Data deletion Inspections

{
  "id": "082532-2026",
  "tag": [
    "award",
    "contract"
  ],
  "date": "2026-09-01T11:04:05+01:00",
  "ocid": "ocds-h6vhtk-06df71",
  "buyer": {
    "id": "GB-COH-04978912",
    "name": "UK BIOBANK LIMITED"
  },
  "awards": [
    {
      "id": "1",
      "date": "2026-09-01T00:00:00+01:00",
      "items": [
        {
          "id": "1",
          "relatedLot": "1",
          "deliveryAddresses": [
            {
              "region": "UK",
              "country": "GB",
              "countryName": "United Kingdom"
            }
          ],
          "additionalClassifications": [
            {
              "id": "79313000",
              "scheme": "CPV",
              "description": "Performance review services"
            }
          ]
        }
      ],
      "title": "Data deletion inspections",
      "value": {
        "amount": 1250000,
        "currency": "GBP",
        "amountGross": 1500000
      },
      "status": "active",
      "renewal": {
        "description": "The effectiveness of such independent third-party reporting will be assessed during the initial period to determine whether any extension in service support is required. The contract value stated above is an estimate for the initial period, noting that the scope and\nlength of any extension is uncertain."
      },
      "documents": [
        {
          "id": "082532-2026",
          "url": "https://www.find-tender.service.gov.uk/Notice/082532-2026",
          "format": "text/html",
          "noticeType": "UK6",
          "description": "Contract award notice on Find a Tender",
          "documentType": "awardNotice",
          "datePublished": "2026-09-01T11:04:05+01:00"
        }
      ],
      "suppliers": [
        {
          "id": "GB-COH-OC301540",
          "name": "KPMG LLP"
        }
      ],
      "hasRenewal": true,
      "milestones": [
        {
          "id": "1",
          "type": "futureSignatureDate",
          "status": "scheduled",
          "dueDate": "2026-09-01T23:59:59+01:00"
        }
      ],
      "relatedLots": [
        "1"
      ],
      "aboveThreshold": true,
      "contractPeriod": {
        "endDate": "2027-08-31T23:59:59+01:00",
        "startDate": "2026-09-01T00:00:00+01:00",
        "maxExtentDate": "2028-08-31T23:59:59+01:00"
      },
      "mainProcurementCategory": "services"
    },
    {
      "id": "2",
      "date": "2026-09-01T00:00:00+01:00",
      "items": [
        {
          "id": "1",
          "relatedLot": "1",
          "deliveryAddresses": [
            {
              "region": "UK",
              "country": "GB",
              "countryName": "United Kingdom"
            }
          ],
          "additionalClassifications": [
            {
              "id": "79313000",
              "scheme": "CPV",
              "description": "Performance review services"
            }
          ]
        }
      ],
      "title": "Data deletion inspections",
      "value": {
        "amount": 700000,
        "currency": "GBP",
        "amountGross": 840000
      },
      "status": "active",
      "renewal": {
        "description": "The effectiveness of such independent third-party reporting will be assessed during the initial period to determine whether any  extension in service support is required. The contract value stated above is an estimate for the initial period, noting that the scope and\nlength of any extension is uncertain."
