When half a million participants signed up to UK Biobank, a major health database containing genetic and medical information from volunteers, they thought they were giving up access to their data to help improve academic research and to unlock new insights into how we get ill — and, crucially, how we can prevent it. So it was a shock when researchers discovered attempts to sell data on third-party platforms, including Chinese online marketplaces. The controversy has raised broader concerns about consent, oversight, and the blurred line between public interest research and commercial use.
UK Biobank’s data wasn’t directly identifiable, but critics argue that the incident risked undermining public trust in large-scale health data projects. “When people originally signed up for UK Biobank, they were told that data was for non-profit research, and then they found that it was sold to industry,” says Luc Rocher, associate professor at the Oxford Internet Institute, who has tracked the repeated posting of Biobank data online outside the ways those who signed up might have expected. “So it’s really about setting a line and telling people that this line will be held.”