Elizabeth Kilburn, associate at ProDPO discusses what pharmaceutical companies need to do to ensure they comply with data protection regulations.
Data protection
Two years on from the introduction of the General Data Protection Regulation (GDPR), and the Information Commissioner Office (ICO) is continuing to fine companies who don’t adequately protect their data. Instances within the pharmaceutical industry include companies being fined for failing to secure the security of special category personal data, demonstrating that compliance is still essential.
Why pharmaceutical companies need to think about data protection?
All pharmaceutical companies hold personal data about individuals. It’s easily recognised that companies which deal with the public, engage in medical research or undertake clinical trials, will process greater amounts of personal data. However, companies which deal only with the non-public facing side of the industry also process personal data; such as those of their staff, costumes and suppliers, and need to ensure they’re compliant.