
The ICO's draft guidance signals a more sophisticated and risk-based approach to research governance. Organisations operating in life sciences should view anonymisation, pseudonymisation, TREs, privacy-enhancing technologies and documented identifiability assessments as increasingly important components of responsible research and innovation. Given the draft status of the guidance, a degree of "watching brief" is appropriate.