A comparative analysis of the requirements for the use of data in biobanks based in Finland, Germany, the Netherlands, Norway and the United Kingdom

Medical Law International

Volumn 14, Issue 4, 2014, Pages 187-212

  Moraia, Linda Briceño ^a   Kaye, Jane ^a   Tasse, Anne Marie ^b   Knoppers, Bartha M ^b   Mitchell, Colin ^a   Soini, Sirpa ^c   Hoppe, Nils ^d   Wallace, Susan E ^e   Øien, Morten ^f  

^a UNIVERSITY OF OXFORD   (United Kingdom)

^b MCGILL UNIVERSITY   (Canada)

^c NATIONAL PUBLIC HEALTH INSTITUTE   (Finland)

^d LEIBNIZ UNIVERSITY HANNOVER   (Germany)

^e UNIVERSITY OF LEICESTER   (United Kingdom)

^f NORWEGIAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Norway)

Author keywords

Access to data; Biobanks; Biomedical research; Cross border; Data protection

Indexed keywords

ARTICLE; BIOBANK; FINLAND; GERMANY; HEALTH PRACTITIONER; HUMAN; INFORMATION PROCESSING; LAW; MEDICAL INFORMATION; MEDICAL RESEARCH; NETHERLANDS; NORWAY; UNITED KINGDOM;

EID: 84937906357     PISSN: 09685332     EISSN: 20479441     Source Type: Journal    
DOI: 10.1177/0968533215571956     Document Type: Article

References (64)

