This white paper explores the concept of chain of custody as it applies to human tissue and cells in regulated environments. It examines why an unbroken chain of custody is a fundamental requirement under both the Human Tissue Act 2004 and the EU Tissue and Cells Directives, the practical challenges that tissue establishments face in maintaining it, and the role that electronic traceability systems play in building a chain of custody that withstands regulatory scrutiny.
The term "chain of custody" refers to the documented, unbroken trail that records the handling, movement, and transformation of a specimen from its point of origin to its final use or disposal. In forensic science, the chain of custody is well established — evidence must be traceable through every hand it passes through, or it risks being ruled inadmissible in court. In the context of human tissue, the principle is the same, but the stakes are different: the integrity of clinical outcomes, the safety of recipients, and the legitimacy of research findings all depend on knowing exactly where a sample has been, who has handled it, and what has been done to it.
For tissue establishments licensed by the Human Tissue Authority (HTA), maintaining a complete chain of custody is not optional. The Human Tissue Act 2004 and its associated Codes of Practice require that all human tissue held for scheduled purposes is traceable, and the EU Tissue and Cells Directives (transposed into UK law through the Human Tissue (Quality and Safety for Human Application) Regulations 2007) impose specific requirements for donor-to-recipient and recipient-to-donor traceability.
A complete chain of custody for human tissue encompasses every stage in the lifecycle of a sample, from the moment it is procured from a donor to its eventual use, storage, or disposal. The key stages typically include:
Procurement and donation. Recording the identity of the donor (or anonymised donor reference), the date and time of procurement, the type and quantity of tissue obtained, and the consent status. For deceased donors, this includes documentation of the authorisation to procure.
Transportation. Documenting how the tissue was transported from the procurement site to the tissue establishment, including the mode of transport, conditions (such as temperature), the carrier, and the individuals involved in handover.
Receipt and accessioning. Recording the arrival of tissue at the establishment, verifying it against the accompanying documentation, assigning a unique identifier, and logging it into the establishment's inventory system.
Testing. Documenting any serological, microbiological, or other testing performed on the tissue or associated donor samples, including results, dates, and the personnel or laboratory responsible.
Processing. Recording every manipulation of the tissue — splitting, pooling, treatment, sterilisation, or preservation — along with the methods used, the personnel involved, and the environmental conditions. Where a single donation is divided into multiple products, each derived product must retain a link back to the original donation.
Storage. Tracking the precise physical location of the tissue within the establishment's storage infrastructure — building, room, freezer, shelf, rack, drawer, box, and position. Any movement between storage locations must be recorded, including the date, time, and person responsible.
Quarantine and release. Documenting the period during which tissue is held in quarantine pending test results or quality checks, the decision to release it for use, and the identity of the person who authorised the release.
Distribution. Recording the identity of the recipient organisation or individual, the date and method of dispatch, the transport conditions, and confirmation of receipt. For tissue intended for clinical application, this extends to identifying the recipient patient.
Disposal. If tissue is not used, documenting the reason for disposal, the method used, the date, and the person responsible.
The importance of an unbroken chain of custody for human tissue is both regulatory and practical.
Patient safety. If a recipient of tissue develops an adverse reaction or infection, the chain of custody allows the establishment to trace back to the donor, identify every other product derived from the same donation, and alert all other recipients or establishments that may be affected. Without this capability, the establishment cannot perform an effective lookback — placing other patients at risk.
Regulatory compliance. The HTA's Standards require that establishments can demonstrate full donor-to-recipient traceability. During inspection, HTA inspectors routinely select samples at random and ask the establishment to demonstrate the complete chain of custody. An inability to do so is a significant non-compliance finding that can lead to licence conditions, shortfalls, or — in serious cases — suspension of activities.
Research integrity. For tissue used in research, the chain of custody supports the validity of experimental results. If questions arise about the provenance or handling of a sample used in a study, a documented chain of custody can demonstrate that the sample was handled correctly and has not been contaminated or confused with another specimen.
Legal protection. In the event of a legal challenge — whether from a patient, a donor's family, or a regulatory body — a documented chain of custody provides evidence that the establishment followed correct procedures. Conversely, gaps in the chain of custody can expose the establishment to liability.
