The confidential health records of half a million British volunteers have been offered for sale on the Chinese e-commerce website Alibaba, the UK government has confirmed. The data, which belongs to participants in the UK Biobank project, was advertised in three separate listings last week. The revelation was made by Ian Murray, the technology minister, during a session in the House of Commons.
The minister stated that the information being offered for sale was 'de-identified', a process intended to remove personal identifiers, making it difficult to link the data back to individual participants. However, concerns remain about the potential for re-identification, especially when large datasets are involved and combined with other publicly available information. The UK Biobank is a vital long-term health research resource, collecting extensive genetic and health information from volunteers to help scientists understand the causes of diseases.
The incident raises serious questions about data security and the protection of sensitive health information collected for research purposes. While the UK Biobank operates under strict ethical and governance frameworks, including adherence to GDPR regulations, the appearance of this data on an international sales platform is deeply troubling. NHS guidelines and NICE recommendations consistently emphasise the importance of data privacy and security, particularly concerning patient information, even when anonymised or de-identified for research.
It is crucial to note that readers concerned about their personal data should consult their GP. The NHS provides guidance on data protection and how patient information is used, stressing that any sharing of data for research must be done ethically and securely. This incident will undoubtedly prompt a thorough investigation into how this 'de-identified' data came to be offered for sale and what measures can be taken to prevent future occurrences.