October 2026 A €7 million fine for a health data company shows that patient data with names removed is not automatically anonymous. If a person can still be singled out, data protection law applies in full. Introduction On 23 September 2026, the Italian Data Protection Authority (the Garante) fined IQVIA Solutions Italy S.r.l. €7 million for unlawfully processing patients’ health data. The decision matters for any organisation that uses health or research data it believes to

June 2026 Article 27 GDPR applies to far more US life sciences companies than many realise Intro The extraterritorial reach of the General Data Protection Regulation (GDPR) is well known, yet many US pharma and biotech companies are surprised to learn that it applies to them, and even more surprised to learn about Article 27. If your organisation has no establishment in the EU but engages with EU based consumers, patients or trial participants, you are likely required to a