      },
      "documents": [
        {
          "id": "082532-2026",
          "url": "https://www.find-tender.service.gov.uk/Notice/082532-2026",
          "format": "text/html",
          "noticeType": "UK6",
          "description": "Contract award notice on Find a Tender",
          "documentType": "awardNotice",
          "datePublished": "2026-09-01T11:04:05+01:00"
        }
      ],
      "suppliers": [
        {
          "id": "GB-COH-07864997",
          "name": "BSI STANDARDS LIMITED"
        }
      ],
      "hasRenewal": true,
      "milestones": [
        {
          "id": "1",
          "type": "futureSignatureDate",
          "status": "scheduled",
          "dueDate": "2026-09-01T23:59:59+01:00"
        }
      ],
      "relatedLots": [
        "1"
      ],
      "aboveThreshold": true,
      "contractPeriod": {
        "endDate": "2027-08-31T23:59:59+01:00",
        "startDate": "2026-09-01T00:00:00+01:00",
        "maxExtentDate": "2028-08-31T23:59:59+01:00"
      },
      "mainProcurementCategory": "services"
    }
  ],
  "tender": {
    "id": "ocds-h6vhtk-06df71",
    "lots": [
      {
        "id": "1",
        "status": "complete",
        "description": null
      }
    ],
    "title": "Data deletion Inspections",
    "status": "complete",
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "description": "UK Biobank is a large-scale biomedical database and research resource containing genetic, lifestyle and health information from around half a million UK participants. \nUK Biobank's database, which includes blood samples, heart and brain scans and genetic data of the 500,000 volunteer participants, is globally accessible to approved researchers\nwho are undertaking health-related research that's in the public interest.\nProtecting the confidentiality and security of participant data is UK Biobank's highest priority. Before a recent widely reported data incident, UK Biobank was undertaking a phased transition from a data download model to a more secure, platform-by-default\naccess model through the UK Biobank Research Analysis Platform (UKB-RAP), in line with principles of a Secure Data Environment approach. The data incident has resulted in the acceleration of the delivery and implementation of technical and operational controls\nthat were in development, principally the introduction of an automated checking system to prevent de-identified participant data being egressed from the research analysis platform.\nAs part of addressing the legacy data download model, UK Biobank is working to complete the transition and ensure outstanding downloaded data are deleted. Affected researchers are being contacted to complete this work, and UK Biobank intends to procure services from two independent third-party organisations to report on the researchers' data deletion position.\nUK Biobank issued a UK5: Transparency notice - Procurement Act 2023 for this award which was published on 7 August 2026.  UK Biobank intends to award the contracts directly to suppliers that are not excluded suppliers pursuant to section 41(1)(a) of the Procurement Act 2023 and on the basis of extreme and unavoidable urgency.\nUK Biobank has conducted a thorough investigation into a recent widely reported incident whereby de-identified data relating to UK Biobank participants was purportedly listed for sale on a consumer website in China. The purported sale was a clear breach of the contractual commitments made by approved researchers who had legitimate access to UK Biobank's biomedical database. UK Biobank provides approved researchers with access to the de-identified data contained in its database via its secure research analysis platform which was (and remains) suspended following the incident. As part of a series of measures to prevent further misuse of de-identified participant data and reassure participants that their data is safe and secure, UK Biobank is enhancing its systems including accelerating the development of an automated checking system to prevent de-identified participant data being egressed from the research analysis platform. UK Biobank intends to enter into contracts with KPMG and BSI respectively to contact the research institutions which previously accessed UK Biobank's biomedical database, obtain relevant information and evidence around the deletion of UK Biobank's data on completion of their research in line with their contractual obligations. It is necessary for reasons of extreme and unavoidable urgency that the contracts to obtain evidence, review and report on the data deletion status of (in aggregate) projects of ~1,000 relevant institutions are entered into without delay and therefore a competitive tendering exercise cannot be undertaken. This exercise will give UK Biobank a better picture of the security of participant records used in completed and ongoing projects and assist UK Biobank to resume its focus on allowing safe and secure access to researchers worldwide to conduct vital research into the diagnosis, prevention and treatment of diseases.",
