The EUCROF GDPR Code of Conduct for Service Providers in Clinical Research (the Code) is the first transnational code of conduct in the area of health, applicable in all 27 EU Member States.
The lead supervisory data protection authority for the Code is the French Data Protection Authority (CNIL - https://www.cnil.fr/en).
The Code has been approved the 12 September 2024:
- See EDPB opinion published June 18th, 2024 [here]
- See CNIL's decision nb 2024-064 published 12 September 2024 [here]
The Code is now public and can be obtained by filling a request form [here]
This Code is a tool to foster transparency towards patients, investigational sites, pharma, biotechs, medtechs, ethics committees, authorities ...
Who is covered?
The adhering companies are listed in a Public Registry - Click here to access the public registry
What is covered?
Whose data are covered?
What geographical area?
Learn more about the Code: click here to download a short introduction to the Code.
What is the current status?
As a service provider in scope of the Code, when will it be possible to initiate a request for adherence?
Send a request to This email address is being protected from spambots. You need JavaScript enabled to view it. and the EUCROF Team will guide you on this process.
We expect the first adherence decisions to be taken in the course of Q1 2025