Skip to content
McCullochRegulatory Compliance

Practices

Where we advise

Each practice area is handled by advisers with direct, working knowledge of the relevant regulations, authorities, and operational realities.

14 practices
data center server blue

Data Privacy and Cyber Security

Data protection and information security for organisations handling personal, health, and AI data. GDPR and privacy by design, DPIAs and international transfers, breach response, and cyber security governance, including risk assessment, controls, and incident readiness.

Learn more
Data Protection Officer

Data Protection Officer

Outsourced and fractional Data Protection Officer services under the UK GDPR and EU GDPR, from mandatory appointment and data protection impact assessments through breach notification, international transfers, and supervisory-authority liaison, with a dedicated specialism in clinical trials.

Learn more
checklist clipboard desk

Audits and Inspections

Independent regulatory audit programmes, mock inspections, gap assessments, and CAPA support, across sponsor, supplier, and manufacturing audits in the EU, UK, and US.

Learn more
pharmacist pharmacy medication shelves

Postmarketing Surveillance

A compliant, audit-ready pharmacovigilance system across the EU, UK, and US, from PV system design and QPPV support through case and aggregate reporting, signal management, and health-authority inspections.

Learn more
petri dish laboratory samples

Clinical Trials

GCP compliance and inspection readiness across the trial lifecycle, from protocol design through close-out, aligned to ICH E6(R3) and E8(R1), with direct health-authority experience.

Learn more
Regulatory submission dossier, representing product life cycle management

Life Cycle Management

Regulatory lifecycle management across the EU, UK and US: authorisation strategy, regulatory IP rights, variations and renewals, market access, and interactions with EMA, MHRA and FDA across the full product lifecycle.

Learn more
pharmaceutical manufacturing line

Quality Management

Quality management systems and manufacturing compliance for regulated products, including data integrity, import/export requirements, and quality considerations for AI and emerging technologies.

Learn more
Abstract helix of data points representing artificial intelligence

Artificial Intelligence

Regulatory strategy for AI in regulated environments, covering EU AI Act readiness, risk classification, technical documentation, and governance for AI used in medical, clinical, and health contexts.

Learn more
magnifying glass documents desk

Regulatory Due Diligence

Regulatory risk assessment for M&A and private equity transactions, covering product and portfolio liability across the EU, UK, and US.

Learn more
medical device technology

Devices, IVD, Combination Products & Digital Health / AI

End-to-end regulatory support under EU MDR and IVDR, covering combination products, companion diagnostics, Notified Body strategy, and AI compliance for digital health products.

Learn more
green leaves nature macro

Food, Cosmetics & Environment

Regulatory advice across food law, cosmetics regulation, novel foods authorisation, and chemicals and environmental compliance.

Learn more
ISO Management System Audits

ISO Management System Audits

Independent audits and certification readiness assessments against ISO management system standards, for organisations in any sector.

Learn more
warehouse logistics shipping

Product Safety, Recalls, Liability & Compliance

Structured support for product safety issues, covering risk assessment, recall planning, post-market risk management, and engagement with regulatory authorities.

Learn more
A balance scale, representing weighing and managing risk

Risk Management & Business Continuity

Risk and resilience built on recognised standards: enterprise and quality risk management, business continuity, and crisis response, so audits, disruption, and the unexpected find you prepared.

Learn more