    "procurementMethod": "direct",
    "procurementMethodDetails": "Direct award"
  },
  "buyerID": [],
  "parties": [
    {
      "id": "GB-COH-04978912",
      "name": "UK BIOBANK LIMITED",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKD35",
        "country": "GB",
        "locality": "Stockport",
        "postalCode": "SK3 0SA",
        "countryName": "United Kingdom",
        "streetAddress": "Units 1 & 2 Spectrum Way,"
      },
      "details": {
        "classifications": [
          {
            "id": "publicAuthoritySubCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - sub-central government"
          }
        ]
      },
      "identifier": {
        "id": "04978912",
        "scheme": "GB-COH"
      },
      "contactPoint": {
        "email": "tenders@ukbiobank.ac.uk"
      },
      "additionalIdentifiers": [
        {
          "id": "PXGY-4832-TWCN",
          "scheme": "GB-PPON"
        }
      ]
    },
    {
      "id": "GB-COH-OC301540",
      "name": "KPMG LLP",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKI42",
        "country": "GB",
        "locality": "London",
        "postalCode": "E14 5GL",
        "countryName": "United Kingdom",
        "streetAddress": "15 Canada Square"
      },
      "details": {
        "url": "http://KPMG.CO.UK",
        "vcse": false,
        "scale": "large",
        "shelteredWorkshop": false,
        "publicServiceMissionOrganization": false
      },
      "identifier": {
        "id": "OC301540",
        "scheme": "GB-COH"
      },
      "contactPoint": {
        "email": "psopportunities@kpmg.co.uk"
      },
      "additionalIdentifiers": [
        {
          "id": "PMGV-6254-LTTL",
          "scheme": "GB-PPON"
        }
      ]
    },
    {
      "id": "GB-COH-07864997",
      "name": "BSI STANDARDS LIMITED",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKI75",
        "country": "GB",
        "locality": "London",
        "postalCode": "W4 4AL",
        "countryName": "United Kingdom",
        "streetAddress": "389 Chiswick High Road"
      },
      "details": {
        "url": "http://www.bsigroup.com",
        "vcse": false,
        "scale": "large",
        "shelteredWorkshop": false,
        "publicServiceMissionOrganization": false
      },
      "identifier": {
        "id": "07864997",
        "scheme": "GB-COH"
      },
      "contactPoint": {
        "email": "standards.solutions@bsigroup.com"
      },
      "additionalIdentifiers": [
        {
          "id": "PXNT-1825-CMZV",
          "scheme": "GB-PPON"
        }
      ]
    }
  ],
  "language": "en",
  "initiationType": "tender"
}

{
  "id": "075437-2026",
  "tag": [
    "award",
    "contract"
  ],
  "date": "2026-08-07T16:12:35+01:00",
  "ocid": "ocds-h6vhtk-06df71",
  "buyer": {
    "id": "GB-COH-04978912",
    "name": "UK BIOBANK LIMITED"
  },
  "awards": [
    {
      "id": "1",
      "items": [
        {
          "id": "1",
          "relatedLot": "1",
          "deliveryAddresses": [
            {
              "region": "UK",
              "country": "GB",
              "countryName": "United Kingdom"
            }
          ],
          "additionalClassifications": [
            {
              "id": "79313000",
              "scheme": "CPV",
              "description": "Performance review services"
            }
          ]
        }
      ],
      "title": "Data deletion inspections",
      "value": {
        "amount": 1250000,
        "currency": "GBP",
        "amountGross": 1500000
      },
      "status": "pending",
      "renewal": {
        "description": "The effectiveness of such independent third-party reporting will be assessed during the initial period to determine whether any extension in service support is required.  The contract value stated above is an estimate for the initial period, noting that the scope and length of any extension is uncertain."
