Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

Data deletion Inspections

UK BIOBANK LIMITED

This public procurement record has 1 release in its history.

Award

07 Aug 2026 at 16:12

UK5 - Transparency Notice
Summary of the contracting process

UK Biobank Limited commissioned independent data-deletion inspection services. The work supports the completion of its transition from an older data-download model to more secure, platform-based access for its large biomedical database and research resource, which contains genetic, lifestyle and health information, blood samples, heart and brain scans, and genetic data relating to around 500,000 volunteer participants. The appointed organisations will contact research institutions that previously accessed UK Biobank data, obtain information and evidence showing whether downloaded data has been deleted after research completion, and report on the deletion position. The work is delivered across the UK and concerns performance review services. It is intended to improve assurance over the confidentiality and security of participant records used in completed and ongoing research projects.

The procurement is complete and was made by direct award because UK Biobank identified extreme and unavoidable urgency following a reported incident involving purported misuse of de-identified participant data. One lot was awarded separately to KPMG LLP and BSI Standards Limited. Each award is valued at £1,250,000 excluding VAT, or £1,500,000 including VAT. The award date is 7 August 2026. Each contract is scheduled to run from 24 August 2026 to 23 August 2027, with a maximum possible period to 23 August 2028. Renewal is available because UK Biobank will assess the effectiveness of independent reporting during the initial period and determine whether further service support is required. Both awards are pending signature, with signature scheduled for 24 August 2026.

This requirement demonstrates demand for independent assurance, evidence gathering and reporting on the deletion of sensitive research data at substantial institutional scale. Suppliers well placed for comparable work would need credible capability to engage research institutions, assess documentary and other evidence against contractual data-deletion obligations, review the status of many projects, and produce clear reports for a data-owning organisation. Relevant strengths include information governance, data protection, cybersecurity assurance, audit, compliance review, forensic investigation and professional performance assessment. Experience handling confidential biomedical, health or other highly sensitive personal data would be particularly relevant, as would the capacity to coordinate work across approximately 1,000 institutions and provide consistent, defensible findings. The buyer’s use of two independent organisations also indicates the importance of independence and robust assurance.

How relevant is this notice?

Notice Information

Notice Title

Data deletion Inspections

Notice Description

UK Biobank is a large-scale biomedical database and research resource containing genetic, lifestyle and health information from around half a million UK participants. UK Biobank's database, which includes blood samples, heart and brain scans and genetic data of the 500,000 volunteer participants, is globally accessible to approved researchers who are undertaking health-related research that's in the public interest. Protecting the confidentiality and security of participant data is UK Biobank's highest priority. Before a recent widely reported data incident, UK Biobank was undertaking a phased transition from a data download model to a more secure, platform-by-default access model through the UK Biobank Research Analysis Platform (UKB-RAP), in line with principles of a Secure Data Environment approach. The data incident has resulted in the acceleration of the delivery and implementation of technical and operational controls that were in development, principally the introduction of an automated checking system to prevent de-identified participant data being egressed from the research analysis platform . As part of addressing the legacy data download model, UK Biobank is working to complete the transition and ensure outstanding downloaded data are deleted. Affected researchers are being contacted to complete this work, and UK Biobank intends to procure services from two independent third-party organisations to report on the researchers' data deletion position.

Procurement Information

UK Biobank has conducted a thorough investigation into a recent widely reported incident whereby de-identified data relating to UK Biobank participants was purportedly listed for sale on a consumer website in China. The purported sale was a clear breach of the contractual commitments made by approved researchers who had legitimate access to UK Biobank's biomedical database. UK Biobank provides approved researchers with access to the de-identified data contained in its database via its secure research analysis platform which was (and remains) suspended following the incident. As part of a series of measures to prevent further misuse of de-identified participant data and reassure participants that their data is safe and secure, UK Biobank is enhancing its systems including accelerating the development of an automated checking system to prevent de-identified participant data being egressed from the research analysis platform. UK Biobank intends to enter into contracts with KPMG and BSI respectively to contact the research institutions which previously accessed UK Biobank's biomedical database, obtain relevant information and evidence around the deletion of UK Biobank's data on completion of their research in line with their contractual obligations. It is necessary for reasons of extreme and unavoidable urgency that the contracts to obtain evidence, review and report on the data deletion status of (in aggregate) projects of ~1,000 relevant institutions are entered into without delay and therefore a competitive tendering exercise cannot be undertaken. This exercise will give UK Biobank a better picture of the security of participant records used in completed and ongoing projects and assist UK Biobank to resume its focus on allowing safe and secure access to researchers worldwide to conduct vital research into the diagnosis, prevention and treatment of diseases.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06df71
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/075437-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
UK5 - Transparency Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Direct
Procurement Method Details
Direct award
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

79 - Business services: law, marketing, consulting, recruitment, printing and security

CPV Codes

79313000 - Performance review services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
£1,250,000 £1M-£10M
Contracts Value
Not specified

Notice Dates

Publication Date
7 Aug 20262 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
7 Aug 20262 weeks ago
Contract Period
24 Aug 2026 - 23 Aug 2027 6-12 months
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Pending
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
UK BIOBANK LIMITED
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
STOCKPORT
Postcode
SK3 0SA
Postcode Area
Stockport
Country
England
Major Region (ITL 1)
TLD North West (England)
Basic Region (ITL 2)
TLD3 Greater Manchester
Small Region (ITL 3)
TLD35 Greater Manchester South East
Delivery Location
Not specified
Local Authority
Stockport
Electoral Ward
Davenport & Cale Green
Westminster Constituency
Stockport

Supplier Information

Number of Suppliers
2
Supplier Names

BSI STANDARDS LIMITED

KPMG LLP

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...