UK investigates after UK Biobank participant data was listed for sale on Alibaba in China
The Facts
- The UK government said UK Biobank participant data was advertised for sale on Alibaba’s e-commerce platforms in China.
- Officials said three listings were identified, and at least one appeared to contain data relating to all 500,000 UK Biobank volunteers.
- The data described by officials and UK Biobank was de-identified and did not include names, addresses, contact details or telephone numbers.
- The listings were removed after the issue was raised, and authorities said they had no evidence that any purchase had taken place.
- The government said the data had been legitimately downloaded by three research institutions in China, and access for those institutions has since been revoked.
- UK Biobank is investigating the incident, and the Information Commissioner’s Office said it had been informed and was making enquiries.
- UK Biobank’s data is used by researchers to study disease and improve detection or treatment, so the incident affects a major health-research resource relied on by scientists and built from volunteer contributions.
- It remains unresolved how data obtained through approved research access ended up being advertised online, and UK Biobank has temporarily suspended some platform access while it investigates.
Context
What kind of data was involved?
Officials said the material came from UK Biobank datasets and was de-identified, meaning it did not include direct personal identifiers such as names, addresses, contact details or telephone numbers BBC,BBC,Reuters.
Do authorities think the data was actually sold?
The government said the listings were removed quickly and that it had no evidence any buyer purchased the datasets before they were taken down Guardian,Reuters,Deutsche Welle.
What happens next?
UK Biobank said it is investigating, the ICO said it is making enquiries, and access linked to the institutions identified as the source has been revoked while the charity reviews how the data was posted online BBC,BBC,Hindustan Times.
How left and right read it
What stands out is the breach of trust around a public-minded research resource built from volunteer contributions and relied on by scientists to study disease and improve treatment. Even though the data was de-identified and there is no evidence of any purchase, listings tied to as many as 500,000 participants show why strong oversight and a careful investigation matter.
The central issue is procedural control: data obtained through approved research access was legitimately downloaded by three institutions, then somehow ended up advertised online, and it is still unresolved how that happened. Revoking those institutions’ access, removing the listings, and pausing some platform access are appropriate, but the real test is whether the rules governing access and enforcement were strong enough.
The receipts — 96 sources
Wire services (10)
Independent coverage (86)
The news, read by both sides.
The day’s biggest stories in one short brief, built to show both sides and the competing values behind the headlines. Free in your inbox.