      },
      "documents": [
        {
          "id": "075437-2026",
          "url": "https://www.find-tender.service.gov.uk/Notice/075437-2026",
          "format": "text/html",
          "noticeType": "UK5",
          "description": "Transparency notice on Find a Tender",
          "documentType": "awardNotice",
          "datePublished": "2026-08-07T16:12:35+01:00"
        }
      ],
      "suppliers": [
        {
          "id": "GB-COH-OC301540",
          "name": "KPMG LLP"
        }
      ],
      "hasRenewal": true,
      "milestones": [
        {
          "id": "1",
          "type": "futureSignatureDate",
          "status": "scheduled",
          "dueDate": "2026-08-24T23:59:59+01:00"
        }
      ],
      "relatedLots": [
        "1"
      ],
      "aboveThreshold": true,
      "contractPeriod": {
        "endDate": "2027-08-23T23:59:59+01:00",
        "startDate": "2026-08-24T00:00:00+01:00",
        "maxExtentDate": "2028-08-23T23:59:59+01:00"
      },
      "mainProcurementCategory": "services"
    },
    {
      "id": "2",
      "items": [
        {
          "id": "1",
          "relatedLot": "1",
          "deliveryAddresses": [
            {
              "region": "UK",
              "country": "GB",
              "countryName": "United Kingdom"
            }
          ],
          "additionalClassifications": [
            {
              "id": "79313000",
              "scheme": "CPV",
              "description": "Performance review services"
            }
          ]
        }
      ],
      "value": {
        "amount": 1250000,
        "currency": "GBP",
        "amountGross": 1500000
      },
      "status": "pending",
      "renewal": {
        "description": "The effectiveness of such independent third-party reporting will be assessed during the initial period to determine whether any extension in service support is required.  The contract value stated above is an estimate for the initial period, noting that the scope and length of any extension is uncertain."
      },
      "documents": [
        {
          "id": "075437-2026",
          "url": "https://www.find-tender.service.gov.uk/Notice/075437-2026",
          "format": "text/html",
          "noticeType": "UK5",
          "description": "Transparency notice on Find a Tender",
          "documentType": "awardNotice",
          "datePublished": "2026-08-07T16:12:35+01:00"
        }
      ],
      "suppliers": [
        {
          "id": "GB-COH-07864997",
          "name": "BSI STANDARDS LIMITED"
        }
      ],
      "hasRenewal": true,
      "milestones": [
        {
          "id": "1",
          "type": "futureSignatureDate",
          "status": "scheduled",
          "dueDate": "2026-08-24T23:59:59+01:00"
        }
      ],
      "relatedLots": [
        "1"
      ],
      "aboveThreshold": true,
      "contractPeriod": {
        "endDate": "2027-08-23T23:59:59+01:00",
        "startDate": "2026-08-24T00:00:00+01:00",
        "maxExtentDate": "2028-08-23T23:59:59+01:00"
      },
      "mainProcurementCategory": "services"
    }
  ],
  "tender": {
    "id": "ocds-h6vhtk-06df71",
    "lots": [
      {
        "id": "1",
        "status": "complete",
        "description": null
      }
    ],
    "title": "Data deletion Inspections",
    "status": "complete",
    "documents": [
      {
        "id": "conflictOfInterest",
        "description": "Not published",
        "documentType": "conflictOfInterest"
      }
    ],
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "description": "UK Biobank is a large-scale biomedical database and research resource containing genetic, lifestyle and health information from around half a million UK participants.\nUK Biobank's database, which includes blood samples, heart and brain scans and genetic data of the 500,000 volunteer participants, is globally accessible to approved researchers who are undertaking health-related research that's in the public interest.\nProtecting the confidentiality and security of participant data is UK Biobank's highest priority. Before a recent widely reported data incident, UK Biobank was undertaking a phased transition from a data download model to a more secure, platform-by-default access model through the UK Biobank Research Analysis Platform (UKB-RAP), in line with principles of a Secure Data Environment approach. The data incident has resulted in the acceleration of the delivery and implementation of technical and operational controls that were in development, principally the introduction of an automated checking system  to prevent de-identified participant data being egressed from the research analysis platform .\nAs part of addressing the legacy data download model, UK Biobank is working to complete the transition and ensure outstanding downloaded data are deleted. Affected researchers are being contacted to complete this work, and UK Biobank intends to procure services from two independent third-party organisations to report on the researchers' data deletion position.",
