Building a data governance framework for growth

Background

3 Billion Pairs Genetic (3BP) is a UK-based epigenomics machine learning research platform founded by the entrepreneurs behind leading technology companies including Autonomy, 365 Corporation and Ethereum.

The platform integrates data and research from genomics, proteomics, metabolomics, metagenomics and transcriptomics to support early diagnostics and accelerate clinical trials. By combining this data with socio-demographic insights, sentiment analysis and quantified self third-party APIs, 3BP provides bioinformaticians and pharmaceutical companies with a powerful dataset to advance precision medicine research.

Through these insights, the platform has the potential to streamline genomics-based clinical trials, improve diagnostic timelines and ultimately help reduce pressure on healthcare systems.

The LS Law Approach

We supported 3BP in establishing a data protection framework aligned with both GDPR requirements and the expectations of organisations operating within the life sciences sector.

Our approach was to translate regulatory obligations into practical processes that could be embedded within the platform’s development and day-to-day operations.

We worked closely with the 3BP team to understand how data was collected, processed and shared, ensuring that legal requirements were aligned with the technical and commercial design of the platform.

We focused on building a framework that would support both compliance and collaboration. This included strengthening internal data governance structures and ensuring that policies met the standards expected by pharmaceutical manufacturers, research institutions, medical associations and global health authorities.

Throughout, our role was to provide clarity on data controller responsibilities and ensure that compliance was addressed in a way that enabled, rather than restricted, the organisation’s ability to progress partnerships.

The Outcome

3BP established a structured and defensible approach to data protection, aligned with GDPR and industry expectations.

The organisation gained a clear understanding of its responsibilities as a data controller and implemented governance processes that supported consistent and compliant data handling. Areas of uncertainty within data privacy legislation were addressed, allowing the business to operate with greater confidence.

As a result, 3BP was able to embed a privacy-by-design approach within its platform, ensuring that data protection considerations were incorporated into its development from the outset. Robust safeguards were introduced to protect individual data, and the organisation was able to engage with partners across the life sciences sector on a compliant basis.

We continue to support 3BP in maintaining and developing its data governance framework, including the implementation of a structured Data Protection Impact Assessment process to ensure ongoing compliance as the platform evolves.