Ian Murray

I thank the Liberal Democrat spokesperson for the way in which she has dealt with this issue. I echo her thanks to all the volunteers—not only those who give their sensitive data to UK Biobank for critical purposes, but all the volunteers who give data for all research purposes. The Liberal Democrat spokesperson used the word “leak”, but this was not a leak; it was a legitimate download by a legitimately accredited organisation. We have identified a problem with the UK data bank system, in the sense that accredited users have used the system to analyse data sources and then download their results from that analysis, but the system has not prevented them from also downloading the source data. It is that downloaded source data that is against the terms of use for accredited organisations. The three Chinese organisations have been found to have done that, which is why they have been suspended from the site. This was not a leak as such. How that data has got from those institutions on to the Alibaba website is still to be concluded, but this was not a leak of data or a cyber-attack. This was a legitimate download of legitimate data by a legitimately accredited organisation, which is why we should not use the word “leak” for the purposes of reassuring the volunteers who put their data into the system. Let me answer the hon. Lady’s question about what has been done and what the Government have asked Biobank to do. I reiterate that the whole system has been paused, and the board has taken actions to write to all participants; in fact, there is a statement on Biobank’s website. I cannot recall whether the statement includes an apology, but we will take that back to Biobank—I am sure it is watching this statement. The Information Commissioner’s Office will also be involved, because this issue relates to data. Biobank has referred this incident to the ICO, and we will work very closely with it. I emphasise that we take this matter extremely seriously. We came to the House at the first available opportunity this morning, before the release from Biobank had gone out, to make sure that Members could reassure the volunteers and also see how seriously we take this issue. The hon. Lady referred to an article in The Guardian. It is because journals demand source data before publication in order to reduce fraud that the source data was included in some journal articles that linked directly to the source data on UK Biobank. Again, it was not a leak; it is about the way in which researchers used data incorrectly.