Data Privacy

Practice Area

Life Sciences companies rely on data to drive research, development and innovation.

We advise clients on all aspects of data protection, with particular focus on the use of health and research data in clinical trials, digital health, and AI tools. We help clients meet their GDPR and global compliance requirements while supporting innovation and their commercial objectives. Our team provides practical guidance, ensuring clients can manage regulatory risk confidently while maintaining patient trust and safeguarding the integrity of their data assets.

Recent Work

Advising a global testing laboratory on all data protection obligations related to the conduct of clinical trials, anonymisation and pseudonymisation in the context of health research.
Advising a global technology company on the consents required and general data protection compliance required in connection with health insights and recommendations from its wearable devices.
Advising Fitbit LLC (now Google LLC) on all of its data protection obligations regarding its services and products.
Advising a global technology company on data protection obligations arising from the use of a mental health support chat bot.
Advising a national hospital group on its data protection obligations in the context of clinical trial agreements.
Advising an international COVID-19 testing company on its data privacy obligations, including drafting their privacy policy and advising on the collection of consents.
Preparing a data protection impact assessment for a clinical-stage pharmaceutical company concerning the processing of personal data in the context of a clinical trial.
Advising a global pharmaceutical company on health care professional consent in the context of direct marketing.
Advising a global pharmaceutical company on the data privacy and commercial aspects of providing a third-party patient assistance app for use with one of its medicines.
Advising a global clinical trial stage biopharmaceutical company on the completion of a Statement of Compliance regarding data protection compliance prior to submission to the National Research Ethics Committee.