Quality Systems: ISO 17025, IAI, ENFSI and NABL for Fingerprint Labs

ISO/IEC 17025:2017 ("General requirements for the competence of testing and calibration laboratories") is the global benchmark against which accreditation bodies assess laboratory technical competence. The 2017 revision introduced a risk-based thinking framework borrowed from ISO 9001:2015, replacing the prescriptive quality-manual structure of the 2005 edition.

The standard has two main pillars:

• Management-system requirements: document control, corrective action, internal audit, management review.
• Technical requirements: personnel competence, equipment calibration, method validation, measurement uncertainty, and quality assurance of results.

For friction-ridge examination, the critical clauses are:

Section 7.2 (selection, verification and validation of methods). Laboratories must validate non-standard methods and verify that standard methods work correctly in their specific environment. ACE-V (Analysis, Comparison, Evaluation, Verification) is the dominant friction-ridge methodology, but ISO 17025 requires the laboratory to demonstrate that its local ACE-V implementation produces reliable results. Internal validation studies must cover sensitivity (identifying marks from poor-quality lifts), specificity (excluding non-matching prints), and robustness (performance on degraded, distorted, or partially developed marks).

Section 7.7 (ensuring the validity of results). Requires ongoing proficiency testing. For fingerprint laboratories this is delivered through:

• CTS Latent Print Examination series (Collaborative Testing Services, widely used in North America).
• ENFSI Fingerprint Working Group (FWG) collaborative exercises (used across European member institutes).
• OSAC validated test sets for friction-ridge examination (US focus).

ANAB (the ANSI National Accreditation Board, which absorbed ASCLD-LAB in 2016) requires accredited laboratory personnel to participate in proficiency tests at a defined frequency, typically annually.

Section 7.8 (reporting of results). Examination reports must state the method used, the conditions of examination, measurement uncertainty where applicable, and the statement of conformity where a conclusion is drawn. For fingerprint opinions expressed as a verbal conclusion (identification, inconclusive, exclusion), the report must reference the criteria applied, such as the SWGFAST documentation standards or the successor OSAC friction-ridge standard.

The IAI Latent Print Certification (LPC), launched in 1977, is the oldest and most widely recognised individual examiner credential in friction-ridge analysis. As of 2024, more than 900 examiners hold the LPC, the vast majority based in the United States, with approximately 15 certificate holders in other countries including Australia, Canada, the United Kingdom, and New Zealand.

LPC requirements:

• Written examination covering friction-ridge anatomy, pattern recognition, ACE-V methodology, courtroom testimony, and quality assurance.
• Practical examination presenting latent prints against exemplar cards across a range of difficulty conditions.
• Documented minimum years of operational casework experience.
• Recertification every five years, requiring evidence of continuing professional development.

The institutional vs. individual distinction is critical. ISO 17025 accreditation certifies that the laboratory's management system, equipment, and procedures meet a defined standard. It does not certify a specific examiner's proficiency. IAI LPC does the reverse: it certifies the individual but says nothing about the laboratory environment. The most defensible position before a court is an accredited laboratory staffed by certified examiners.

By jurisdiction:

• England and Wales: The Forensic Science Regulator Act 2021 does not name the IAI LPC specifically, but requires practitioners to demonstrate competence through an equivalent framework. The Chartered Society of Forensic Sciences (CSFS) registration scheme is accepted as a route to meeting those requirements.
• India: The NABL accreditation framework (T-126) is institutional only. There is no statutory individual certification scheme for fingerprint examiners in India equivalent to the IAI LPC, though many senior examiners at CFSLs and state FSLs have obtained the IAI LPC voluntarily through the international application process.

The European Network of Forensic Science Institutes (ENFSI), established in 1995, connects the national forensic science institutes of European Union member states and several neighbouring countries. The Fingerprint Working Group (FWG) coordinates collaborative exercises, method harmonisation, and best-practice documents across member institutes. All ENFSI full members are required to hold ISO 17025 accreditation as a condition of membership, making ENFSI membership a de facto quality signal in cross-border judicial cooperation under the European Investigation Order and the Prum Convention.