1. On a legislative level, there is no uniform definition of a biobank. Furthermore, it is not clear whether the term 'biobank' includes samples and related data. For the purpose of this article, the term biobank is defined as 'an organized collection of human biological material and associated information stored for one or more research purposes'. Available at: http://www.p3g.org/biobank-lexicon (accessed 8 April 2014).
2. G. Church, C. Heeney, N. Hawkins, J. de Vries, P. Boddington, J. Kaye, M. Bobrow and B. Weir, 'Public Access to Genome-wide Data: Five Views on Balancing Research with Privacy and Protection', PLoS Genet 5(10) (2009), p. 1;
3. J. Gillot, 'Human rights, privacy and medical research: analysing UK Policy on tissue and data', Genetic Interest Group (2006). Available at: http://www.bionews.org.uk/page-37875.asp;
4. G. Laurie, P. Mallia, D. A. Frenkel, A. Krajewska, H. Moniz, S. Nordal, C. Pitz and J. Sandor, 'Managing Access to Biobanks: How Can We Reconcile Individual Privacy and Public', Medical Law International 10 (2010), p. 315-337.
5. T. Schulte in den Bäumen et al., 'Data Protection and Sample Management in Biobanking-A Legal Dichotomy', Genomics, Society and Policy 6 (2010), pp. 33-46.
6. J. Bovenberg, 'Legal Pathways for Cross-border Research: Building a Legal Platform for Biomedical Academia', European Journal of Human Genetics 15 (2007), pp. 522-524.
7. Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, OJ L 281. Available at: http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:31995L0046:en:HTML (accessed 8 July 2014).
8. BioSHaRE is a consortium of leading biobanks and international researchers from all domains of biobanking science. Available at: https://www.bioshare.eu/(accessed 8 April 2014).
9. F. Colledge, B. Elger and H.C. Howard, 'A Review of the Barriers to Sharing in Biobanking', Biopreservation and Biobanking 11(6) (2013), p. 343.
10. Available at: http://ec.europa.eu/justice/data-protection/article-29/index-en.htm (accessed 8 April 2014).
11. See in general also J.-E. Litton and J. Bovenberg, 'To Explore Pan-European Solutions for the Cross-border Data Protection Issues Associated with BBMRI', BBMRI Joint Deliverable WP5 (2011);
12. T. Lemmens and L. Austin, 'The End of Individual Control over Health Information: Promoting Fair Information Practices and Governance of Biobank Research', in J. Kaye and M. Stranger, eds. Principles and Practice in Biobank Governance. (Farnham: Ashgate, 2009), p. 243.
13. English translation is available at: http://www.finlex.fi/fi/laki/kaannokset/1999/en19990523.pdf (accessed 8 April 2014).
14. J. Simon et al, 'A Legal Framework for Biobanking: The German Experience', European Journal of Human Genetics 15 (2007), pp. 528-532.
15. Federal Data Protection Act (BDSG), in the version promulgated on 14 January 2003 (Federal Law Gazette I, p. 66), last amended by Article 1 of the Act of 14 August 2009 (Federal Law Gazette I, p. 2814), in force from 1 September 2009. An English version of the Act is available at: http://www.bfdi.bund.de/EN/DataProtectionActs/Artikel/BDSG-idFv01092009.pdf?-blob=publicationFile (accessed 8 July 2014).
16. See the Codes of Conduct for medical research set out by the Dutch Council of the Federation of Medical Scientific Societies (Federatie Van Medisch Wetenschappelijke Verenigingen). Available at: http://www.federa.org/gedragscodes-codes-conduct-en (accessed 8 April 2014).
17. L. Curren, P. Boddington, H. Gowans, N. Hawkins, N. Kanellopoulou, J. Kaye J, and K. Melham, 'Identifiability, Genomics and U.K. Data Protection Law', European Journal of Health Law 17(4) (2010), 329-344;
18. S.M.C. Gibbons, Elsagen UK Law Report, (April 2004), 14.
19. Data Protection Act 1998, 16 July 1998, Available at: http://www.legislation.gov.uk/ukpga/1998/29/contents
20. and The Data Protection (Processing of Sensitive Personal Data) Order 2000 (accessed 17 February 2000). Available at: http://www.legislation.gov.uk/uksi/2000/417/introduction/made (accessed 8 April 2014).
21. Medicines for Human Use (Clinical Trials) Regulations 2004 (SI 2004/1031)
22. The latest draft is available at: http://www.europarl.europa.eu/sides/getDoc.do?type=TA&reference=P7-TA-2014-0212&language=EN&ring=A7-2013-0402 (accessed 8 July 2014).
23. See the 'Wellcome Trust open letter re: amendments to EU Data Protection Regulation', Available at: http://www.wellcome.ac.uk/stellent/groups/corporatesite/@policy-communications/documents/web-document/WTP055585.pdf (accessed 8 April 2014)
24. and the 'Impact of the draft European Data Protection Regulation and proposed amendments from the rapporteur of the LIBE committee on scientific research', available at: http://www.wellcome.ac.uk/stellent/groups/corporatesite/@policy-communications/documents/web-document/wtvm054713.pdf (accessed 8 April 2014).
