Data protection and life sciences

Personal data is at the very core of every life science business. Life sciences companies handle significant amounts of personal data and are reliant upon the collection and use of personal data, which often includes sensitive health-related data, in order to carry out key business functions. For example, conducting clinical trials on patients, collecting data on drug safety and adverse reactions in order to comply with pharmacovigilance requirements, and collecting genetic information for the development of personalised medicines all rely on the collection and processing of data relating to individual data subjects. Consequently, it is vitally important that life sciences companies understand, and are in compliance with, the strict rules that apply to the processing of personal data.

This Overview provides an introduction to the application of the data protection regimes to key areas of the life sciences under the EU General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) and the United Kingdom General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR) (together the ‘GDPR regimes’).

Assimilated law is the name given to retained EU law (‘REUL’) which remains in force after

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Life Sciences News

MHRA launches consultation to evaluate the Medicines and Medical Devices Act 2021

The Medicines and Healthcare products Regulatory Agency (MHRA) has opened a consultation seeking stakeholder feedback on the operation and impact of medicines and medical devices legislation. The review, mandated under Part 6, Regulation 48 of the Medicines and Medical Devices Act 2021, examines four key regulations: the Human Medicines Regulations 2012, Medical Devices Regulations 2002, Medicines for Human Use (Clinical Trials) Regulations 2004, and Medicines and Medical Devices (Fees) Regulations. The consultation, running until 19 September 2025, aims to assess whether the legislation effectively protects public health without imposing unnecessary regulatory burdens. Findings will inform a report to be published by the Secretary of State for Health and Social Care.

European Parliament publishes study on AI and civil liability

The European Parliament’s Policy Department for Justice, Civil Liberties and Institutional Affairs has published a study examining the EU’s regulatory approach to civil liability for artificial intelligence (AI) systems. The study, commissioned at the request of the Committee on Legal Affairs, recommends implementing a strict liability regime for high-risk AI systems. It advocates for a single responsible operator model to prevent regulatory fragmentation across EU Member States and emphasises the importance of legal certainty, efficiency and harmonisation in the regulatory framework.

MHRA  launches world-first framework for decentralised manufacture of personalised medicines

The Medicines and Healthcare products Regulatory Agency (MHRA) has announced that the application date for groundbreaking new UK legislation has arrived from 23 July 2025. The Human Medicines (Amendment) (Modular Manufacture and Point of Care) Regulations 2025, SI 87/2025 will provide the world's first regulatory framework that allows breakthrough personalised medicines such as cancer and immunotherapy (ie CAR-T) treatments to be prepared in small or individual batches. It aims to transform the manufacture of innovative medicines at the point of patient care.

EFRAG launches portal analysing 1st ESRS sustainability statements

The European Financial Reporting Advisory Group (EFRAG) has launched its 'EFRAG 2025 State of Play' portal, providing analysis of the first 656 European Sustainability Reporting Standards (ESRS) statements issued under the Corporate Sustainability Reporting Directive (CSRD). The portal includes a statistics dashboard and report repository showing only 10% of companies identified all ESRS standards as material, while 55% disclosed climate transition plans. The analysis will inform EFRAG's work on ESRS simplification following the European Commission's March 2025 mandate.