In practice, chain-of-custody gaps tend to occur at predictable points in the tissue lifecycle. Understanding these vulnerabilities is the first step towards addressing them.
Handover between departments or sites. When tissue moves from a procurement team to a transport service, from transport to a receiving room, or from one establishment to another, there is an opportunity for documentation to be incomplete or delayed. If the handover is not recorded in real time, details can be forgotten or recorded inaccurately.
Processing splits and transformations. When a single donation is divided into multiple products (for example, splitting a tissue sample into aliquots for different recipients or research groups), maintaining the link between parent and child samples is critical. Paper-based systems are particularly vulnerable to errors at this stage, as each new product must be manually recorded and cross-referenced with the original donation.
Storage moves. Tissue may be moved between freezers, rooms, or buildings during its storage lifetime — for maintenance, space management, or operational reasons. If these moves are not captured in the traceability system, the recorded location of the tissue will diverge from reality, making it impossible to locate or retrieve when needed.
Shared logins and unsigned actions. When multiple users share a single login account, or when actions are taken without recording the identity of the individual involved, the chain of custody is broken at the user-accountability level. The establishment can show that something happened, but not who did it — a finding that HTA inspectors take seriously.
A purpose-built electronic traceability system addresses each of these vulnerabilities by automating the capture, linkage, and storage of chain-of-custody data.
Real-time capture. Barcode scanning at each stage — procurement, receipt, processing, storage, and distribution — ensures that every movement and transformation is recorded as it happens. There is no gap between the physical action and the documentation, eliminating the risk of events being forgotten or recorded after the fact.
Automatic parent-child linkage. When a sample is split, the electronic system automatically creates child records linked to the parent, preserving the full genealogy of every product derived from a single donation. This linkage is maintained permanently and can be queried in either direction — from parent to children, or from any child back to the original donation.
Location tracking. Every storage move is logged with the precise origin and destination, the user who performed the move, and the date and time. The system always reflects the current physical location of every sample, and the full location history is available for review at any time.
Individual user accountability. Electronic systems enforce individual logins with strong authentication (such as JWT tokens or two-factor authentication). Every action in the system is attributed to a specific named user, not a shared account. This provides the level of user accountability that the HTA and EU Directives require.
Immutable history. The audit trail in a well-designed electronic system is append-only — records can be added and corrected, but previous versions are never deleted or overwritten. This creates a tamper-evident history that can be presented to regulators with confidence.
Establishing an electronic chain of custody is not simply a matter of purchasing software. Establishments should consider several practical factors to ensure a successful implementation.
First, the system must be configured to match the establishment's actual workflows. The location structure — buildings, rooms, freezers, shelves, racks, and boxes — should be profiled accurately so that the system reflects the physical reality of the storage environment. Barcode labels should be generated and applied to every location so that movements can be captured by scanning rather than manual data entry.
Second, staff training is essential. Every user must understand why the chain of custody matters and how to use the system correctly. This includes not only the mechanics of scanning and data entry, but also the importance of logging in with their own credentials and recording actions in real time rather than retrospectively.
Third, the system must be validated. For regulated tissue establishments, the HTA expects that computerised systems used for traceability have been subject to appropriate validation — confirming that the system performs as intended, that data integrity is maintained, and that adequate controls are in place for backup, recovery, and access management.
Chain of custody is the backbone of human tissue traceability. Without it, tissue establishments cannot assure the safety of recipients, satisfy regulatory requirements, protect the integrity of research, or defend themselves against legal challenge. While paper-based methods can theoretically document a chain of custody, they are slow, error-prone, and difficult to maintain over the 30-year retention periods required by the HTA.
Electronic traceability systems provide the real-time capture, automatic linkage, immutable audit trails, and rapid lookback capability that a robust chain of custody demands. For tissue establishments of all sizes — from small university research groups to large NHS tissue services — investing in a purpose-built electronic system is the most effective way to build and maintain a chain of custody that will withstand both the demands of daily operations and the scrutiny of regulatory inspection.
