1. The samples arrive securely and the result goes to the wrong record
A fictional sports-testing programme collects two samples under an appropriately governed anti-doping process at a training event. Authorised officers check the collection equipment and document distinct sample codes for each athlete. The sealed containers travel through a recorded custody route and arrive at the assigned laboratory with no observed seal or transport irregularity under the scenario.
The laboratory handles coded material without direct athlete names and returns its analytical information against those sample codes. At the results-management office, an automated import links one code to the wrong athlete record after a clerical mapping table was changed. A staff member notices that the code printed in the authorised collection document does not agree with the one appearing beside the result in the athlete-management system.
No real person is accused in this case, and no specific prohibited substance or violation is asserted. The Gold Standard issue is that physical sample integrity and correct coded laboratory reporting do not automatically establish the identity of the person associated with the result after another system performs a separate mapping.
2. Custody, sample identity and personal identity are separate controls
The testing record C1 establishes the relevant authority and actual collection event. C2 records each sample’s unique code and the athlete’s authorised association with it. C3 describes the sealed containers and transfer custody. C4 is the laboratory’s code-based receipt and analysis record. C5 is the restricted results-management link from sample code to athlete identity.
C3 can support that sample containers remained under the recorded custody arrangements. It cannot, on its own, prove that C5 is correctly populated in a separate database. Similarly, the laboratory may report a perfectly accurate finding for a coded container while an agency later displays it beside the wrong athlete name.
An error in C5 is not necessarily an error in laboratory science or evidence that the sample was physically tampered with. Distinguishing those issues protects legitimate technical staff and athletes from unsupported allegations while identifying the actual process weakness.
GS-R02 defines the identity requirements, GS-R07 safeguards the handoff and GS-R08 requires a demonstrated link between the evidence and the individual about whom a claim might eventually be made.
3. The worked code example shows why similar numbers matter
Suppose the approved fictional collection record associates Athlete A with sample code Q7416 and Athlete B with code Q7146. These codes are invented teaching examples, not actual WADA-issued codes. Each sealed kit, laboratory submission and coded analysis carries the proper label. The two codes differ in the order of two digits.
During results import, the restricted mapping table mistakenly assigns Q7416 to Athlete B and Q7146 to Athlete A. The labels on the containers remain correct, and the laboratory still reports its analysis for each correct sample code. The identity error occurs only when the results system resolves those code values into personal profiles.
The apparent completion count is two of two laboratory results received. That is accurate for the receipt event. The number of athlete-specific result associations currently demonstrated correct is zero under this mismatched table until reconciliation. This does not mean the laboratory outcomes themselves are necessarily invalid or that a prohibited conduct finding exists.
The Gold Standard requires reconciliation against authoritative source records, not a guess based on visual similarity or a manager’s memory of who attended the event.
4. Anti-Doping Singapore explains the coded collection route
Anti-Doping Singapore’s Testing Procedures, updated in September 2026, describe the athlete-identity check, sample-code number, review of the doping-control form and safeguards used during sample collection. The public guidance explicitly asks participants to check the sample code and associated paperwork.
Its What Happens to Your Sample? explains that laboratories analyse specimens identified by codes rather than athlete names, and that formal results and subsequent steps follow the international anti-doping framework. This helps illustrate why athlete identity may legitimately be kept separate from the laboratory’s analytical task.
The International Testing Agency’s athlete testing guidance similarly explains the unique sample-code link and confidentiality protections around laboratory analysis. These are real institutional sources, not allegations that ADS, ITA or any actual testing programme committed the invented mapping error.
The Gold Standard draws the narrow principle that coded confidentiality is useful only when the authorised re-identification step is accurate and reviewable when its outcome matters.
5. The international standard connects custody and document integrity
The World Anti-Doping Agency’s International Standard for Testing and Investigations, effective January 2023 addresses collection, code documentation, storage, custody and secure transfer of samples and records under its applicable framework. Requirements include protecting identity and integrity and documenting the chain of custody.
Actual anti-doping rules may be amended, and the current adopted version, relevant sporting authority and applicable results-management procedures must be checked before any real case decision. The fictional example does not determine the consequences of an identified documentation error under those rules or whether a result would remain valid.
A document chain can maintain the same sample code from collection to laboratory while the next step creates a false personal association. That is why the review needs both the custody history and the restricted, legitimate identity link, without disclosing private athlete information to people who do not need it.
GS-R03 identifies authority for the next action. The organisation should not let a software import define an athlete’s identity by default when the authoritative record shows a conflict.
