On 19 November 2025, the European Commission published two legislative proposals – the Digital Omnibus on AI Regulation Proposal and the broader Digital Omnibus Regulation Proposal (“Proposals”) – as part of a wider initiative to simplify and streamline the EU’s digital regulatory framework. Together, the Proposals introduce targeted but significant amendments across a broad range of instruments, including the EU AI Act (Regulation (EU) 2024/1689), the GDPR (Regulation (EU) 2016/679), the ePrivacy Directive (2002/58/EC), the NIS2 Directive ((EU) 2022/2555), and the EU Data Act (Regulation (EU) 2023/2854).Continue Reading EU Digital Omnibus: What the Proposed Reforms Mean for Pharma and MedTech
Life Sciences
UK’s Data (Use and Access) Act: What Life Sciences Companies Need to Know
The Data (Use and Access) Act 2025 (“DUAA”) represents the UK’s first major reform of data protection law since leaving the EU. The Act aims to modernise the UK’s data protection framework by reducing administrative burdens on businesses, supporting innovation and maintaining high standards of data protection while enhancing the UK’s position as a competitive destination for data-driven industries.
As most of the data protection reforms introduced by the DUAA came into effect on 5 February 2026, life sciences companies should consider how the new framework reshapes their data protection compliance. While the DUAA introduces new rules, it also creates opportunities for the sector.Continue Reading UK’s Data (Use and Access) Act: What Life Sciences Companies Need to Know
CJEU clarifies the concept of pseudonymised data
On 4 September 2025, the Court of Justice of the European Union (“CJEU”) delivered a notable judgment on what is considered pseudonymised personal data under EU data protection law. While, technically speaking, the judgment concerns the interpretation of Regulation (EU) 2018/1725 (which governs the processing of personal data by the EU institutions and bodies), it fully applies to the interpretation of the concepts of personal data and pseudonymised data under Regulation (EU) 2016/679 (“GDPR”).
This question is essential for many companies operating in the EU, and in particular Life Sciences companies handling key-coded or otherwise pseudonymised patients’ personal data in the context of research and development, supply of healthcare products and related safety monitoring.Continue Reading CJEU clarifies the concept of pseudonymised data
The European Commission Publishes an EU Life Sciences Strategy
On 2 July, 2025, the European Commission published its EU Life Sciences Strategy (the ‘Strategy’), setting out a roadmap to position the European Union (EU) as a global leader in life sciences by 2030.
For pharmaceutical, MedTech, and biotech companies, the Strategy may, at least in theory, represent a positive shift towards a more innovation-driven environment for research and development (R&D) and market access in life sciences. This will, however, depend, to a great extent, on the practical impact and implementation of the other policy and legislative initiatives in the EU (e.g., the reform of the EU pharmaceutical legislation (see our latest blog), Biotech Act, Critical Medicines Act (see our blog)).
The Strategy presents concrete EU level actions to address long-standing challenges in life sciences in the EU, such as regulatory fragmentation across EU Member States, as well as the barriers to multi-country clinical trials and to the market access of advanced therapies and novel technologies.
A new Life Science Coordination Group within the European Commission will oversee the implementation of the Strategy and ensure that EU policies are consistent and supportive of innovation.
This blog highlights key elements of the Strategy of relevance to pharmaceutical, MedTech, and biotech companies.Continue Reading The European Commission Publishes an EU Life Sciences Strategy
Updates to the EU Pharmacovigilance Rules: Key Takeaways for Marketing Authorisation Holders
On 22 July 2025, the European Commission adopted Implementing Regulation (EU) 2025/1466 (“Regulation”), updating the EU pharmacovigilance (or “PV”) rules by way of amendments to Implementing Regulation (EU) No 520/2012. The changes aim to clarify and strengthen certain pharmacovigilance obligations (some of which arguably reflect what is already the current practice and expectations of the EU PV inspectors).
The Regulation introduces a number of new compliance expectations and requirements for applicants and marketing authorisation holders (“MAHs”), some of which will start to apply before mid-August.Continue Reading Updates to the EU Pharmacovigilance Rules: Key Takeaways for Marketing Authorisation Holders
The UK Government has plans: what does this mean for the Life Sciences Sector?
The UK Government has recently published plans for the Life Sciences Sector and the NHS in England. In this blog post, we summarise these plans and some of the initial feedback that has been published by ABPI. It is not surprising that there is a large amount of overlap between the two plans, albeit that the NHS 10 Year Plan is more rooted in the public sector. Both plans send a clear message: the Government recognises the vital role that life sciences companies must play in order to improve the UK’s standing as a centre for life sciences. The impact these plans will have on the Life Sciences industry, and whether they are enough to realise the Government’s ambitions, remains to be determined.Continue Reading The UK Government has plans: what does this mean for the Life Sciences Sector?
