William Long

Sidley Austin

William Long advises international clients on a wide variety of social media, data protection, privacy, information security, e-commerce and other regulatory matters. William has experience with EU and international e-commerce, consumer, social media, data protection and payments projects, advising on e-commerce, consumer and social media regulation, data security and other data protection issues. He is a regular speaker on social media, data protection and e-commerce matters.

William is a co-founder of the Social Media Governance Forum, a networking group of companies involved in social media, and was previously in-house counsel to one of the world’s largest international financial services groups as their e-commerce counsel establishing Interactive Investor which is one of the world’s largest online consumer financial services businesses with over 8 million users.

He has been a member of a number of working groups in London and Europe looking at the EU regulation of e-commerce and data protection and spent a year at the UK’s Financial Law Panel (established by the Bank of England), as assistant to the Chief Executive working on regulatory issues with online financial services.

Contributed to

2

Conducting clinical research—data protection implications

Practice notes

This Practice Note explores the data protection implications of conducting clinical research. In particular, this Practice Note considers the responsibility for data protection compliance in the context of clinical research, the relevant legal grounds for processing personal data for research purposes, transparency requirements, collaborative research and data sharing as well as exceptions to data subject rights when processing personal data in the context of research. Finally, this Practice Note provides a checklist of practical data protection considerations to bear in mind when planning research activities.

Life Sciences

mHealth—data protection considerations

Practice notes

Digital health developers, manufacturers and distributors of mobile health (mHealth) apps, and any connected software as medical devices (SaMD) or artificial intelligence (AI) system, must comply with significant data protection regulations in parallel with regulatory compliance throughout the life cycle of an app’s development and commercialisation to market. This Practice Note focuses on the data protection and privacy considerations for mHealth apps, devices or connected medical software (SaMD) in the UK and EEA. mHealth, like telehealth, is a subset of eHealth under the digital health umbrella and refers to the use of mobile applications to allow users to monitor, evaluate and improve their health using mobile devices. Further discussion addresses the more stringent protections required for health data referred to as ‘special category’ data or ‘sensitive’ personal data.

Life Sciences