ENFSI FWG collaborative exercises test participating institutes on latent mark comparisons drawn from operational case scenarios. Unlike CTS tests (which use commercially produced cards and are primarily US-market oriented), ENFSI exercises are designed by the member institutes themselves to reflect European operational conditions. Results are reported back to participants with anonymised inter-laboratory comparison data, allowing institutes to benchmark their error rate and conclusion-distribution against the European peer group. Participation is not mandatory for accreditation purposes but is expected of well-functioning member institutes, and several European courts have begun asking whether the laboratory participates in ENFSI or comparable collaborative exercises.

The ENFSI Guideline for Evaluative Reporting in Forensic Science (2015) and the more specific ENFSI Fingerprint Database Management Guidelines address the downstream reporting question: how fingerprint conclusions should be expressed (categorical identification versus likelihood-ratio-based evaluative reporting) and how those conclusions should be documented in case reports. The ENFSI FWG position aligns with the broader evaluative-reporting movement, which holds that probabilistic framing of conclusions is more scientifically defensible than the traditional binary "identified" or "excluded" language. Not all European national institutes have moved to probabilistic reporting, but the ENFSI guideline provides the technical architecture for the transition.

Outside Europe, OSAC (Organisation of Scientific Area Committees for Forensic Science), operating under NIST in the United States, performs an analogous function: developing technically reviewed standards and guidance documents for friction-ridge analysis that feed into ANAB accreditation requirements. The OSAC Friction Ridge Subcommittee published its Standard for Friction Ridge Examination Conclusions (OSAC 2022/0004) in 2023, which specifies the vocabulary and documentation requirements for conclusions at identification, inconclusive, and exclusion levels.

NABL (National Accreditation Board for Testing and Calibration Laboratories) is India's accreditation body, operating under the Department for Promotion of Industry and Internal Trade (DPIIT). NABL is a signatory to the ILAC (International Laboratory Accreditation Cooperation) Mutual Recognition Arrangement. This means NABL-accredited laboratories carry internationally recognised status equivalent to UKAS (UK), ANAB (US), DAkkS (Germany), and COFRAC (France).

NABL T-126 is the sector-specific criteria document for forensic science laboratories. It applies ISO 17025 requirements across separate annexures for biology, chemistry, toxicology, document examination, and fingerprint examination. The fingerprint examination annexure covers:

• Examiner qualification requirements.
• Reference collections.
• Photographic and digital imaging standards.
• Report format and proficiency-test frequency.
• Requirement for a documented, validated examination methodology with demonstrated inter-examiner agreement through internal verification.

Uptake in India:

The same laboratories whose chemical development methods must meet validated SOPs as a condition of accreditation include the CFSL New Delhi (NABL accreditation for its fingerprint division since 2018), CFSL Hyderabad, and CFSL Kolkata. State FSLs present a more varied picture: the Maharashtra FSL, Tamil Nadu FSL (Chennai), and Rajasthan FSL have obtained or are pursuing NABL accreditation for some divisions, but several state laboratories operate without accreditation. No statute currently compels it.

The Bharatiya Nagarik Suraksha Sanhita 2023 (BNSS) and the High Level Committee on Forensic Science (the Bhatt Committee, 2021) both pointed toward mandatory accreditation for laboratories providing forensic evidence in criminal proceedings. Section 176 of the BNSS requires forensic examination for offences punishable by seven or more years, and the associated guidelines recommend that such examination be conducted by accredited laboratories. In practice, the transition is incremental: unaccredited FSL opinions continue to be admitted in Indian courts, though defence counsel increasingly challenge the absence of accreditation.

The NABL T-126 accreditation scope for a fingerprint division is roughly equivalent to a UKAS-accredited fingerprint examination scope in England and Wales or a California DOJ Accreditation and Audit Program-accredited laboratory in the US. All three reference the same underlying ISO 17025 standard.

