The findings of the internal review examining events at the UK Biobank should be published in full. In its response to this report the government and UKRI should set out the technical protections that will be put in place at the UK Biobank to ensure it properly protects citizens’ data. They should also set out their view on whether an organisation with such inadequate data hygiene is a suitable candidate to receive public funds. (Recommendation, Paragraph 50) Building block four: Delivery