By a decision of 12 September 2024, the French Data Protection Authority (CNIL) approved the EUCROF (European Contract Research Organisations Federation) “Code of conduct for Service Providers in Clinical Research”, adopted pursuant to articles 40 and 41 of the GDPR (General Data Protection Regulation).

By a decision of 29 January 2026, the CNIL approved the EUCROF Supervisory Committee (COSUP) as the supervisory body for the European Code of conduct. This decision constitutes the final regulatory step, making the Code fully operational throughout the European Union.

This Code is intended for Contract Research Organisations (CROs) acting as data processors on behalf of sponsors to help them comply with the GDPR.

Read the full article to find out more