Genomics and National Security

Jim Shannon Excerpts

Wednesday 8th March 2023 Westminster Hall

[Mr Alistair Carmichael (Orkney and Shetland) (LD)]

I beg to move,

That this House has considered genomics and national security.

Alistair Campbell, of course, might be somebody who will wind up at some point. Notwithstanding that minor quibble, it is a pleasure to serve with you in the Chair, Mr Davies, and to bring what might be seen by some as a slightly niche subject to the House. I am pleased to see the Minister in his place.

It is worth stating at the outset why I have initiated the debate and what I hope to achieve with it. Let me first accentuate the positives. Genomics is a great British success story and the opportunities for further advancement in the future are phenomenal. In 2003, two years ahead of schedule, the Human Genome Project successfully sequenced the human genome. Since then, genomic research has transformed healthcare. Numerous genomic applications, including non-invasive prenatal genetic testing, DNA-based forensics, genetic disease diagnostics and covid-19 surveillance are now commonplace. Indeed, covid exposed the importance of genomics in monitoring new variants and enabling targeted interventions at a community level. The industry is already worth billions and it will only grow.

But we all know that where there are opportunities, there are also risks—and that is where I want to take the Minister’s attention today. I have been a Minister; he has been a Minister. We all understand that although government can do many great things, it is often clunky and finds difficulties responding when science and technology bring change at a quite bewildering pace, which is exactly what is happening here.

[Jim Shannon (Strangford) (DUP)]

I thank the right hon. Gentleman for securing this debate; he is right to underline the issue of risk. Not so long ago I read an article that highlighted the previous existing ties between UK universities and Chinese state-linked companies, about which the US National Security Commission on Artificial Intelligence had issued a warning. It referred to a

“global collection mechanism for Chinese government genetic databases.”

Does the right hon. Member agree that although it is important to encourage the use of genomics for early intervention and prevention, the national security of information gathered is also of utmost—and perhaps even greater—importance?

[Mr Carmichael]

Absolutely, and the question of the work in our universities and other research institutions is one to which I will turn in some detail later. I am grateful to the hon. Gentleman for giving me the opportunity to highlight its importance in this debate.

Consider, though, what happened in recent years in relation to data protection. Regulation of data use was essentially analogue in a world that had gone digital, and it was therefore possible for a company such as Cambridge Analytica to take advantage of poor regulation and to build a business model that was all about the manipulation of opinion.

Genomics is a subject that is often poorly understood outside its own walls. A few years ago, we would have said exactly the same thing about data protection and mass data capture; we simply did not understand the significance of data capture through social media. Well, we understand that better now, and as a consequence we are having to scramble to catch up. If the Minister wants a bit of entertaining bedtime reading in this subject, I recommend Chris Wylie’s book—forgive the vulgarity, but this is the title—“Mindf*ck”. It is about the creation of the Cambridge Analytica model, which used data captured from social media. If we do not learn the lessons of data capture and data protection, we risk the same things happening in genomics and national security.

As a country, we need to ensure that we have a suitable regulatory environment that will protect the gains we have made in the genomics space. That regulation has to protect individual data privacy rights and our national security and economic interests. I believe that our regime falls short in the latter aspect, and it must be made fit for purpose.

We know the positive applications of genomics, and in the coming decade genomics research could lead to breakthrough therapies for hundreds of genetic diseases. It could also create a truly personalised approach to healthcare and enable us to predict the risk of disease at a population level. However, there are also enormously dangerous applications of the technology. Genomic research could be, and in some cases already is being, deployed to widen global health inequalities, curtail human rights, and threaten global peace and stability. There is a spectrum of threat involved, which can range from population engineering to improve “population quality” to genetic extinction technologies in bioweapons.

Genomics is the next frontier in surveillance for repressive regimes such as China, and in 2022, the Citizen Lab found that since 2016 the Chinese Government had been conducting mass DNA campaigns in Tibet and in Xinjiang, as well as a police-led national programme of male DNA collection, to intensify state repression and control.

How are we in the UK mitigating those threats? From Watson and Crick to John Sulston’s vision to map the human genome, applying technology developed by Fred Sanger, the UK has long led the world in this vital research. Still today, our world-leading universities and thriving genomics ecosystem, combined with our continued role in the western alliance, mean that the UK can lead the way in ensuring that genomics is used for the right reasons and in the right way. However, that will continue only if the right decisions are taken now.

More than half our research is a product of international partnerships, and those partnerships need to be based on shared values over the protection of human rights and on reciprocity. The Centre for the Protection of National Infrastructure already does important work to protect the integrity of international research collaboration, but we must be more proactive. Our institutions need to get the most out of international scientific collaboration while protecting intellectual property, sensitive research, personal information and, ultimately, our national defence.

Already, it is evidenced that questionable actors are finding a way into the space left by poor regulation, and we risk finding ourselves a few years down the line in the situation we were in some years ago when we had to remove Huawei from the roll-out of the 5G network. Had we acted earlier on Huawei, we would not have had to engineer it out later.

