Quality Systems: ISO 17025, IAI, ENFSI and NABL for Fingerprint Labs

ISO/IEC 17025:2017 (General requirements for the competence of testing and calibration laboratories) is the global benchmark against which accreditation bodies assess whether a laboratory is technically competent to generate trustworthy results. It covers management-system requirements (document control, corrective action, internal audit, management review) and technical requirements (personnel competence, equipment calibration, method validation, measurement uncertainty, and quality assurance of results). The 2017 revision introduced a risk-based thinking framework borrowed from ISO 9001:2015, replacing the prescriptive quality-manual structure of the 2005 edition.

For friction-ridge examination, the critical technical requirements sit in section 7. Section 7.2 (selection, verification and validation of methods) requires laboratories to validate non-standard methods and to verify that standard methods are being applied correctly in their specific environment. ACE-V (Analysis, Comparison, Evaluation, Verification) is the dominant methodology in friction-ridge examination, but ISO 17025 requires the laboratory to demonstrate that its local implementation of ACE-V produces reliable results, including through internal validation studies covering sensitivity (ability to identify marks from poor-quality lifts), specificity (ability to exclude non-matching prints), and robustness (performance with degraded, distorted, or partially developed marks).

Section 7.7 (ensuring the validity of results) requires ongoing proficiency testing. For fingerprint laboratories this is operationalised through external proficiency tests: the Collaborative Testing Services (CTS) Latent Print Examination series (widely used in North America), the ENFSI Fingerprint Working Group (FWG) collaborative exercises (used across European member institutes), and the OSAC (Organization of Scientific Area Committees for Forensic Science) validated test sets for friction-ridge examination (US focus). ASCLD (American Society of Crime Laboratory Directors) accreditation under ANAB (the ANSI National Accreditation Board, which absorbed ASCLD-LAB in 2016) requires each accredited laboratory's personnel to participate in proficiency tests at a defined frequency, typically annually.

Section 7.8 (reporting of results) requires that examination reports state the method used, conditions under which examination was performed, the uncertainty of measurement where applicable, and the statement of conformity where a conclusion is drawn. For fingerprint opinions expressed as a verbal conclusion (identification, inconclusive, exclusion), the report must reference the criteria applied to reach the conclusion, such as the SWGFAST (Scientific Working Group for Friction Ridge Analysis, Study and Technology) documentation standards or the successor OSAC friction-ridge standard.

The IAI Latent Print Certification (LPC), launched in 1977, is the oldest and most widely recognised individual examiner credential in friction-ridge analysis. As of 2025, more than 900 examiners in over 30 countries hold the LPC. Certification requires a written examination covering friction-ridge anatomy, pattern recognition, ACE-V methodology, courtroom testimony, and quality assurance; a practical examination presenting latent prints for analysis against exemplar cards across a range of difficulty conditions; and documentation of a minimum number of years of operational casework experience. Recertification every five years requires evidence of continuing professional development.

The distinction between the IAI LPC (individual) and ISO 17025 accreditation (institutional) matters for how courts and commissioning agencies evaluate the weight of evidence. ISO 17025 accreditation certifies that the laboratory's management system, equipment, and procedures meet a defined standard. It does not certify that a specific examiner within that laboratory has achieved a demonstrated level of personal proficiency. IAI LPC does the reverse: it certifies the individual but says nothing about the laboratory environment in which they work. The most defensible position before a court is an accredited laboratory staffed by certified examiners.

The UK Forensic Science Regulator's Codes of Practice and Conduct, which have statutory force in England and Wales under the Forensic Science Regulator Act 2021, do not reference the IAI LPC by name but require registered forensic practitioners to demonstrate competence through a framework equivalent in effect to the IAI's requirements. The Chartered Society of Forensic Sciences (CSFS) in the UK offers a registration scheme that combines competency assessment with ethical obligations, and the Forensic Regulator accepts CSFS registration as a route to meeting the competency requirements for fingerprint examiners.

In India, the NABL accreditation framework (T-126) is institutional rather than individual. There is no statutory individual certification scheme for fingerprint examiners in India equivalent to the IAI LPC, though many senior examiners at CFSLs and state FSLs have obtained the IAI LPC voluntarily through the international application process.

