News
The make-or-break moment for EU Data Protection and for Life Science innovation.
What’s your take? Will the Trilogue deliver the streamlined enforcement Europe needs, or are we heading for an even bigger procedural quagmire? Share your thoughts below!
The Trilogue on the GDPR Procedural Regulation is dragging on, with the next round pencilled in for 21 May - and no sign of white smoke yet. What was sold as a surgical fix to unblock cross-border enforcement now looks dangerously close to becoming the patient’s new chronic disease. euronews
Why this Regulation matters
Under today’s GDPR, every complaint that crosses an internal EU border must run a gauntlet of 30 different administrative cultures. Documents get lost, decisions take years and there is no effective way to act against an inactive DPA. The Commission’s 2023 proposal promised harmonised timelines, shared case files and clearer hearing rights. In theory, that would help life-science companies run multi-country clinical trials without waiting half a decade for a privacy dispute to be resolved.
The Trilogue drama: three institutions, three priorities
- Commission - still touts a “simplification agenda” and is even toying with a broader cut-back of the GDPR for SMEs. POLITICO
- Parliament - wants firm deadlines (3 months for simple cases, 9 for complex) and stronger party-rights.
- Council - pushes for longer deadlines (reportedly up to 33 months) and more leeway for national law.
Reconciling these positions is proving tortuous, and every compromise layer seems to add fresh complexity instead of removing it.
Civil society rings the alarm
The NGO noyb calls the current draft “the biggest legislative mess in a long time,” warning that it “will make procedures even more complex, slower and prone to legal challenges.” noyb.eu Thirty-plus organisations led by EDRi, Access Now and Privacy International echo the concern: a watered-down text could “introduce new vulnerabilities for abuse, further weakening people’s ability to exercise their GDPR rights.”European Digital Rights (EDRi)
EDPB: supportive, but sounding the resource alarm
The European Data Protection Board welcomes the goal of “faster, smoother and more efficient enforcement” yet stresses that any new procedural layers must come with matching budgets and avoid endless references back to national law if real harmonisation is to be achieved. EDPB
High stakes for life-science data
In the Life Sciences sector we handle the most sensitive categories of data (health, genetic, biometric) and routinely coordinate trials across several member states. Unclear or drawn-out procedures can:
- Delay market-authorisation studies, pushing therapies back by years.
- Expose trade secrets if draft decisions or “joint case files” circulate too broadly.
- Deter smaller biotech firms that lack the compliance muscle of Big Pharma.
A resilient, transparent procedural regime is therefore essential not just for privacy, but for Europe’s competitiveness in medical innovation.
The road ahead
Europe cannot afford a Regulation that multiplies procedures and legal grey zones. Nor can it afford another half-decade of stalled enforcement that leaves individuals unprotected and lets well-resourced actors game the system. The Trilogue still has time to correct course: tighten deadlines, guarantee early hearing rights, fund DPAs properly and keep national divergences to a minimum.
The credibility of the GDPR as a global gold standard and the EU’s ambition to be a life-science powerhouse are both on the line.
Coordinating multi-country trials while the procedural rules are still being negotiated? Our DPO for clinical trials teams track these developments for sponsors and biotechs and turn them into decisions you can document.