The UK Forensic Science Regulator was established in 2008 as a non-statutory post to develop codes of practice for forensic science providers. The Forensic Science Regulator Act 2021 gave the Regulator statutory powers: forensic science activities in criminal proceedings in England and Wales must be carried out in accordance with the Regulator's Codes of Practice and Conduct, and providers of forensic science services must either hold UKAS accreditation to ISO 17025 (or an equivalent recognised standard) or be working toward it under a time-limited exemption. Non-compliance can result in the Regulator issuing a compliance notice and, in extremis, recommending that a court be informed of the provider's non-compliance.

The Fingerprint Source Book published by the Forensic Science Regulator provides the technical reference for friction-ridge examination in England and Wales. It covers ACE-V methodology, documentation requirements, quality thresholds, and reporting language. The FSR Codes require that fingerprint examination reports use language consistent with the evaluative-reporting framework endorsed by ENFSI: conclusions should be expressed in terms that allow the reader (including a jury) to understand the strength of the evidence, not just the examiner's bottom-line opinion.

UKAS (United Kingdom Accreditation Service) carries out the formal ISO 17025 assessments against which forensic providers are measured. UKAS assessors for fingerprint examination include specialist technical assessors with operational fingerprint examination experience, ensuring that the assessment covers not only the management-system requirements (document control, audit trails, training records) but also the technical requirements specific to latent print examination (mark quality assessment criteria, comparison methodology, verification workflow).

Scotland operates under a different legal framework (the Criminal Procedure (Scotland) Act 1995 and the rules governing expert evidence in the Scottish courts) but the Scottish Police Authority's Forensic Services division maintains ISO 17025 accreditation via UKAS for its fingerprint examination scope, providing a consistent quality baseline across the UK jurisdictions.

Courts in common law jurisdictions have traditionally evaluated fingerprint evidence through the lens of expert witness rules rather than accreditation requirements. Under the Federal Rules of Evidence Rule 702 in the US, and under the Daubert standard, the trial judge acts as gatekeeper to assess whether the expert's methodology is reliable. The absence of laboratory accreditation is not automatically disqualifying under Daubert, but it is relevant to the reliability inquiry, and defence counsel increasingly raise it as part of the standard challenge to forensic expert testimony.

The post-Daubert fingerprint litigation record includes a series of challenges to latent fingerprint evidence beginning with United States v. Llera Plaza (E.D. Pa. 2002), where the district court initially restricted fingerprint expert testimony then reversed itself, upholding admissibility while noting that validation studies and error-rate data remained underdeveloped. Subsequent US cases, including United States v. Baines (10th Cir. 2009), reinforced admissibility but courts have continued to note the value of accreditation and proficiency-testing participation in assessing examiner reliability. In federal laboratory contexts, the FBI Laboratory's accreditation under ANAB (previously ASCLD-LAB) and the individual IAI LPC status of its examiners have been cited in testimony as reliability anchors.

In England and Wales, the Criminal Practice Directions and the Forensic Science Regulator Act 2021 have tightened the framework. The Criminal Procedure Rules (CrimPR) 2020 Part 19 requires expert witnesses to confirm in their report that they understand their duty to the court, that the report sets out facts and assumptions on which the opinion is based, and that any material weaknesses in the opinion are disclosed. In the context of fingerprint evidence, the absence of UKAS accreditation for the laboratory and the absence of an FSR-compliant verification procedure are now expected to be disclosed under this duty and are likely to attract judicial comment.

The Judith Ward case (Court of Appeal 1992) in the UK and the Brandon Mayfield case in the US (2004, FBI identification of Mayfield as a Madrid bombing suspect based on a fingerprint match that Spanish authorities rejected) both contributed to the structural reform that now links accreditation to admissibility weight. The Mayfield error was attributed to cognitive bias, contextual influence, and the absence of a rigorous independent verification step. All of these gaps are now addressed by ISO 17025 requirements for method validation and by the ENFSI / OSAC guidance on verification workflow. The lesson courts drew from Mayfield was not that fingerprint evidence is unreliable, but that its reliability depends on the quality architecture of the laboratory and the individual examiner producing the opinion.

For a full jurisdiction-by-jurisdiction treatment of admissibility rules, see the companion topic on standards, accreditation, and admissibility in fingerprint evidence.