The European Network of Forensic Science Institutes (ENFSI), established in 1995, connects the national forensic science institutes of European Union member states and several neighbouring countries. The Fingerprint Working Group (FWG) coordinates collaborative exercises, method harmonisation, and best-practice documents across member institutes. All ENFSI full members are required to hold ISO 17025 accreditation as a condition of membership, making ENFSI membership a de facto quality signal in cross-border judicial cooperation under the European Investigation Order and the Prum Convention.

ENFSI FWG collaborative exercises test participating institutes on latent mark comparisons drawn from operational case scenarios. Unlike CTS tests (which use commercially produced cards and are primarily US-market oriented), ENFSI exercises are designed by the member institutes themselves to reflect European operational conditions. Results are reported back to participants with anonymised inter-laboratory comparison data, allowing institutes to benchmark their error rate and conclusion-distribution against the European peer group. Participation is not mandatory for accreditation purposes but is expected of well-functioning member institutes, and several European courts have begun asking whether the laboratory participates in ENFSI or comparable collaborative exercises.

The ENFSI Guideline for Evaluative Reporting in Forensic Science (2015) and the more specific ENFSI Fingerprint Database Management Guidelines address the downstream reporting question: how fingerprint conclusions should be expressed (categorical identification versus likelihood-ratio-based evaluative reporting) and how those conclusions should be documented in case reports. The ENFSI FWG position aligns with the broader evaluative-reporting movement, which holds that probabilistic framing of conclusions is more scientifically defensible than the traditional binary "identified" or "excluded" language. Not all European national institutes have moved to probabilistic reporting, but the ENFSI guideline provides the technical architecture for the transition.

Outside Europe, OSAC (Organisation of Scientific Area Committees for Forensic Science), operating under NIST in the United States, performs an analogous function: developing technically reviewed standards and guidance documents for friction-ridge analysis that feed into ANAB accreditation requirements. The OSAC Friction Ridge Subcommittee published its Standard for Friction Ridge Examination Conclusions (OSAC 2022/0004) in 2023, which specifies the vocabulary and documentation requirements for conclusions at identification, inconclusive, and exclusion levels.

NABL (National Accreditation Board for Testing and Calibration Laboratories) is India's accreditation body operating under the Department for Promotion of Industry and Internal Trade (DPIIT). NABL is a signatory to the ILAC (International Laboratory Accreditation Cooperation) Mutual Recognition Arrangement, meaning NABL-accredited laboratories carry internationally recognised accreditation status equivalent to UKAS (UK), ANAB (US), DAkkS (Germany), and COFRAC (France).

The NABL specific criteria for forensic science laboratories are published as document T-126. The criteria are structured to apply ISO 17025 requirements to the specific disciplines of forensic science, with separate annexures for biology, chemistry, toxicology, document examination, and fingerprint examination. The fingerprint examination annexure covers examiner qualification requirements, reference collections, photographic and digital imaging standards, report format, and proficiency-test frequency. T-126 requires participating laboratories to use a documented and validated examination methodology and to demonstrate inter-examiner agreement through internal verification.

The Central Forensic Science Laboratory (CFSL) New Delhi achieved NABL accreditation for its fingerprint division in 2018, and the CFSL Hyderabad and CFSL Kolkata have maintained NABL accreditation for forensic science divisions that include fingerprint examination. State FSLs present a more varied picture: the Maharashtra FSL, the Tamil Nadu FSL (Chennai), and the Rajasthan FSL have obtained or are in the process of obtaining NABL accreditation for some divisions, but several state laboratories operate without accreditation and are not subject to the mandatory accreditation requirement because no statute currently compels it.

The 2022 amendments to the BNSS (Bharatiya Nagarik Suraksha Sanhita, 2023) and the recommendations of the High Level Committee on Forensic Science (the Bhatt Committee, 2021) both pointed toward mandatory accreditation for laboratories providing forensic evidence in criminal proceedings. Section 176 of the BNSS requires forensic examination for offences punishable by seven or more years, and the associated guidelines recommend that such examination be conducted by accredited laboratories. In practice, the transition is incremental: unaccredited FSL opinions continue to be admitted in Indian courts, though defence counsel increasingly challenge the absence of accreditation.

