In this video, Edye Edens discusses the recent transition of ICH GCP E6 from R2 to R3, highlighting an interesting question she received: Is R3 evolving into a privacy doctrine? Given its increased focus on data protection, system validation, and privacy responsibilities, some wonder if it overlaps with regulatory frameworks like HIPAA, especially as OCR proposes significant updates to the Security Rule. However, Edens notes that while R3 contains more references to privacy, it does not explicitly mention cybersecurity, which is a major focus of OCR’s changes. She argues that R3 is not attempting to replace or overshadow existing privacy regulations but rather aligns with their broader goals of data confidentiality and integrity. She invites discussion on whether others see any regulatory overlap.

Support the show