National Institute for Health and Care Research (NIHR)
Data-sharing consultancy and information governance strategy
National multi-centre research data-sharing framework
Read the NIHR case studyLife Sciences & Pharmaceuticals
Privacy governance for international pharmaceutical and life-sciences organisations
Pharmaceutical and life-sciences organisations move personal data across subsidiaries, partners and jurisdictions. We provide accountable DPO leadership and practical governance for international data transfers, so privacy obligations are managed consistently across the group.
View Relevant Case Studies Not sure where to start? Tell us what you need to decide or resolve.
Relevant experience
Published work in this sector
UCL
IG audit, improvement plan, training and physical-security audit
Helped shape and focus the final DSPT submission
Read the UCL case study
Glenmark Pharmaceuticals
Retained external DPO service
Retained external DPO · Global remit
Read the Glenmark Pharmaceuticals case studyA US-headquartered global pharmaceutical company with international operations
Cross-border data-transfer advisory
International data-transfer governance
Read the case study
Client voices
What clients in this sector say
“We first came across, and were impressed with, IG Smart’s work with one of our partner organisations. This gave us the confidence to choose IG Smart to perform an internal audit and assess our readiness for the DSP Toolkit. IG Smart were able to work with us and produce a report that clearly indicated areas to prioritise. The report provided insight that helped shape and focus our final DSP Toolkit submission.”
Trevor PeacockHead of Information Governance, UCL “IG Smart provide a fantastic external Data Protection Officer service. Knowledgeable and responsive, IG help us to navigate an otherwise tricky area of compliance and ensure we appropriately address and overcome all of our privacy concerns. We are in safe hands.”
Oliver BourneVice President, Legal and Compliance – EU and LATAM, Glenmark Pharmaceuticals
What is at stake
What makes governance difficult here
Obligations in several jurisdictions
Group operations can span regions with different data-protection laws, regulators and expectations, all of which need consistent oversight.
Data moving across borders
Transfers between group entities, vendors and partners need lawful mechanisms and documented risk assessment.
Accountable privacy leadership
Someone has to own DPO responsibilities credibly, with enough independence and seniority to challenge the business.
How we help
Start with the requirement, not the service catalogue
- Outsourced & Fractional DPOFor groups that need an external DPO with a multi-jurisdiction remit, and for defined data-transfer advisory.
- Information Governance ConsultancyFor the frameworks, records and accountability structures that make privacy governance repeatable across entities.
Requirements organisations commonly encounter
Depending on the organisation, activities and jurisdiction, relevant requirements may include:
- EU GDPR and UK GDPR
- Applicable LATAM and other national data-protection legislation
- Standard Contractual Clauses and transfer impact assessments
- UK International Data Transfer Agreement or Addendum, where UK transfers apply
Working with us
Ways organisations in this sector work with us
Managed & retained capability
Ongoing specialist governance and assurance where continuity matters.
Defined engagements
Assessment, audit, readiness, remediation, assurance and defined programmes.
Who brings experience in this sector
View Michael’s profileMichael Abtar
CEO and Founder
Governance, risk and assurance specialist with more than 18 years' experience spanning privacy, cyber resilience, AI governance, digital transformation, healthcare and complex regulated organisations.
View Shaista’s profileShaista Peart
Senior Data Privacy & Information Governance Consultant
Privacy and information governance specialist advising organisations on data protection, DPO responsibilities and practical governance across healthcare and regulated environments.
For procurement teams:Engagement modelsTrust CentreRequest relevant evidence
Discuss your requirement with a senior practitioner
Tell us what you need to decide or resolve, or share a defined requirement for review.