on the one hand, there is the traditional healthcare regulatory framework. This includes the common law duty of confidentiality (which may apply to patient data), clinical trial legislation and the regulation of medical devices and pharmaceuticals.