UK GDPR in clinical trials

Post-Brexit: UK GDPR and Data Protection Act 2018 in clinical research.

UK GDPR post-Brexit

After Brexit, the UK has its own GDPR version (UK GDPR) + Data Protection Act 2018. Principles are equivalent to EU GDPR with separate authority (ICO).

There's an EU-UK adequacy decision through 2028, easing transfers without SCCs.

Practical implications

  • EU↔UK transfers without SCCs (adequacy in force)
  • UK↔other countries need UK IDTA or Standard Data Protection Clauses
  • ICO instead of AEPD/CNIL as authority

Trialinx coverage

  • DPA UK GDPR compatible
  • UK residency configurable on request
  • ICO breach reporting

FAQ

Can a study run between UK and Spain smoothly?

Yes, under current adequacy. Apply standard DPA between entities in both countries.

Need specific documentation?

Contact us and we'll prepare the package for your ethics committee or DPO.

Contact