In the field of genomics, more attention needs to be paid to the work of the Chinese gene giant, the BGI Group. BGI is one of a large number of Chinese state-linked companies that have been implicated in the repression of Uyghurs and the forced collection of genetic data. It has a lengthy history of collaboration with the People’s Liberation Army, and is just one example of a company that should not be operating without constraint within our institutions.

The UK relies on the general data protection regulation to regulate the work of groups such as BGI and hopes that genomics firms such as BGI will follow GDPR, rather than the Chinese national security law, but I genuinely question just how likely that is. As the Minister will know, article 7 of the national security law states that

“organisations and citizens shall support, assist, and cooperate with national intelligence efforts”.

That is a law to which BGI is subject. The BGI Group does not submit itself to independent data security or cyber-security audits, and essentially, we are prepared to take BGI on trust. To me, that feels a little naive.

The US National Security Commission on Artificial Intelligence noted:

“BGI may be serving…as a global collection mechanism for Chinese government genetic databases”.

It also said that BGI

“poses similar threats in the biotechnology sector as Huawei does in the communications sector.”

In 2020, the US Department of Commerce added Xinjiang Silk Road BGI and Beijing Liuhe BGI—two BGI subsidiaries—to an export blacklist for

“conducting genetic analyses used to further the repression of Uyghurs and other Muslim minorities”.

If that is the conclusion of some of our most trusted allies’ agencies, why is the United Kingdom so determined to take a different approach? I fear it may be that we are already further down the road of reliance on companies such as BGI than many in the Government are prepared to acknowledge and admit.

On a point made by the hon. Member for Strangford (Jim Shannon), a recent Times investigation found that no fewer than 42 universities in the United Kingdom that have links with Chinese institutions connected to the repression of the Uyghurs, espionage, nuclear weapons research or hacking. Many of them have had links with Chinese universities carrying out military work. Twenty-one universities, including Cambridge, Sheffield, Leeds and Queen Mary University of London, are partnered with what is termed “very high-risk Chinese institutions”.

The reach of BGI into key areas of healthcare and scientific research should be of particular concern. Let me contrast the view of the National Counterintelligence and Security Centre in the USA with the answer given recently to a written parliamentary question asked by the hon. Member for Hornsey and Wood Green (Catherine West), in which Ministers stated that

“the genomics industry is not designated as critical national infrastructure in the UK”.

The truth of the matter is that genomics is playing a role not just in the advancement of science but in economic competition between the UK and our allies on the one hand and competitor states on the other. It is a new front in the defence of the realm.

As far as I am able to tell, there have been no cross-departmental discussions at Cabinet level about the involvement of China and its state-linked companies in the UK genomics and bionomics sector. That has got to change. We need much more proactive work, both within the Government and among the Government, industry and academia. We need to identify potential issues and put in place structures that will protect data privacy and ensure the proper use of genomic research.

If companies such as BGI are not prepared to submit to meaningful compliance audits, we have to stop treating them as if they are trusted partners. At the risk of stating the totally blindingly obvious, once data is shared, we cannot get it back. Although I welcome the Government’s moves last year, including the Trusted Research campaign, led by the CPNI, and the launch of the research collaboration advice team in the Department for Business, Energy and Industrial Strategy, those bodies need to be properly resourced and given proactive mandates to advise and support universities and others engaged in research in this area.

How do we start to turn this situation round within the limits of what is currently available to us? Other things can probably be done with the legislation that is currently going through the House, but what can we do with what is currently available? I suggest to the Minister that the most important step we can take is to bring the genomics industry within the definition of critical national infrastructure. That is defined as:

“Those critical elements of infrastructure (assets, facilities, systems, networks, or processes, and the essential workers who operate and facilitate them), the loss or compromise of which could result in (a) major detrimental impact and the availability, integrity, or delivery of essential services, including those services where integrity, if compromised, could result in significant loss of life or casualties—taking into account significant economic or social impacts; and/or (b) significant impact on national security, national defence, or the functioning of the state.”

It defies belief that genomics is not already included in that definition, and that the Government have apparently not even considered putting it in.

We need to start to scrutinise the work of Chinese genomics firms that are involved in the UK’s health and research sector in the same way that we currently scrutinise firms in areas such as defence technology, telecoms and CCTV surveillance. There must be no trade-off between research success and the promotion of our democratic values and adherence to standards of human rights. Just as the UK Government eventually opted not to allow Huawei access to our 5G critical infrastructure, they must now consider the threats to our national security of allowing BGI and other companies linked to competitor or hostile Governments to access our genomic data.

This is not the sexiest subject that we are going to find, and I suspect that it will not be raised on many doorsteps yet, but consider how the previous exercise in relation to data capture worked out, whereby people understood too late what they had been part of, and the concerns that that raised. This is an opportunity for the Government, just for once, to get ahead of the curve. I would like to hear from the Minister that he understands that and that work is going on within the Government to do exactly that.