---
title: "Data deletion Inspections"
ocid: "ocds-h6vhtk-06df71"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06df71"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-06df71.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-06df71.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "UK BIOBANK LIMITED"
published: "2026-08-07"
---

# Data deletion Inspections

Buyer: UK BIOBANK LIMITED  
Current stage: Award  
OCID: ocds-h6vhtk-06df71

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06df71)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-06df71.json)

## Summary

UK Biobank Limited commissioned independent data-deletion inspection services. The work supports the completion of its transition from an older data-download model to more secure, platform-based access for its large biomedical database and research resource, which contains genetic, lifestyle and health information, blood samples, heart and brain scans, and genetic data relating to around 500,000 volunteer participants. The appointed organisations will contact research institutions that previously accessed UK Biobank data, obtain information and evidence showing whether downloaded data has been deleted after research completion, and report on the deletion position. The work is delivered across the UK and concerns performance review services. It is intended to improve assurance over the confidentiality and security of participant records used in completed and ongoing research projects.

The procurement is complete and was made by direct award because UK Biobank identified extreme and unavoidable urgency following a reported incident involving purported misuse of de-identified participant data. One lot was awarded separately to KPMG LLP and BSI Standards Limited. Each award is valued at £1,250,000 excluding VAT, or £1,500,000 including VAT. The award date is 7 August 2026. Each contract is scheduled to run from 24 August 2026 to 23 August 2027, with a maximum possible period to 23 August 2028. Renewal is available because UK Biobank will assess the effectiveness of independent reporting during the initial period and determine whether further service support is required. Both awards are pending signature, with signature scheduled for 24 August 2026.

This requirement demonstrates demand for independent assurance, evidence gathering and reporting on the deletion of sensitive research data at substantial institutional scale. Suppliers well placed for comparable work would need credible capability to engage research institutions, assess documentary and other evidence against contractual data-deletion obligations, review the status of many projects, and produce clear reports for a data-owning organisation. Relevant strengths include information governance, data protection, cybersecurity assurance, audit, compliance review, forensic investigation and professional performance assessment. Experience handling confidential biomedical, health or other highly sensitive personal data would be particularly relevant, as would the capacity to coordinate work across approximately 1,000 institutions and provide consistent, defensible findings. The buyer’s use of two independent organisations also indicates the importance of independence and robust assurance.

## Notice

UK Biobank is a large-scale biomedical database and research resource containing genetic, lifestyle and health information from around half a million UK participants. UK Biobank's database, which includes blood samples, heart and brain scans and genetic data of the 500,000 volunteer participants, is globally accessible to approved researchers who are undertaking health-related research that's in the public interest. Protecting the confidentiality and security of participant data is UK Biobank's highest priority. Before a recent widely reported data incident, UK Biobank was undertaking a phased transition from a data download model to a more secure, platform-by-default access model through the UK Biobank Research Analysis Platform (UKB-RAP), in line with principles of a Secure Data Environment approach. The data incident has resulted in the acceleration of the delivery and implementation of technical and operational controls that were in development, principally the introduction of an automated checking system to prevent de-identified participant data being egressed from the research analysis platform . As part of addressing the legacy data download model, UK Biobank is working to complete the transition and ensure outstanding downloaded data are deleted. Affected researchers are being contacted to complete this work, and UK Biobank intends to procure services from two independent third-party organisations to report on the researchers' data deletion position.

### Procurement Information

UK Biobank has conducted a thorough investigation into a recent widely reported incident whereby de-identified data relating to UK Biobank participants was purportedly listed for sale on a consumer website in China. The purported sale was a clear breach of the contractual commitments made by approved researchers who had legitimate access to UK Biobank's biomedical database. UK Biobank provides approved researchers with access to the de-identified data contained in its database via its secure research analysis platform which was (and remains) suspended following the incident. As part of a series of measures to prevent further misuse of de-identified participant data and reassure participants that their data is safe and secure, UK Biobank is enhancing its systems including accelerating the development of an automated checking system to prevent de-identified participant data being egressed from the research analysis platform. UK Biobank intends to enter into contracts with KPMG and BSI respectively to contact the research institutions which previously accessed UK Biobank's biomedical database, obtain relevant information and evidence around the deletion of UK Biobank's data on completion of their research in line with their contractual obligations. It is necessary for reasons of extreme and unavoidable urgency that the contracts to obtain evidence, review and report on the data deletion status of (in aggregate) projects of ~1,000 relevant institutions are entered into without delay and therefore a competitive tendering exercise cannot be undertaken. This exercise will give UK Biobank a better picture of the security of participant records used in completed and ongoing projects and assist UK Biobank to resume its focus on allowing safe and secure access to researchers worldwide to conduct vital research into the diagnosis, prevention and treatment of diseases.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/075437-2026 |
| Notice type | UK5 - Transparency Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Direct |
| Procurement method details | Direct award |
| Tender suitability | Not specified |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 7 Aug 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | 7 Aug 2026 |
| Contract period | 24 Aug 2026 - 23 Aug 2027 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | £1,250,000 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Pending |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | UK BIOBANK LIMITED |
| Locality | STOCKPORT |
| Postcode area | Stockport |
| Postcode | SK3 0SA |
| Country | England |
| ITL 1 | TLD North West (England) |
| ITL 2 | TLD3 Greater Manchester |
| ITL 3 | TLD35 Greater Manchester South East |
| Local authority | Stockport |
| Electoral ward | Davenport & Cale Green |
| Westminster constituency | Stockport |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 2 |
| Supplier names | BSI STANDARDS LIMITED; KPMG LLP |

## CPV Codes

### Divisions

- 79 - Business services: law, marketing, consulting, recruitment, printing and security

### Codes

- 79313000 - Performance review services

## Release History

- 7 Aug 2026 at 16:12 - Award - UK5 - Transparency Notice - https://www.find-tender.service.gov.uk/Notice/075437-2026

## Documents

- https://www.find-tender.service.gov.uk/Notice/075437-2026
  7th August 2026 - Transparency notice on Find a Tender

## Notice URLs

- http://KPMG.CO.UK
- http://www.bsigroup.com
- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06df71. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-06df71.json.