The Impact of International Privacy Laws on Research

December 13, 2022 @ 9:00 am 3:00 pm

Hybrid: In-person (Boston) and Virtual (Zoom)

800 Boylston St.
Boston, MA 02199

In an increasingly connected world, clinical trials and other research activities are no longer state- or country-specific. Not surprisingly, the globalization of research activities creates any number of legal and compliance challenges for stakeholders involved in the development, authorization, and commercialization of medicinal products, including under data privacy regulations that continue to evolve.

This hybrid meeting addressed some of the most pressing of these challenges. We addressed issues that go to the heart of the General Data Protection Regulation (“GDPR”) of the European Union (“EU”), such as what constitutes a restricted international data transfer, the appropriate lawful basis to legitimize the processing of personal data in the context of clinical trials and secondary research, and the designations of parties participating in research as controllers and processors. We also discussed potential solutions to problems that continue to challenge the research community. The research community has been awaiting further guidance on the topic of the GDPR and research from the European Data Protection Board (“EDPB”) for several years. The research community must thus navigate several complex issues in the absence of relevant regulatory guidance.

This meeting consisted of a series of panels made up of experts from the life sciences industry, government, and academia to address key challenges faced by the research sector under the GDPR and data privacy regulations in other geographies, including the Personal Information Protection Law of the People’s Republic of China (“PIPL”).

Deliverables

Part 2: The Impact of Emerging US State Privacy Laws on Research

September 22, 2021 @ 2:00 pm 4:00 pm

Virtual Event

Some state privacy laws apply to specific types of data that might be used in research. Other state privacy laws, sometimes referred to as omnibus privacy laws, regulate the collection and use of personal data throughout the economy. Meeting attendees reviewed and discussed both types of laws in several states, including their applicability to organizations involved in research, exemptions for research activities, and overall impact on research.

Deliverables

Meeting Summary

Released on: September 22, 2021

Topics: 1) Legal and Regulatory Challenges with Diagnostic Tests in the United States (US), including Laboratory Developed Tests (LDTs), and 2) The Impact of Emerging US State Privacy Laws on Research

Part 1: Direct Interactions Between Sponsors and Research Participants: A Legal Perspective

May 25, 2021 @ 11:00 am 1:00 pm

Virtual Event

There has been an increase in sustained interactions between sponsors of clinical research or their designees and potential and enrolled study participants and their families. Sponsor interactions with study participants and their families raise certain legal and regulatory concerns when sponsors perform the functions of investigators, such as taking medical histories or securing records from third-party health care providers, or when interactions contribute to inaccurate participant perceptions regarding who is responsible for their participation in a study, among other things.

Deliverables

Meeting Summary

Released on: May 25, 2021

Topics: Part I: Direct Interactions Between Sponsors and Research Participants: A Legal Perspective; ​Part II: Rethinking the Workforce for Decentralized Clinical Trials: Who is Engaged and Regulatory Requirements

Part 1: The Regulation of Digital Health Tools and Software as a Medical Device

November 9, 2021 @ 11:00 am 1:00 pm

Virtual Event

In recent years, FDA has increasingly focused on honing its approach to regulating digital health tools and technologies, including those used in the research setting. This presentation focused on the Agency’s risk-based approach to regulation in the digital health space, with a focus on when clinical decision support and artificial intelligence/machine learning software may be considered a medical device subject to FDA regulation.

Deliverables

Meeting Summary

Released on: November 9, 2021

Topics: 1) The Regulation of Digital Health Tools and Software as a Medical Device, and 2) Update on the Application of the European Union’s General Data Protection Regulation to Research

Part 2: Update on the Application of the European Union’s General Data Protection Regulation (GDPR) to Research

November 9, 2021 @ 11:00 am 1:00 pm

Virtual Event

In the past 18 months there have been several important developments related to the GDPR, including the Schrems II decision, the resulting European Data Protection Board guidance on cross-border data transfers, and the issuance of revised Standard Contractual Clauses. This presentation addressed how each of these items affects researchers.

Deliverables

Meeting Summary

Released on: November 9, 2021

Topics: 1) The Regulation of Digital Health Tools and Software as a Medical Device, and 2) Update on the Application of the European Union’s General Data Protection Regulation to Research