{"id":8513,"date":"2023-05-25T12:59:20","date_gmt":"2023-05-25T12:59:20","guid":{"rendered":"https:\/\/dpoassociates.eu\/the-interaction-between-the-ctr-and-the-gdpr\/"},"modified":"2023-07-17T08:02:53","modified_gmt":"2023-07-17T08:02:53","slug":"the-interaction-between-the-ctr-and-the-gdpr","status":"publish","type":"post","link":"https:\/\/dpoassociates.eu\/en\/the-interaction-between-the-ctr-and-the-gdpr\/","title":{"rendered":"The interaction between the (CTR) and the (GDPR)"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

The interaction between the Clinical Trials Regulation (CTR) and the General Data Protection Regulation (GDPR) <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

On January 31, 2022, the new Clinical Trials Regulation 536\/2014 (hereinafter CTR) entered into force. With the implementation of the CTR, greater emphasis has been placed on protecting personal data during clinical trials. <\/em><\/p>\n

In this blog, we will discuss the importance of CTR and how it interacts with GDPR. <\/em><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\t\t\t\t1. Emergence of the<\/span>\n\t\t\t\t\n\t\t\t\t\tCTR<\/span>\n\t\t\t\t<\/span>\n\t\t\t\t<\/h3>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The CTR entered into force on Jan. 31, 2022, replacing the Clinical Trials Directive (EC) No. 2001\/20\/EC. It applies to all clinical trials conducted in the EU. <\/span> <\/span><\/p>\n

A clinical trial is a study conducted to assess the safety or efficacy of a drug. Often, human volunteers will cooperate in these clinical trials by, for example, donating their blood.<\/span> <\/span><\/p>\n

The goal of the CTR is to create a more consistent and favorable environment for large-scale clinical research, with high standards of transparency and safety for clinical trial participants.<\/span> <\/span><\/p>\n

To ensure this transparency and safety, the CTR introduced the Clinical Trial System (hereafter CTIS). The CTIS is a clinical trials database in which drug research data are submitted, recorded and accessed. In addition, submission of drug research for medical, ethical review also takes place through CTIS.<\/span> <\/span><\/p>\n

The CTR harmonizes the assessment, authorization and supervision procedure for clinical trials across the EU by requiring sponsors to submit their trial applications through the CTIS portal. In addition, the CTIS database aims to increase transparency by making information on clinical trials and their results accessible to the public.<\/span> <\/span><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t<\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\t\t\t\t 2.Interaction between the <\/span>\n\t\t\t\t\n\t\t\t\t\tCTR and the GDPR<\/span>\n\t\t\t\t<\/span>\n\t\t\t\t<\/h3>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t


\n Both legislations are <\/span>
\n<\/span>
\n simultaneously<\/span>
\n<\/span> applicable, with the CTR as a sectoral law containing specific provisions relevant from a data protection perspective. According to the EDPB, the CTR contains no deviations from GDPR requirements. <\/span><\/span> <\/span><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The CTR regulates the conduct of clinical trials by establishing regulations to ensure the “rights, safety, dignity and well-being of subjects and to ensure that trials produce reliable and robust data.<\/span> <\/span>The GDPR ensures the protection of individuals with respect to the processing of their personal data (i.e., any information about an identified or identifiable person), including personal data about health.<\/span><\/p>\n

<\/span><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
Personal data concerning health:<\/span> <\/span><\/h5>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

They include all data regarding a subject’s health status. These data may include information about the person’s past, present or future physical or mental health status. <\/span><\/p>\n

Often the subject will be assigned a number, symbol or attribute to uniquely identify him for health purposes. In addition, in the context of clinical trials, Information derived from the testing or examination of a body part or body substance, including genetic data and biological samples; and any information about, for example, an illness, disability, disease risk, medical history, clinical treatment, or the physiological or biomedical condition of the individual will also often be exchanged. <\/span> <\/span><\/p>\n

These are undoubtedly (sensitive) personal data that fall under the principles of the GDPR. This is true even if the trial data is no longer identified (or “pseudonymized”), as such data is still personal data under the GDPR. <\/span> <\/span><\/p>\n

On the one hand, the CTR provides that the GDPR<\/b> should be applied to data processing that takes place in the context of clinical trials, as well as scientific research that uses data collected for a trial but takes place outside the clinical trial protocol. <\/b><\/span><\/h6>\n

The <\/b>EU Member States <\/b>must consider data protection compliance when reviewing the assessment report. On the other hand, the Data Protection Directive requires personal data to be processed lawfully. The GDPR’s recitals add that the processing of personal data for scientific purposes must comply with relevant laws, such as those applicable to clinical trials.<\/span> <\/span><\/p>\n

When the CTR went into effect, there was confusion surrounding the relationship between the CTR and the GDPR. For example, some questioned whether the CTR could not be used as an exemption for GDPR compliance in some cases.<\/span> <\/span><\/p>\n

The European Data Protection Board (EDPB)<\/a> examined this interaction in its Opinion 2\/2019.<\/span> <\/span><\/p>\n

The opinion distinguishes between the primary use of data and the secondary use of data in clinical trials.<\/span> <\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Primary use of data<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t