Biotek Salon#12: New EU General Data Protection Regulation (GDPR) – What does it mean for biotech?

The new EU General Data Protection Regulation will take direct effect in all Member States from 25 May 2018. The purpose of the GDPR is to harmonize personal data protection rules across the EU as well as strengthening the right of individuals.

Many biotech companies are processing special categories of personal data (sensitive data) on a large scale. The GDPR introduces a number of new measures and obligations on biotech companies as data controllers or data processors and grants new rights to the data subjects. Special categories will be extended to comprise genetic data (DNA) and biometric data.

Agenda:

• What are the major changes of the GDPR?
• Special considerations for biotech companies
• When should biotech companies start to implement the new requirements?
• How to implement the new rules? – a practical guide to a risk based approach to implementation
• What is a Data Protection Impact Assessment (DPIA)?
• What are the tasks and responsibilities of a Data Protection Officer (DPO)?
• Should biotech companies appoint a DPO?
• How to handle a data security breach?
• What are the sanctions and penalties for non-compliance?