, rights for individuals, and mechanisms for enforcement and grievance redressal
The Next Security Frontier
The future of national security will not be determined solely by missiles, warships, satellites or cyber weapons. It will also be shaped by who controls data.
As artificial intelligence becomes increasingly capable of predicting social behaviour and demographic trajectories, reproductive information is emerging as a powerful strategic resource. Fertility applications, wearable technologies, digital-health ecosystems and AI-driven analytics are collectively creating unprecedented repositories of demographic intelligence and, as the Flo Health, post-Dobbs, Xinjiang and CoWIN episodes each show in different registers, the risks this creates are no longer hypothetical.
The challenge before lawmakers, policymakers and security planners is therefore much larger than privacy protection. It is the challenge of safeguarding demographic sovereignty. If oil defined the geopolitics of the twentieth century, and data defined the digital economy of the twenty-first, reproductive data may become one of the most consequential strategic assets of the AI age.
India’s national-security discourse must begin recognising this reality before others do. The debate is no longer about protecting information alone. It is about protecting the demographic foundations upon which future national power will rest.
The writer is a legal academic with a PhD in Law, working at the intersection of gender justice, public policy, and national security. She is presently serving as Assistant Professor (Gr II) of Law at Amity University, Noida. She can be contacted at sunandini.arun@gmail.com. The views expressed are personal and do not necessarily carry the views of Raksha Anirveda
