Worldwide: Privacy

On June 8, 2026, four central agencies jointly published a revamped Good Clinical Practice (GCP) standard, effective Sept. 1, 2026. It is materially shorter than the standard it replaces, and that compression is the point: China’s GCP now incorporates International Council for Harmonisation (ICH) E6(R3) by reference rather than restating it, and it reallocates responsibility among sponsors, service providers, investigators, and sites in ways that may require contract amendments before the effective date.

On May 15, 2026, a substantial revision of China’s Implementing Regulations of the Drug Administration Law (the Regulations or Implementing Regulations) took effect, introducing, among other items, a formal data protection framework. On the same day, China’s National Medical Products Administration (NMPA) issued the Implementing Measures for Drug Trial Data Protection (the Measures), giving operational effect to the Regulations’ data-protection article for the first time since China accepted the underlying obligation upon World Trade Organization (WTO) accession.

El 22 de julio de 2026 se publicó en la Gaceta Oficial de la Ciudad de México el Decreto por el que se adiciona el artículo 231 Bis al Código Penal para el Distrito Federal.

New Jersey Governor Mikie Sherrill signed three measures addressing children's and teens' use of online services, with the New Jersey Age-Appropriate Design Code imposing comprehensive safety, privacy, data use, and design requirements on covered online service providers beginning September 1, 2027.

This content presents information about cookie usage and data privacy practices, explaining how cookies operate on the website and detailing user options for managing cookie preferences. It outlines the categories of cookies employed, their purposes, and references comprehensive privacy documentation for users seeking detailed information about data handling practices.

The Seventh Circuit has issued a landmark ruling that device manufacturers do not "possess" or "collect" biometric data under Illinois' BIPA when software creates and processes such data solely on a user's device.