MyData Trust
A Multi-Disciplinary Approach to GDPR Compliance

The life sciences and pharmaceutical research industries have always relied on data and analytics to provide safe and efficient services. In recent years, the enactment of GDPR has added a significant responsibility for companies to ensure individuals’ rights and freedoms concerning their personal information including for pseudonymous patient-level data. The interplay between ever-changing transparency policies and the GDPR results in various structural challenges and complications. That said, complying with the GDPR requirements can be a daunting task, particularly for small and medium-sized organisations and companies. As non-compliance with GDPR stipulations result in substantial fines, it is imperative that the life sciences and pharmaceutical research sector need to set up and undertake regular compliance reviews. To identify and rectify issues concerning every aspect of the regulations to avoid possible future sanctions such as hospital networks, medical devices, and third-party software with state-of-the-art data security solutions. This is where MyData-Trust supports the life sciences and pharmaceutical industry with its end-to-end solutions that guarantee compliance with regulations and patient privacy by streamlining critical study conduct activities. The company address all client’s compliance needs related to data protection efficiently, starting from GDPR e-learning, including the full range of risk analyses, as well as acting as client’s DPO (Data Protection Officer) or DPR (Data Protection Representative).

A unique factor about MyData-Trust’s approach in addressing data protection obligations is the company’s multi-disciplinary project team encompassing Data Privacy Lawyers, IT Security Specialists and Clinical Experts. “Our Multi-Disciplinary Team of experts are committed to providing strategic, operational and organisational advices for clients through professional consulting services that assess the compliance of existing and new data processing activities,” states Anastassia Negrouk, Chief Operating Officer at MyData-Trust. Its seasoned experts examine the challenges posed by the GDPR to the client with a gap analysis, map all their data flow to identify high-risk processing activities and define the critical elements of the data processing activities records. The company also assesses client’s providers to ensure GDPR compliance all along with the data flow processes either remotely via a survey or on-site via an audit. After analysing and evaluating the client’s operational procedures for an in-depth understanding of data flows and risks— MyData Trust presents a recommendation report for creating a high-level action plan prioritising the order of execution of the tasks to launch an adequate data protection response program across the organisation. The risk assessment services are conducted either with a limited scope specifically towards GDPR compliance or a broad spectrum towards enterprise IT security risk. Another vital aspect of MyData Trust’s solution is its privacy management platform – PriveREG that supports companies with essential processes and tools to ensure state-of-the-art data security documentation aligned with GDPR, US and other national regulations. The company’s platform integrates standard reports that streamline communication to subjects and authorities to set corrective actions and sustain business continuity. Furthermore, it enables generates optimal measures to assess and monitor the level of data protection.

Owing to the ramifications of GDPR, data protection is no longer merely a compliance or security issue but a strategic topic at the boardroom level in the current scenario. With its groundbreaking and far-reaching regulation across borders, GDPR has also considered next-gen technological advancements. Two years post-GDPR, maintaining and establishing compliance has become a key challenge for various organisations worldwide that hold data on EU citizens. For the life sciences and pharmaceutical research industry, it is an opportunity to improve systems, policies, and processes to stay ahead of any potential threat to institution and patient information. In anticipation, My Data-Trust plans to launch auditing and certification services to offer to meet subsequent GDPR demands of clients. “Having already established offices in the Belgium, U.K, France, U.S and Romania—we aim to be a worldwide leader in data protection for pharmaceutical research in near future,” concludes Anastassia.