    "procurementMethod": "direct",
    "procurementMethodDetails": "Direct award",
    "procurementMethodRationale": "UK Biobank has conducted a thorough investigation into a recent widely reported incident whereby de-identified data relating to UK Biobank participants was purportedly listed for sale on a consumer website in China. The purported sale was a clear breach of the contractual commitments made by approved researchers who had legitimate access to UK Biobank's biomedical database.\nUK Biobank provides approved researchers with access to the de-identified data contained in its database via its secure research analysis platform which was (and remains) suspended following the incident. As part of a series of measures to prevent further misuse of de-identified participant data and reassure participants that their data is safe and secure, UK Biobank is enhancing its systems including accelerating the development of an automated checking system to prevent de-identified participant data being egressed from the research analysis platform.\nUK Biobank intends to enter into contracts with KPMG and BSI respectively to contact the research institutions which previously accessed UK Biobank's biomedical database, obtain relevant information and evidence around the deletion of UK Biobank's data on completion of their research in line with their contractual obligations. It is necessary for reasons of extreme and unavoidable urgency that the contracts to obtain evidence, review and report on the data deletion status of (in aggregate) projects of ~1,000 relevant institutions are entered into without delay and therefore a competitive tendering exercise cannot be undertaken. This exercise will give UK Biobank a better picture of the security of participant records used in completed and ongoing projects and assist UK Biobank to resume its focus on allowing safe and secure access to researchers worldwide to conduct vital research into the diagnosis, prevention and treatment of diseases.",
    "procurementMethodRationaleClassifications": [
      {
        "id": "urgency"
      }
    ]
  },
  "buyerID": [],
  "parties": [
    {
      "id": "GB-COH-04978912",
      "name": "UK BIOBANK LIMITED",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKD35",
        "country": "GB",
        "locality": "Stockport",
        "postalCode": "SK3 0SA",
        "countryName": "United Kingdom",
        "streetAddress": "Units 1 & 2 Spectrum Way,"
      },
      "details": {
        "classifications": [
          {
            "id": "publicAuthoritySubCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - sub-central government"
          }
        ]
      },
      "identifier": {
        "id": "04978912",
        "scheme": "GB-COH"
      },
      "contactPoint": {
        "email": "tenders@ukbiobank.ac.uk"
      },
      "additionalIdentifiers": [
        {
          "id": "PXGY-4832-TWCN",
          "scheme": "GB-PPON"
        }
      ]
    },
    {
      "id": "GB-COH-OC301540",
      "name": "KPMG LLP",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKI42",
        "country": "GB",
        "locality": "London",
        "postalCode": "E14 5GL",
        "countryName": "United Kingdom",
        "streetAddress": "15 Canada Square"
      },
      "details": {
        "url": "http://KPMG.CO.UK",
        "vcse": false,
        "scale": "large"
      },
      "identifier": {
        "id": "OC301540",
        "scheme": "GB-COH"
      },
      "contactPoint": {
        "email": "psopportunities@kpmg.co.uk"
      },
      "additionalIdentifiers": [
        {
          "id": "PMGV-6254-LTTL",
          "scheme": "GB-PPON"
        }
      ]
    },
    {
      "id": "GB-COH-07864997",
      "name": "BSI STANDARDS LIMITED",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKI75",
        "country": "GB",
        "locality": "London",
        "postalCode": "W4 4AL",
        "countryName": "United Kingdom",
        "streetAddress": "389 Chiswick High Road"
      },
      "details": {
        "url": "http://www.bsigroup.com",
        "vcse": false,
        "scale": "large"
      },
      "identifier": {
        "id": "07864997",
        "scheme": "GB-COH"
      },
      "contactPoint": {
        "email": "standards.solutions@bsigroup.com"
      },
      "additionalIdentifiers": [
        {
          "id": "PXNT-1825-CMZV",
          "scheme": "GB-PPON"
        }
      ]
    }
  ],
  "language": "en",
  "initiationType": "tender"
}