Internationally, the NABL T-126 accreditation for a fingerprint division is roughly equivalent in scope to a UKAS-accredited fingerprint examination scope in England and Wales, or a State Department of Justice laboratory accredited by the California Department of Justice Accreditation and Audit Program in the US. All reference the same underlying ISO 17025 standard.

The UK Forensic Science Regulator was established in 2008 as a non-statutory post to develop codes of practice for forensic science providers. The Forensic Science Regulator Act 2021 gave the Regulator statutory powers: forensic science activities in criminal proceedings in England and Wales must be carried out in accordance with the Regulator's Codes of Practice and Conduct, and providers of forensic science services must either hold UKAS accreditation to ISO 17025 (or an equivalent recognised standard) or be working toward it under a time-limited exemption. Non-compliance can result in the Regulator issuing a compliance notice and, in extremis, recommending that a court be informed of the provider's non-compliance.

The Fingerprint Source Book published by the Forensic Science Regulator provides the technical reference for friction-ridge examination in England and Wales. It covers ACE-V methodology, documentation requirements, quality thresholds, and reporting language. The FSR Codes require that fingerprint examination reports use language consistent with the evaluative-reporting framework endorsed by ENFSI: conclusions should be expressed in terms that allow the reader (including a jury) to understand the strength of the evidence, not just the examiner's bottom-line opinion.

UKAS (United Kingdom Accreditation Service) carries out the formal ISO 17025 assessments against which forensic providers are measured. UKAS assessors for fingerprint examination include specialist technical assessors with operational fingerprint examination experience, ensuring that the assessment covers not only the management-system requirements (document control, audit trails, training records) but also the technical requirements specific to latent print examination (mark quality assessment criteria, comparison methodology, verification workflow).

Scotland operates under a different legal framework (the Criminal Procedure (Scotland) Act 1995 and the rules governing expert evidence in the Scottish courts) but the Scottish Police Authority's Forensic Services division maintains ISO 17025 accreditation via UKAS for its fingerprint examination scope, providing a consistent quality baseline across the UK jurisdictions.

Courts in common law jurisdictions have traditionally evaluated fingerprint evidence through the lens of expert witness rules rather than accreditation requirements. Under the Federal Rules of Evidence Rule 702 in the US, and under the Daubert standard, the trial judge acts as gatekeeper to assess whether the expert's methodology is reliable. The absence of laboratory accreditation is not automatically disqualifying under Daubert, but it is relevant to the reliability inquiry, and defence counsel increasingly raise it as part of the standard challenge to forensic expert testimony.

The post-Daubert fingerprint litigation record includes a series of challenges to latent fingerprint evidence beginning with United States v. Llera Plaza (3d Cir. 2002), where the Third Circuit upheld the admissibility of fingerprint evidence while noting that validation studies and error-rate data remained underdeveloped. Subsequent US cases, including United States v. Baines (10th Cir. 2009), reinforced admissibility but courts have continued to note the value of accreditation and proficiency-testing participation in assessing examiner reliability. In federal laboratory contexts, the FBI Laboratory's accreditation under ANAB (previously ASCLD-LAB) and the individual IAI LPC status of its examiners have been cited in testimony as reliability anchors.

In England and Wales, the Criminal Practice Directions and the Forensic Science Regulator Act 2021 have tightened the framework. The Criminal Procedure Rules (CrimPR) 2020 Part 19 requires expert witnesses to confirm in their report that they understand their duty to the court, that the report sets out facts and assumptions on which the opinion is based, and that any material weaknesses in the opinion are disclosed. In the context of fingerprint evidence, the absence of UKAS accreditation for the laboratory and the absence of an FSR-compliant verification procedure are now expected to be disclosed under this duty and are likely to attract judicial comment.

The Judith Ward case (Court of Appeal 1992) in the UK and the Brandon Mayfield case in the US (2004, FBI identification of Mayfield as a Madrid bombing suspect based on a fingerprint match that Spanish authorities rejected) both contributed to the structural reform that now links accreditation to admissibility weight. The Mayfield error was attributed to cognitive bias, contextual influence, and the absence of a rigorous independent verification step, all of which are now addressed by ISO 17025 requirements for method validation and by the ENFSI / OSAC guidance on verification workflow. The lesson courts drew from Mayfield was not that fingerprint evidence is unreliable, but that the reliability of fingerprint evidence depends on the quality architecture of the laboratory and the individual examiner producing the opinion.