25. Jan Philipp Albrecht; 'rapporteur' for the data protection dossier: DRAFT REPORT on the proposal for a regulation of the European Parliament and of the Council on the protection of individual with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) (COM(2012)0011-C7-0025/2012-2012/0011(COD)). Available at: http://www.europarl.europa.eu/meetdocs/2009-2014/documents/libe/pr/922/922387/922387en.pdf (accessed 8 July 2014).
26. On the possible impact of the Draft Regulation (before the Albrecht amendments), see G. Lauss, A. Bialobrzeski, M. Korkhaus, K. Snell, J. Starkbaum, A.E. Vermeer, J. Weigel, H. Gottweis, I. Helén, J. Taupitz and P. Dabrock, 'Beyond genetic privacy. Past, Present and Future of Bioinformation Control Regimes', (2013), 45. Available at: http://private-gen.eu/uploads/media/PRIVATE-Gen-FINAL-REPORT-2013-01.pdf (accessed 2 February 2015).
27. On the impact of the EU Regulation on biomedical research after Albrecht amendments, see M.C. Ploem, M.L. Essink-Bot, 'Proposed EU Data Protection Regulation is a Threat to Medical Research', British Medical Journal 364 (2013), f3534;
28. Protecting health and scientific research in the Data Protection Regulation (2012/0011(COD)): Position of noncommercial research organisations and academics-July 2014. Available at: http://www.wellcome.ac.uk/stellent/groups/corporatesite/@policy-communications/documents/web-document/WTP055584.pdf (accessed 2 February 2014);
29. L. Briceno Moraia and J. Kaye, 'Spies, Data and Research', EMBO Reports, 15(2) (2014), p. 123.
30. F. Colledge, B. Elger and H.C. Howard, 'A Review of the Barriers to Sharing in Biobanking', Biopreservation and Biobanking 11(6) (2013), p. 344.
31. See Article 9 of the Proposal for a regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (COM(2012)0011 Available at: http://www.europarl.europa.eu/sides/getDoc.do?pubRef=-%2F%2FEP%2F%2FTEXT%2BREPORT%2BA7-2013-0402%2B0%2BDOC%2BXML%2BV0%2F%2FEN&language=EN#title1. (accessed 8 July 2014).
32. Opinion 4/2007 on the concept of personal data, WP136 (2007), Available at: http://ec.europa.eu/justice/policies/privacy/docs/wpdocs/2007/wp136-en.pdf
33. 'Personal data' means any information relating to an identified or identifiable natural person ('data subject'); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, unique identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social or gender identity of that person, Available at: http://www.janalbrecht.eu/fileadmin/material/Dokumente/DPR-Regulation-inofficialconsolidated-LIBE.pdf (accessed 8 April 2014).
34. J. Kaye, N. Kanellopoulou, N. Hawkins, H. Gowans, L. Curren and K. Melham, 'Can I Access my Personal Genome? The Current Legal Position in the UK', Medical Law Review 22(1) (2014), p. 64;
35. N. Homer and others, 'Resolving Individuals Contributing Trace Amounts of DNA to Highly Complex Mixtures using High-density SNP Genotyping Microarrays', PLoS Genet 4(8) (2008), p. e1000167. Available at: http://www.plosgenetics.org/article/info%3Adoi%2F10.1371%2Fjournal.pgen.1000167 (accessed 24 October 2014).
36. 'Indeed, using a pseudonym means that it is possible to backtrack to the individual, so that the individual's identity can be discovered, but then only under predefined circumstances. In that case, although data protection rules apply, the risks at stake for the individuals with regard to the processing of such indirectly identifiable information will most often be low, so that the application of these rules will justifiably be more flexible than if information on directly identifiable individuals were processed' (Article 29 Working Party, Opinion 4/2007 on the concept of personal data, 20 June 2007, WP 136 2007). Available at: http://ec.europa.eu/justice/policies/privacy/docs/wpdocs/2007/wp136-en.pdf#page=15&zoom=auto,0,844 (accessed 2 February 2012).
37. J. Kaye, C. Heeney, N. Hawkins and J. de Vries, P. Boddington, 'Data Sharing in Genomics-Re-shaping Scientific Practice', Nature Reviews, Genetics 10 (2009), 334.
38. N. Homer, et al. 'Resolving Individuals Contributing Trace Amounts of DNA to Highly Complex Mixtures Using High-density SNP Genotyping Microarrays', PLoS Genetetics 4 (2008), p. e1000167;
39. J. Couzin, 'Genetic Privacy. Whole-genome Data not Anonymous, Challenging Assumptions', Science 321 (2008), p. 1278.
40. Information Commissioner's Office (2012). Available at: http://www.ico.org.uk/for-organisations/data-protection/topic-guides/∗/media/documents/library/Data-Protection/Practical-application/anonymisation-code.ashx) (accessed 8 April 2014).
41. See also R. assey, 'Anonymisation: Managing Data Protection Risk-the New UK Code', Computer and Telecommunications Law Review 19 (2013), p. 86.
42. S. Lindsay and J. Goldring, 'Anonymizing Data for Secondary Use', Encyclopedia of Case Study Research 2010, Available at: http://srmo.sagepub.com/view/encyc-of-case-studyresearch/n10.xml (accessed 2 february 2014);
43. K.E. Emam, Methods for De-identification of Electronic Health Records for Genomic Research', Genome Medicine 3 (2011), 25.
