Biobank
A biobank is an organised collection of human biological samples (blood, tissue, DNA, cells, other body fluids) together with associated clinical, lifestyle and genetic data, stored for current and future research. Biobanks range from population cohorts (UK Biobank, Estonian Biobank, the French Constances cohort) and disease-specific collections to hospital pathology archives and the sample collections built by pharmaceutical sponsors from clinical trial participants who have consented to future research. Their scientific value lies in linking samples to longitudinal health outcomes, and they are increasingly the engine of genomic medicine and biomarker discovery. ISO 20387 (2018) sets general requirements for biobanking quality and competence, and the BBMRI-ERIC research infrastructure coordinates European biobanks.
Legal frameworks are largely national. Several countries have dedicated biobank acts (Finland, Sweden, Norway, Estonia, Belgium, Switzerland's Human Research Act), others rely on tissue and research legislation (the UK Human Tissue Act 2004, French bioethics and research laws requiring declaration or authorisation of sample collections), and the ethics committee system oversees access. Consent models range from specific consent through broad consent and dynamic consent (ongoing digital re-engagement) to presumed consent with opt-out for some hospital collections. Governance typically includes an access committee, material transfer agreements, return-of-results and incidental-findings policies, and benefit-sharing rules.
A biological sample is not itself personal data under the GDPR, but the information extracted from it, above all genetic and health data, is, and the sample label linking it to a donor makes the collection a filing system of pseudonymised data. Biobank operators are controllers processing special category data under Art. 9(2)(j) or explicit consent, must run a DPIA, keep data and identity keys separated (often through double coding by a trusted third party), define retention (frequently decades) and put appropriate safeguards in place for sharing with academic and industry partners, many of them outside the EEA, where SCCs and TIAs apply to the data accompanying samples. Sponsors adding a biobanking option to a trial should use a separate, tiered consent, describe possible commercial partners and countries of destination, and address what happens to samples and data on withdrawal.
