Biobank Quality Management: Building a System That Lasts
Biobank quality management is the organized system of standards, procedures, monitoring and records that makes sure every sample and every piece of linked data a biobank holds is fit for the research it will be used for. It covers the physical side, such as storage temperatures and processing times, and the information side, such as accurate records, controlled access and a full audit trail. A good quality management system lets a biobank prove, not just claim, that its resources can be trusted.
Why biobank quality management matters now
Research using biobank resources has changed in scale and ambition. Studies now combine thousands of samples with genomic sequences, imaging and years of clinical follow-up, and results from those studies feed drug discovery, diagnostics and public health decisions. A quality failure that once spoiled one experiment can now distort a large analysis or a model trained on biased data.
Scrutiny has also increased. Funders, ethics committees, regulators and participants expect biobanks to show how they protect both sample integrity and participant information. The 2026 public debate around UK Biobank made clear that quality is not only about freezers. It is also about whether a research resource controls how its data is accessed and used. Modern biobank quality management has to cover both.
The standards behind biobank quality management
Several standards and guidance documents shape how biobanks build their quality systems. Most biobanks draw on more than one.
ISO 20387
ISO 20387 is the international standard for biobanking. It sets general requirements for competence, impartiality and consistent operation, including requirements on personnel, facilities, equipment, processes, data and quality control. Accreditation against it gives external confirmation that a biobank operates to a recognized level.
ISO 9001 and laboratory standards
Some biobanks base their quality system on ISO 9001, the general quality management standard, and add biobank-specific controls. Those attached to clinical laboratories often work within ISO 15189 or national laboratory regulations as well.
ISBER Best Practices and SPREC
The International Society for Biological and Environmental Repositories (ISBER) publishes Best Practices that cover storage, processing, safety, training and records. The Standard PREanalytical Code (SPREC) gives a consistent way to record the pre-analytical conditions that most affect sample quality.
Accreditation programs
In the United States, the College of American Pathologists runs a Biorepository Accreditation Program. Other countries have national schemes. These programs translate general principles into inspection checklists that biobanks can work toward.
The building blocks of a quality management system
Whatever standard a biobank follows, its quality system tends to include the same building blocks.
- Documented procedures. Standard operating procedures for collection, processing, storage, retrieval, shipping and disposal, with version control and staff sign-off.
- Trained, competent staff. Training records and periodic competency checks for everyone who handles samples or data.
- Equipment control. Calibration, maintenance schedules and continuous monitoring of freezers, tanks and centrifuges, with alarms that reach someone at any hour.
- Sample quality testing. Periodic testing of stored material, for example nucleic acid integrity or protein stability, to confirm that storage conditions are protecting quality over time.
- Deviation and corrective action. A process to record any departure from procedure, investigate its cause, fix it and check that the fix worked.
- Internal audits and management review. Regular checks that procedures are followed and that the system itself is improving.
Who owns quality
A quality system only works when responsibilities are clear. Most biobanks name a quality manager who owns the system, keeps procedures current and runs audits. Laboratory leads own sample handling and equipment. A data or informatics lead owns record accuracy, vocabularies, audit trails and access controls. An access committee, often including lay members, decides which projects may use the resource. Writing these roles down, and giving each one the authority to stop work when something is wrong, prevents quality from becoming everyone’s job and therefore nobody’s.
Data quality: the half that is often missed
Many biobank quality systems were designed around physical samples. Today the data attached to those samples is just as valuable, and it needs the same discipline.
Accuracy and completeness
Every sample record should carry correct identifiers, sample type, processing details, location, volume and consent status. Missing or inconsistent fields make samples hard to find and harder to trust. Controlled vocabularies, validation at the point of entry and regular reconciliation against physical inventory all help.
Consistency across collections
Biobanks that hold several collections, or that work with partners, need consistent definitions across them. If one collection records smoking status as a yes or no and another as pack-years, the data cannot be combined without careful data harmonization. Building consistency into the quality system from the start saves that work later.
Traceability
Every change to a record should be logged with who made it, when and why. Traceability lets a biobank explain a discrepancy, reverse an error and show auditors that its records reflect reality.
Controlled access
Quality includes making sure data is only used as intended. Access should be approved, logged and limited to what each project needs. Outputs leaving a secure environment should be checked so that individual participants cannot be identified.
Comparing approaches to research data access
How a biobank gives researchers access to its data has a direct effect on quality and control. The table compares three common models.
| Quality dimension | Data extracts sent to researchers | Centralized cloud workspace | Federated research environment |
|---|---|---|---|
| Version control of data | Copies drift once sent | One copy, held by the provider | One source of truth at the biobank |
| Audit trail of use | Lost after transfer | Logged by the workspace | Logged at the source, per project |
| Consent changes applied | Hard to enforce on copies | Applied on refresh | Applied in place, immediately |
| Output checking | Usually none | Varies by provider | Built in before any result is released |
| Where data sits | On researcher systems | In the provider’s cloud | Data never leaves the source |
A Trusted Research Environment (TRE) brings many of these controls together: approved researchers work on the data inside a secure space, every action is logged, and results pass an output check before release. A federated design goes a step further by running that environment where the data already lives, so the biobank keeps full control of its quality-managed records.
Measuring quality over time
A quality system needs indicators that show whether it is working. Useful measures include the share of sample records with complete required fields, the number of open deviations and how long they take to close, the result of each inventory reconciliation, the time from a consent change to its application on affected samples, and the number of research outputs that needed changes at output checking. Tracking a small set of indicators like these every month, and reviewing them at management review, turns quality from a one-off accreditation exercise into a habit that improves the resource year after year.
A practical biobank quality management checklist
Use the following questions to test your current system.
- Are all procedures current, version controlled and signed off by the staff who use them?
- Is every freezer and tank monitored around the clock, with alarms that reach a named person?
- Are deviations recorded, investigated and closed with evidence that the fix worked?
- Do sample records include pre-analytical data, volume, location and consent status, using controlled terms?
- Is inventory reconciled against physical contents on a fixed schedule?
- Is every change to sample or participant data logged with who, when and why?
- Do researchers access data in a secure environment with output checks, rather than receiving copies?
Any “no” points to a specific improvement. Many biobanks find that their physical controls are mature and their data controls are the area with most room to grow.
Where to start
If you are building or refreshing a biobank quality management system, start by choosing the standard you will align to, most often ISO 20387, and running a gap assessment against it. Then treat data quality as a first-class part of the system rather than an afterthought: define your controlled vocabularies, set up audit trails and decide how researchers will access data without copies leaving your control. Strong quality management is what turns stored material into research that others can rely on.
Frequently asked questions
What is biobank quality management?
It is the system of standards, documented procedures, monitoring, testing and records that ensures a biobank’s samples and linked data are reliable and fit for research use.
Which standard is most important for biobank quality?
ISO 20387 is the international standard written specifically for biobanking. Many biobanks also use ISO 9001, ISBER Best Practices and national accreditation programs alongside it.
Does biobank quality management cover data as well as samples?
It should. Accurate, consistent and traceable records, controlled access and output checking are as important to research quality as storage temperature and processing time.
How often should stored samples be tested for quality?
There is no single interval. Biobanks set testing schedules based on sample type, storage method and intended use, and record the results against the samples tested.
How does a federated environment support quality management?
It keeps one quality-managed copy of the data at the biobank, applies consent changes immediately, logs every use and checks outputs before release, because data never leaves the source.
Is accreditation required?
Not always. Accreditation is often voluntary, but it gives funders, partners and participants independent assurance that the biobank meets a recognized standard.