PCCTC

The Prostrate Cancer Clinical Trials Consortium (PCCTC) is the premier multi-centre clinical research organization specializing in cutting-edge prostate cancer research in the US. Its New York City-based management team offers a comprehensive suite of contract research organization (CRO) services and world-class scientific expertise to streamline and accelerate the activation, accrual and completion of trials led by its members.

Challenge

• No European presence
• Controlling & processing sensitive & medical data
• Legally required GDPR article 27 representative

Solution

To meet their Article 27 GDPR obligations, the PCCTC appointed The DPO Centre to act as their EU Representative.

Initially, The DPO Centre conducted a high-level review and data mapping exercise to understand how the PCCTC controls and processes personal data for EEA residents. It then prepared the consortium’s Records of Processing Activities (RoPA) ,as required by Article 30 of the GDPR, and continues to maintain and update these records as required.

The DPO Centre is always on hand to liaise with data protection supervisory authorities from all EU member states and to represent the PCCTC in responding to Data Subject Access Requests (DSARs) and other individuals’ rights requests in the appropriate local language.

Outcome

Drew Davies, Contracts Manager at the PCCTC said: “By having The DPO Centre take responsibility for the role of GDPR representative for the PCCTC we are confident we are meeting the legal requirements of the GDPR.

The initial data mapping and construction of our RoPA were a great help in understanding the practicalities of the legislation and what the consortium’s obligations are. The DPO Centre’s team are always on hand to answer any queries we may have and to help us respond to any Data Subject Access Requests from any trial member across the EU.”

Download case study PDF