Ministers working to counter risks from China to UK health data, letter suggests

Ministers are working to counter the risks of Chinese interference in UK health data, a leaked letter suggests.

Correspondence from Cabinet Office minister John Glen reveals the UK is conducting “significant work related to national security” after concerns were raised about Chinese genomics company BGI and a spin-off firm.

Accusations the company had attempted multiple times to hack into the Genomics England database were raised in Parliament in March 2023, but were hastily withdrawn.

MPs have previously raised concerns about genomics giant BGI, as they believe it could be asked to hand over data to the Chinese state, although the company has strongly denied this.

During the pandemic, it won a £11 million contract with the NHS.

Conservative MP Henry Smith wrote to the Deputy Prime Minister Oliver Dowden in February expressing concerns about BGI.

In a response letter seen by the PA news agency, Mr Glen has said: “I understand your concerns regarding this matter and would like to reassure you that significant work related to national security is being conducted to minimise the risks that you have highlighted in your letter.”

Last year, then-science minister George Freeman claimed in a Westminster Hall debate that the NHS datastore was “suffering several hack attacks from BGI each week” during 2014.

But Mr Freeman soon issued a correction to the claim on Parliament’s official record Hansard, writing: “There is no evidence of attempted hacking of Genomics England in 2014 from BGI.”

Conservative former minister Sir Iain Duncan Smith has warned in recent weeks about the risks of UK-based private companies working with Chinese firms, some of whom are public service contractors.

Writing in the Telegraph, Sir Iain suggested UK-based private health companies working with BGI could “seriously undermine attempts to protect UK citizens”.

A spokesman for the Shenzhen-based company pointed to the correction by Mr Freeman, and added: “BGI Group has never been, and will never be, involved in ‘hack attacks’ against anyone.

“BGI Group’s labs meet stringent standards in information security.

“Our data standards globally include the British Standard Institute’s BS10012, considered the gold standard in personal information protection, compliance with the EU’s General Data Protection Regulation (GDPR), and the ISO27001 standard on information security.

“We will continue to support the UK in improving the health of the people and continue to advocate for open and inclusive global scientific collaboration with the aim of fighting diseases more effectively.”