Search

Risk prediction models hold great promise to reduce the impact of cancer in society through advanced warning of risk and improved preventative modalities. These models are evolving and becoming more complex, increasingly integrating genetic screening data and polygenic risk scores as well as calculating risk for multiple types of a disease. However, unclear regulatory compliance requirements applicable to these models raise significant legal uncertainty and new questions about the regulation of medical devices. This paper aims to address these novel regulatory questions by presenting an initial assessment of the legal status likely applicable to risk prediction models in Canada, using the CanRisk tool for breast and ovarian cancer as an exemplar. Legal analysis is supplemented with qualitative perspectives from expert stakeholders regarding the accessibility and compliance challenges of the Canadian regulatory framework. While the paper focuses on the Canadian context, it also refers to European and U.S. regulations in this domain to contrast them. Legal analysis and stakeholder perspectives highlight the need to clarify and update the Canadian regulatory framework for Software as a Medical Device as it applies to risk prediction models. Findings demonstrate how normative guidance perceived as convoluted, contradictory or overly burdensome can discourage innovation, compliance, and ultimately, implementation. This contribution aims to initiate discussion about a more optimal legal framework for risk prediction models as they continue to evolve and are increasingly integrated into landscape for public health. [ABSTRACT FROM AUTHOR]

Canada’s regulatory frameworks governing privacy and research are generally permissive of genomic data sharing, though they may soon be tightened in response to public concerns over commercial data handling practices and the strengthening of influential European privacy laws. Regulation can seem complex and uncertain, in part because of the constitutional division of power between federal and provincial governments over both privacy and health care. Broad consent is commonly practiced in genomic research, but without explicit regulatory recognition, it is often scrutinized by research or privacy oversight bodies. Secondary use of health-care data is legally permissible under limited circumstances. A new federal law prohibits genetic discrimination, but is subject to a constitutional challenge. Privacy laws require security safeguards proportionate to the data sensitivity, including breach notification. Special categories of data are not defined a priori. With some exceptions, Canadian researchers are permitted to share personal information internationally but are held accountable for safeguarding the privacy and security of these data. Cloud computing to store and share large scale data sets is permitted, if shared responsibilities for access, responsible use, and security are carefully articulated. For the moment, Canada’s commercial sector is recognized as “adequate” by Europe, facilitating import of European data. Maintaining adequacy status under the new European General Data Protection Regulation (GDPR) is a concern because of Canada’s weaker individual rights, privacy protections, and regulatory enforcement. Researchers must stay attuned to shifting international and national regulations to ensure a sustainable future for responsible genomic data sharing. [ABSTRACT FROM AUTHOR]