6. The immediate response protects the athlete and the evidence
The results-management authority records the discrepancy and follows the actual testing and privacy procedures before communicating an athlete-specific conclusion. The original forms, coded laboratory records, approved identity mapping and change logs are preserved in a controlled manner. Staff should not edit the mapping history so that an erroneous notification appears never to have been prepared.
No automatic public sanction, accusation or assumption of wrongdoing is justified by a mismatch in the identity link. Even if a laboratory result warrants authorised scientific or procedural follow-up, assigning that result to a person requires the correct verified association under the governing framework.
The athlete whose record may be affected deserves appropriate confidentiality and due process as provided by the actual rules. A generic article cannot dictate notification timing, evidentiary consequences or legal remedies for any real athlete.
GS-R09 requires the exception to be routed to qualified authority promptly, while preserving the observations needed to understand its scope.
7. A successful seal inspection cannot substitute for results identity
A sealed container is intended to support integrity of the collected specimen under defined conditions. It does not itself identify the individual to a laboratory technician who appropriately receives only coded material. The result-management function uses the authorised code-to-athlete association to complete that separate task.
The final result must therefore remain tied to a correctly verified sample code throughout both systems. The team should distinguish ‘sample received in suitable condition’, ‘analysis issued for code’, ‘identity mapping verified’ and ‘individual next step authorised’. A dashboard combining all four into a single green status can obscure a critical unresolved association.
Likewise, a rechecked identity table does not automatically fix a genuine sample-transport defect if one exists. These are separate risks requiring separate evidence. Gold Standard management values each control for its actual scope rather than allowing success in one stage to overrule another.
8. The import change must be controlled rather than silently corrected
The fictional organisation recently changed its results-management software. The previous importer expected one code-field ordering; the new configuration used a differently arranged export with similar numerical values. Staff verified that the total number of result rows was transferred but did not compare the imported personal associations with the authorised original mapping.
The repaired process defines stable source and destination identities, controlled transformation rules, versioned mappings and competent review of discrepancies. Any unrecognised or contradictory association must create an owned exception instead of being resolved by guessing which athlete is most likely to be linked to a given result.
Automated verification can support this work, but personnel with legitimate authority must approve consequential changes. Sensitive mapping tables should be accessible only to roles that need them, so a broader technical repair does not create a new confidentiality breach.
GS-R07 guards meaning across the code-to-person handoff, and GS-R12 protects the result when system fields or formats change.
9. Retest two similar sample codes before making any personal claim
The next controlled rehearsal uses synthetic sample and athlete records with codes Q7416 and Q7146. The test file deliberately reverses the personal mapping. A reviewer must detect that the code-based laboratory record and original authorised identity source do not agree with the results-management display.
A second scenario uses a missing source code, which should remain unresolved rather than assigned to a plausible name. A third includes valid identical summary statuses for two different samples; the system must not conclude that the mapping is correct merely because both results look the same.
The exercise should not involve real athletes’ private records or genuine laboratory findings. The aim is to prove that sample integrity, coded analysis and re-identification are separately verified and that a conflict does not produce an unsupported personal outcome.
A successful rehearsal supports the tested mapping route. Formal anti-doping systems still require their actual competent oversight, security controls and applicable international standards.
10. Practice: sealed samples, incorrect personal mapping
Exercise. Two fictional athletes have correctly sealed sample kits with distinct codes Q7416 and Q7146. The laboratory reports results accurately against those codes, but a results-management import reverses the athletes’ identity associations. The seals and custody records show no observed irregularity. Write the bounded finding, immediate restriction and retest.
One reasoned finding is: ‘The collection and laboratory-code records may be correct under their examined scope, but the athlete-identification mapping in the results system contradicts the authoritative collection link. No individual-specific result or conduct conclusion should rely on the disputed association until properly reconciled by the authorised authority.’
The retest must detect a reversed mapping even when the same number of records arrived and every specimen seal was intact. The Gold Standard lesson is that sound custody protects the sample, while sound identity mapping protects the person: both need evidence before an individual is affected.
Anti-doping sources and related Gold Standard casework
- Anti-Doping Singapore · Testing Procedures (Updated 2026)
- Anti-Doping Singapore · What Happens to Your Sample?
- International Testing Agency · Athlete Testing and Sample Identification
- WADA · International Standard for Testing and Investigations
- Gold Standard · Information and Record Integrity
- Gold Standard · Core Requirements and Evidence
- Gold Standard · Governance and Decision Records
- Case 10 · Supplier Evidence Traceability
- Case 109 · Correct Meal Given to Wrong Student
- Gold Standard Casebook and Decision Practice
The actual governing anti-doping standards, privacy rules, scientific review and results-management procedures control real athlete cases. The GS-R01–GS-R12 Gold Standard is eduKate’s educational management framework, not sports testing accreditation.