With several important updates affecting data and compliance, the BHBIA Ethics & Compliance Committee are sharing an update on recent legislative changes, evolving data protection standards, and updated resources available through the BHBIA.

Data (Use and Access) Bill 2025        

The UK's data reform Bill received Royal Assent on 19 June 2025 in the House of Lords and the House of Commons, with the Department for Science, Innovation and Technology (DSIT) issuing guidance and a commencement schedule in due course.

The Data (Use and Access) Bill amends, but does not replace, the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA) and the Privacy and Electronic Communications Regulations (PECR).

Most of the changes offer an opportunity to do things differently, rather than needing you to make specific changes to comply with the law.  The changes will be phased in over the next year.

The Information Commissioner’s Office (ICO) has prepared a factual summary of the changes.

European Commission Officially Extends EU-UK Data Adequacy Decisions by Six Months  

The European Commission (EC) has extended the validity of two adequacy decisions with the United Kingdom by six months, enabling the uninterrupted free flow of personal data between the EU and the UK until 27th December 2025. This extension was proposed in March to allow the UK sufficient time to finalise its new Data (Use and Access) Bill. With this Bill now adopted, the EC is currently evaluating whether the updated legal framework provides an adequate level of data protection in line with EU standards.

During this assessment period, the key safeguards established in the UK’s legal framework, which were deemed adequate in 2021, remain fully applicable to all personal data transferred from the EU. These safeguards ensure that data protection rights for EU citizens are maintained when their data is processed in the UK. This is important as the EU and UK both represent some of the most digitally interconnected markets worldwide, and the six-month extension allows the EC to thoroughly review the UK’s new Data Bill and decide on the long-term renewal of the adequacy decisions. 

MRS Publishes AI and Related Technologies Guidance and Client Side Guidance    

The Market Research Society (MRS) has published two documents that provide a detailed examination of AI. Firstly, a look at AI use and the related technologies as well as a guide on best practice use of AI from the client’s perspective, aimed at improving inclusion within research processes, with a particular focus on navigating the implications of AI tools:

• MRS AI and Related Technologies Guidance
• MRS Clientside Best Practice Guidance

The BHBIA Ethics & Compliance Committee is updating the Guidelines for Healthcare Data Analytics, and within this, we will be updating the section that looks at Artificial Intelligence and Data Protection. The updated guidelines will be published later in August. 

BHBIA Pro Forma Update     

Within the Guidelines and Legislation part of the BHBIA website, you will find a variety of Pro Formas. These are designed for you to use as templates and, if needed, adapt to fit your purpose. The Client Agreement to Safeguard Confidentiality of Recordings has recently been revised and the section for the agency signature has been removed, as this form is solely intended for clients to sign upon receipt of the recordings.

You can access all the Proformas here.

Essential Ethics Workshop: Practical Application of the BHBIA’s Legal & Ethical Guidelines 
      

Thursday 16 October 2025, London

Understanding the principles of compliant market research is one thing. Feeling confident in the practical application of the guidelines can be another. This interactive one-day workshop, led by the BHBIA Ethics & Compliance Committee, offers a hands-on approach to help you apply the guidance in real-world scenarios. Whether you’re new to healthcare market research or looking to strengthen your confidence, this is your opportunity to gain practical skills, ask questions, and connect with peers.

Register for the workshop.

The BHBIA’s Ethics & Compliance Committee provides guidance as general information for its members. It is not legal advice and should not be relied upon as such. Specific legal advice should be taken in relation to any specific legal problems or matters. Whilst every reasonable effort is made to ensure the information is accurate, no responsibility for its accuracy or for any consequences of relying on it is assumed by the BHBIA.