The UK’s MHRA launches consultation on draft guideline on individualised mRNA cancer immunotherapies
On 3 February 2025, the UK’s Medicines and Healthcare products Regulatory Agency (MHRA) launched a consultation asking for stakeholders’ views on draft guideline in relation to the regulation of individualised mRNA cancer immunotherapies (Draft Guideline).
The aim of the proposed guideline is to establish a clear and streamlined regulatory pathway to authorisation so that these highly innovative products can be made available to patients quickly, without compromising any assessment of safety. While the primary focus of the Draft Guideline is individualised messenger Ribonucleic Acid (mRNA) cancer immunotherapies, MHRA suggests that the regulatory and scientific principles considered might be broadly applicable to other disease indications (including rare diseases) or technologies that could benefit from personalisation or individualisation. It also states that the Draft Guideline will be updated when experience of other technologies (peptides, non-integrative DNA and polymer deliver systems) is available.
In terms of regulatory assessment of individualised mRNA cancer immunotherapies, the Draft Guideline provides clarification of the data which should be included in marketing authorisation (MA) applications and, importantly, confirms that an individualised medicine may, in some circumstances, be granted an MA under the Human Medicines Regulations 2012 (HMRs), even where the product includes an individualised component tailored to the requirements of a specific patient.
There is currently substantial interest in the use of mRNA technology to develop individualised treatments for cancer. The current consultation is therefore of interest to companies focussing on this and other individualised therapies.Continue Reading The UK’s MHRA launches consultation on draft guideline on individualised mRNA cancer immunotherapies
The Convergence of Life Sciences and Artificial Intelligence: Seizing Opportunities While Managing Risk
A new report commissioned by Arnold & Porter, based on a survey of 100 senior executives and department heads from biopharmaceutical, digital health, diagnostics, and medical device companies, shows that artificial intelligence (AI) adoption is accelerating across the industry as companies implement it to accelerate product discovery and development, optimize manufacturing and the supply chain, improve marketing and sales strategies, and more.
However, as with any disruptive innovation, risks need to be managed. The report also highlights looming governance and compliance needs as companies seek to mitigate the risks associated with AI technologies, particularly in areas like data privacy, cybersecurity, and intellectual property.
The Arnold & Porter report found that AI use is still in its early stages for many in the life sciences industry, with around 75% of respondents beginning implementation less than two years ago. Despite this, 86% of companies currently integrating AI plan to fully deploy these tools within the next two years, reflecting a significant acceleration in AI adoption.Continue Reading The Convergence of Life Sciences and Artificial Intelligence: Seizing Opportunities While Managing Risk
Notable developments in the interpretation of key GDPR concepts – why should Life Sciences companies care?
In the last month, both the European Data Protection Board (“EDPB”) and the Court of Justice of the European Union (“CJEU”) provided their interpretation of key data protection concepts that are crucial for ensuring compliance with Regulation (EU) 2016/679 (“GDPR”).
In Opinion 22/2024, the EDPB provided guidance to data controllers on how to effectively oversee the activities of their (sub-)processors in a GDPR-compliant manner. The opinion was requested by the Danish data protection authority and likely related to the enforcement actions against Danish hospitals which allegedly failed to oversee processors (see our blog – https://www.biosliceblog.com/2024/02/proposed-fine-against-danish-hospital-for-failure-to-supervise-data-processors/).
In early October, the CJEU provided an answer to a key question raised by the courts in the Netherlands – can the legitimate interests legal basis be used for processing of personal data for commercial purposes (e.g., sharing with third parties for advertising and promotion) (Case C‑621/22).Continue Reading Notable developments in the interpretation of key GDPR concepts – why should Life Sciences companies care?
UK government launches new Industrial Strategy and Advisory Council to boost economic growth
On 14 October 2024, the day of the International Investment Summit, the UK government published its green paper ‘Invest 2035: The UK’s Modern Industrial Strategy’, a ten-year plan designed to promote growth in the UK, with a focus on growth-driving sectors, including the Life Sciences and the Digital and Technologies sectors.
The Industrial Strategy will be informed by the new Industrial Strategy Advisory Council, which is to be chaired by Clare Barclay, CEO of Microsoft UK. The green paper explains that the Advisory Council will be led by evidence and “empowered to advise, make recommendations, and monitor Industrial Strategy policy”. The creation of the Advisory Council is intended to prevent frequent policy changes and ensure “stability and long-termism” and the government has committed to making it a permanent and independent statutory body.
This green paper comes less than a week after the UK Government announced the launch of the Regulatory Innovation Office noting that more plans for boosting growth were to be expected.Continue Reading UK government launches new Industrial Strategy and Advisory Council to boost economic growth