Legal obstacles jeopardise research in personalised medicine - experiences from a Nordic collaboration within rheumatology

Scand J Public Health. 2024 Dec;52(8):1019-1025. doi: 10.1177/14034948231212711.

Abstract

Aims: Personalised medicine in chronic complex diseases such as rheumatoid arthritis (RA) is within reach but requires international multi-stakeholder collaboration. We exemplify how national implementations of the General Data Protection Regulation (GDPR) have introduced administrative delays and created disincentives for data sharing and collaborative research.

Methods: Our Danish/Swedish/Norwegian research collaboration (the 3-year NordForsk-funded "NORA" project) aims to develop a personalised medicine approach for the management of RA, built on the exploitation of unique existing data sources: longitudinal data from clinical rheumatology registries, research cohorts, nationwide health care registries, and biobank material from >20 sample collections. Data and results are shared and accessed remotely by collaborators at secure servers. New biomarker assays and patient-centric implementations of the results are to be explored, validated, and disseminated to patients and health care via the development of digital tools.

Results: Following the advice of legal experts at the involved academic or public institutions and private companies, GDPR compliance resulted in >20 legal documents to govern the collaboration (consortium-, joint controller-, research collaboration-, data sharing-, and a series of unique two-way data processing-, and material transfer agreements). Lack of agreed-upon templates, policies, procedures, and a shortage of legal resources have caused considerable delays. Thus, our research consortium has spent more time ensuring GDPR compliance than on actual research activities.

Conclusions: The current interpretation and implementation of the legal premises (rather than the GDPR per se) for research collaborations caused unnecessary barriers and delays. Our experiences call for Nordic trust-based code-of-conduct-like framework agreements, and for harmonisation of procedures and templates, lest the Nordic advantage in research be lost.

Keywords: GDPR; Nordic collaboration; Personalised medicine; biobank; legal infrastructure; rheumatoid arthritis.

MeSH terms

  • Arthritis, Rheumatoid*
  • Biomedical Research
  • Computer Security / legislation & jurisprudence
  • Denmark
  • Humans
  • Information Dissemination
  • International Cooperation
  • Norway
  • Precision Medicine*
  • Registries
  • Rheumatology*
  • Sweden