44. Codes of Conduct for medical research set out by the Dutch Council of the Federation of Medical Scientific Societies (Federatie Van Medisch Wetenschappelijke Verenigingen). Available at: http://www.federa.org/gedragscodes-codes-conduct-en (accessed 8 April 2014).
45. Available at: http://www.medlaw.nl/wp-content/uploads/commentsdutchrshgdprv22.pdf at 2 (accessed 8 July 2014).
46. Available at: http://www.wellcome.ac.uk/stellent/groups/corporatesite/@policy-communications/documents/web-document/wtvm054713.pdf (accessed 8 July 2014).
47. Under Amendment 23 of the so-called Albrecht amendments: [. ] This Regulation should not apply to anonymous data, meaning any data that cannot be related, directly or indirectly, alone or in combination with associated data, to a natural person or where establishing such a relation would require a disproportionate amount of time, expense, and effort, taking into account the state of the art in technology at the time of the processing and the possibilities for development during the period for which the data will be processed. (accessed 8 April 2014). Available at: http://www.janalbrecht.eu/fileadmin/material/Dokumente/DPR-Regulation-inofficial-consolidated-LIBE.pdf (accessed 2 Februaty 2015).
48. See 'Impact of the draft European Data Protection Regulation and proposed Amendments from the rapporteur of the LIBE committee on scientific research', March 2013, available at: http://www.wellcome.ac.uk/stellent/groups/corporatesite/@policy-communications/documents/web-document/wtvm054713.pdf (accessed 8 April 2014).
49. M. Barbareschi, S. Fasanella, C. Cantaloni and S. Giuliani, 'Scientific and Managerial Premises and Unresolved Issues in Tumor Biobanking Activities', in G. Pascuzzi, U. Izzo and M. Macilotti, eds. Comparative issues in the governance of research biobanks. (Berlin Heidelberg:Springer, 2013), pp. 301-309.;
50. G. Laurie, P. Mallia, David A. Frenkel, A. Krajewska and H. Moniz, 'Managing Access to Biobanks: How Can We Reconcile Individual Privacy and Public Interest in Genetic Research?', Medical Law International 10(4) (2010), pp. 315-337.
51. J. Kaye, 'From Single Biobanks to International Networks: Developing E-governance', Human Genetics 130 (2011), p. 377.
52. B.M. Knoppers, J.R. Harris, A.M. Tasse, I. Budin-Liøsne, J. Kaye, M. Deschênes and M. Zawati, 'Towards a Data Sharing Code of Conduct for International Genomic Research', Genome Medicine 3 (2011), p. 46. Available at: http://genomemedicine.com/content/3/7/46
53. See also Finnish National Ethics Committee (2005), 'Human Stem Cells, Cloning and Research'; Finnish National Ethics Committee, 'Opinion on EU research funding on stem cells', 28 February 2006;
54. Finnish National Ethics Committee, 'Statement on Human Dignity and Rights of the Foetus', 13 April 2010.
55. Information Commissioner's Office, 8th Data Protection Principle, available at: http://ico.org.uk/for-organisations/data-protection/the-guide/the-principles (accessed 8 July 2014).
56. M. Taylor and B. Thompson, 'Update on the European Data Protection Regulation', Available at: http://www.p3g.org/sites/default/files/site/default/files/Taylor%20Thompson%20-%20Data%20Protection%20Regulation%20Update%2025%20February%202014%20V3.pdf (accessed 2 February 2015).
57. D. Doiron et al., 'Data Harmonization and Federated Analysis of Population-based Studies: The BioSHaRE Project', Emerging Themes in Epidemiology 10 (2013), p. 12. Available at: http://www.webcitation.org/query.php?url=http://www.bioshare.eu&refdoi=10.1186/1472-6823-14-9 (accessed 2 February 2015).
58. (Data aggregation through anonymous summary statistics from harmonized individual level databases), M. Wolfson et al., 'DataSHIELD: Resolving a Conflict in Contemporary Bioscience-Performing a Pooled Analysis of Individual-level Data Without Sharing the Data', International Journal of Epidemiology 39(5) (2010), pp. 1372-1382.
59. D. Doiron et al., 'Data Harmonization'.
60. J.V.van Vlier-Ostaptchouk et al., 'The Prevalence of Metabolic Syndrome and Metabolically Healthy Obesity in Europe: A Collaborative Analysis of Ten Large Cohort Studies', BMC Endocrine Disorders 14 (2014), p. 9. Available at: http://www.biomedcentral.com/1472-6823/14/9 (accessed 2 February 2015).
61. A. J. Brookes et al., 'Omics Connect Toolbox: A Management, Validation and Visualisation Toolkit for Complex Omics Data, European Society of Human Genetics conference 2013', poster, Available at: https://www.bioshare.eu/content/omics-connect-toolbox-managementvalidation-and-visualisation-toolkit-complex-omics-data (accessed 2 February 2015).
62. T. Adamusiak et al., 'Observ-OM and Observ-TAB: Universal Syntax Solutions for the Integration, Search, and Exchange of Phenotype and Genotype Information', Human Mutation 33(5) (2012), pp. 867-873.
63. J. Kaye, 'Single Biobanks', pp. 377-382;
64. J. Kaye, 'Do We Need a Uniform Regulatory System for Biobanks Across Europe?', European Journal of Human Genetics 14(2) (2006), pp. 245-248.