Question to the Cabinet Office:

To ask the Minister for the Cabinet Office, what formal guidance, policies and risk assessments he has issued to research institutions, NHS bodies and private genomics companies on the sharing of genomic data with foreign entities.

The 2023 UK Biological Security Strategy (BSS) sets out how the country is strengthening resilience to a spectrum of biological threats. As part of the BSS, DSIT is ensuring the UK is a world leader in responsible innovation in engineering biology – working closely with academia and industry to improve shared awareness of security risks, and ensuring any measures to mitigate risks (including those related to genomic data) remain proportionate.

All organisations holding health data (including genomics data) must comply with GDPR. To comply with GDPR, DSIT and DHSC require safeguards to be in place when health data is transferred outside the UK, including a risk assessment for countries not recognised as offering an equivalent level of data protection by the UK.

On behalf of DSIT, the National Protective Security Authority (NPSA), with the National Cyber Security Centre (NCSC), have developed the Trusted Research campaign to advise academia on international collaborations, by informing them of the threat and helping them make decisions about research and research partners. NPSA and NCSC have also developed the Secure Innovation campaign to help new start-ups in the emerging and critical technology sectors think carefully about their partners and investment.

Alongside this work, DSIT’s Research Collaboration Advice Team offers the research sector tailored advice on managing the risks of international research collaboration. DSIT also engages in a two-way dialogue with policymakers, academia and industry on the responsible use of engineering biology and life sciences, through the Responsible Innovation Advisory Panel.