Commons Sense

House of Commons · Ministerial Statement

UK Biobank Data

23 April 2026 · 11 other contributors

Opened by Ian Murray Lab Edinburgh South

Science & TechnologyStandards & EthicsNHS

Summarised by AI from the official record, so it can contain mistakes.

Read the full transcript on Parliament.uk

At a glance

Ian Murray raised concerns about uk biobank data in the House of Commons. A government minister responded. Other MPs also contributed.

Key points

  • UK Biobank is a non-profit charity that shares data from volunteer participants for medical research.
  • The Government acted to remove listings and revoke access after participant data was found on Alibaba's platforms in China.
  • UK Biobank has paused further data downloads and will implement new safeguards.

How the debate unfolded

MPs spoke in turn to share their views and ask questions. Here's what each person said.

Government Statement

Ian Murray

UK Biobank is a non-profit charity that shares data from its volunteer participants for medical research. On April 20, it was discovered that participant data was advertised on Alibaba’s platforms in China. The Government took immediate action to remove the listings and revoke access to three research institutions identified as sources of the information. UK Biobank has also paused further data downloads and will enhance safeguards upon implementation of a new system. Participants' personal details were not included, only medical data from those who consented to sharing for global research purposes. The Government is issuing new guidance on data control in response and urges businesses to ensure secure systems.

Other contributors (11)
  • Lincoln Jopp Lab Dudley South

    Question

    The MP questions the detail provided by the Minister regarding what data was in the listings, whether it could be used to identify participants individually or mosaically, and asks for clarity on sanctions available against research institutions involved. He also raises concerns about the risk assessment of Russian, Iranian, or North Korean research institutions with access.

    Minister reply

    The minister responds by stating that UK Biobank is investigating how data ended up being advertised online and will ensure security measures are enhanced to prevent future occurrences. He does not provide specific details on what sanctions might be imposed but reiterates the seriousness of the breach and the Government's commitment to protecting participants' data.

  • Lincoln Jopp

    Question

    I thank the Minister for his statement and for prior sight of it. This is indeed a serious breach... (full question as per transcript)

    Minister reply

    I thank the shadow Minister for the way in which he has approached this matter—indeed, with his expertise as a former COO of a tech company. Let me answer his questions directly... (full answer as per transcript)

  • Emily Darlington

    Question

    Health datasets of the size that UK Biobank has are incredibly important, because they allow us to find answers to the huge health challenges that many of us face, whether that is pain, as the Minister referred to, dementia or heart conditions. My concern is that this breach will make people think twice before donating their data... (full question as per transcript)

    Minister reply

    My hon. Friend makes an incredibly important point. I will say from the Dispatch Box that we should encourage more participation in UK Biobank. It is a global leader in research and is funded by the Wellcome Trust and the Medical Research Council. It also receives significant funding from Cancer Research UK, the British Heart Foundation and the National Institute for Health and Care Research... (full answer as per transcript)

  • Victoria Collins LD Westmorland and Lonsdale

    Question

    Collins expressed concern over a second breach at UK Biobank, where sensitive medical data was posted online without consent. She urged the Government to hold UK Biobank accountable and ensure strict protocols are followed, including technical barriers to prevent unauthorized downloads and an apology for volunteers.

    Minister reply

    Murray clarified that this was not a leak but a legitimate download by accredited users which violated terms of use. He stated that all access has been paused, the board is working on technical fixes, and an apology will be issued. The Information Commissioner's Office (ICO) is also involved in the investigation.

  • Adam Thompson Lab Gower

    Question

    Thompson expressed concern that researchers will not be generally prevented from accessing data appropriately in the future.

    Minister reply

    Murray assured that UK Biobank is working on a technical fix and that all access has been paused until this issue is resolved. He emphasised the importance of allowing researchers to continue their work safely once the system is secure.

  • Richard Tice Con Erith and Thamesmead

    Question

    Tice questioned whether Chinese researchers should be excluded in the future due to data theft, suggesting that the UK taxpayer's funding of £200 million for UK Biobank (£15 million annually) is being abused.

    Minister reply

    Murray stated that thousands of Chinese researchers have been working safely and securely on UK Biobank data since 2012. The issue was a loophole in the system allowing datasets to be downloaded, not abuse by Chinese researchers. Banning them would hinder global research progress.

  • Lauren Sullivan SNP Glasgow North East

    Question

    Sullivan welcomed UK Biobank’s actions and asked for a commitment on the technical solution to protect data, given concerns about AI bots publishing papers.

    Minister reply

    Murray confirmed that significant undertakings have been made by UK Biobank to identify loopholes and tighten up the system. The Government insisted on pausing all access until these measures are in place.

  • Jim Shannon DUP Strangford

    Question

    Shannon asked if the data breach reached Northern Ireland, affecting universities like Queen's University Belfast and Ulster University.

    Minister reply

    Murray confirmed that the system pause affects researchers temporarily. However, UK Biobank is working to resolve this quickly to ensure no long-term disruption.

  • Allison Gardner

    Question

    As someone familiar with UK Biobank, I ask for assurance that the data is scrupulously anonymised and deanonymisation is exceptionally difficult. Will you also confirm continued Government support once processes causing the breach are addressed?

    Minister reply

    Yes, we will provide full support to UK Biobank to resolve immediate issues and secure their system. We acknowledge the importance of transparently ensuring data safety for the benefit of medical research.

  • Christopher Vince

    Question

    I thank the Minister for his statement and agree that UK Biobank is an excellent resource. Although this issue isn't a cyber-security breach, will you join me in welcoming the Government’s Cyber Security and Resilience (Network and Information Systems) Bill? Will the Minister also acknowledge the importance of ensuring data safety across all industries?

    Minister reply

    In response to my hon. Friend's previous comments on football, I commend his contributions here as well. We take cyber-security seriously through legislation such as the Cyber Security and Resilience (Network and Information Systems) Bill. Free tools are available from the Government for businesses and institutions to enhance their security.

Shadow Comment

Lincoln Jopp

The shadow criticises the Minister's statement for lacking detail about what was in the leaked data, whether it can be used to identify participants, and if sanctions will be imposed on institutions involved. He questions the Government’s risk assessment regarding research institutions based in Russia, Iran, or North Korea with access to UK Biobank data. The shadow also asks why a previous amendment for maintaining a register of hostile cyber actors was voted down and calls for a review of this decision.

Get updates like this by email
▸ Assessment & feedback
Summary accuracy