Data protection and life sciences

Personal data is at the very core of every life science business. Life sciences companies handle significant amounts of personal data and are reliant upon the collection and use of personal data, which often includes sensitive health-related data, in order to carry out key business functions. For example, conducting clinical trials on patients, collecting data on drug safety and adverse reactions in order to comply with pharmacovigilance requirements, and collecting genetic information for the development of personalised medicines all rely on the collection and processing of data relating to individual data subjects. Consequently, it is vitally important that life sciences companies understand, and are in compliance with, the strict rules that apply to the processing of personal data.

This Overview provides an introduction to the application of the data protection regimes to key areas of the life sciences under the EU General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) and the United Kingdom General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR) (together the ‘GDPR regimes’).

Assimilated law is the name given to retained EU law (‘REUL’) which remains in force after

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Powered by Lexis+®
Latest Life Sciences News

IMDRF publishes strategic plan 2026-2030

The International Medical Device Regulators Forum (IMDRF) has published its strategic plan for 2026–2030, outlining measures to accelerate global regulatory convergence for medical devices and strengthen governance. The plan sets out five strategic focus areas: (1) modernising governance to support sustainable and transparent growth; (2) reinforcing foundational regulatory principles by converting legacy Global Harmonization Task Force (GHTF) documents into updated IMDRF guidance; (3) addressing regulatory challenges posed by innovative technologies through the development of new technical documents and joint workshops with the IMDRF Industry Group; (4) expanding stakeholder engagement through new and enhanced mechanisms for participation and outreach; and (5) strengthening support for the implementation of IMDRF documents through training and practical guidance. To support consistent application across jurisdictions, the plan also calls for a more systematic and structured approach to IMDRF training programmes. The plan builds on progress made during the 2021–2025 strategic period, which was marked by rapid technological innovation, increased use of regulatory reliance mechanisms and significant regulatory disruption arising from the coronavirus (COVID-19) pandemic. During this time, regulators faced accelerating technological developments, including artificial intelligence (AI), machine learning (ML) and digital therapeutics, while adapting regulatory systems to pandemic-related pressures. IMDRF responded by issuing guidance on personalised medical devices, Software as a Medical Device (SaMD), AI-enabled medical devices and cybersecurity, and by developing the Reliance Playbook to promote more efficient and coordinated regulatory cooperation.

View Life Sciences by content type :

Popular documents