GDPR for Life Sciences

Chaucer / Life Sciences / Data and Technology / GDPR for Life Sciences

The General Data Protection Regulation (GDPR) came into effect on May 25th 2018, impacting organisations processing personal data by ensuring that full accountability is taken for any personal data processed.

The legislation imposes stricter controls on processing and provides data subjects with increased rights around transparency of data processing activities.

The pharmaceutical, biotechnology and healthcare industry already had stringent processes and regulations in place to protect patient data, and have long been aware of the importance of Data Protection, so is there really anything to be concerned about?

Yes. There are some key changes in the new data protection legislation that will impact Life Science organisations and requires attention. GDPR entails increased documentation on processing activities, classifies pseudonymised data as personal data and widens the countries in scope.

This highlights just a few of the requirements set out in the 99 articles of the GDPR.  Ignoring the need to change in order to meet these new requirements could result in large fines and penalties.

Where we can help

Our team of expert data consultants and Data Privacy Officers have the deep knowledge around data protection legalisation and can guide your organisation through the steps required to ensure you are compliant.

We have also invested significant effort to examine the specific impact of the legislation on the Life Science Industry, and are supporting Sponsors, CROs and associated businesses with industry-specific advice and services.

We offer a GDPR service tailored for Life Sciences:

  • GDPR health check (assessment of GDPR readiness)
  • Deployment and customisation of Chaucer’s Data Privacy Navigator (A visualisation tool to assist your organisation in the management of ongoing compliance)
  • Workshop for training and awareness of GDPR
  • Shared/Outsourced Data Protection Officer service
  • Frameworks to support BAU operational practices
  • Technology recommendations to address subject access requests, data portability and document storage
  • Deployment and customisation of Chaucer’s Data Privacy NavigatorTM (our data visualisation tool that assists your organisation in the management of ongoing compliance)

How do I get in touch to discuss this?

To find out more about our complete GDPR services or to arrange an initial conversation about how we can help you on your journey to compliance, please contact us on +44 203 934 1099, or email