DPDP Insights › All sectors › Pharma and life sciences
Pharma companies handle doctors' data for marketing, patients' data in trials and support programmes, and adverse event reports.
Open the interactive tool for this sectorThis sector is in its core view. The law, guides and seat notes apply in full; the sector pack with role briefs and worked examples is being written.
| Rule | What it says | What it means alongside DPDP | Source |
|---|---|---|---|
| New Drugs and Clinical Trials Rules, 2019 | Informed consent of trial participants; ethics committees keep records for five years after the trial. | Trial data needs both informed consent and DPDP safeguards. | CDSCO |
| CERT-In Directions, 2022 | Report specified cyber incidents within six hours; keep ICT logs 180 days within India. | Applies alongside the DPDP breach steps. | CERT-In |