Dr
Miranda
Mourby
(she/her)
School of Law
Lecturer in Law
Full contact details
School of Law
Bartolomé House
- Profile
-
Miranda Mourby is a Lecturer in Law specialising in privacy, data protection and confidentiality. She completed her PhD at the University of Sheffield in 2025. Her doctoral research examined privacy rights in 'secondary uses' of health data, i.e. when information collected in healthcare contexts may be used for other purposes.
Before entering academic research, Miranda practised as a barrister in healthcare law. She then spent eight years as a Researcher in Law at the Centre for Health Law and Emerging Technologies ('HeLEX') at the University of Oxford. There, she contributed to many interdisciplinary projects concerning health data governance, artificial intelligence and responsible innovation.
She has worked with researchers from a range of disciplines e.g., data science, computer science, medicine, philosophy and sociology. She is committed to collaborative work that addresses social problems, and avoids territorial jargon. Her own contribution is primarily 'doctrinal legal research': i.e., close consideration of how the law is applied in specific cases, and how it could be re-interpreted to promote coherence and fairness.
Miranda’s first degree was in English, and she retains an interest in how culture and subjectivity shape our reading of texts. This informs her understanding of broad socio-legal concepts-- like privacy-- that express a rich, unruly and sometimes chaotic mix of human values, and cannot be reduced to neat formulae.
- Qualifications
-
PhD, University of Sheffield; BA(hons) English, University of Cambridge
- Publications
-
Books
- Dictionary of Privacy, Data Protection and Information Security. Edward Elgar Publishing Limited.
Journal articles
- The ‘DPIA+’: Aligning data protection with UK equality law. Computer Law & Security Review, 59, 106212-106212.
- Private by default: reasonable expectations in secondary uses of patient data. Medical Law Review, 33(4). View this article in WRRO
- The influence of metformin treatment on the circulating proteome. eBioMedicine, 118, 105859-105859.
- Regulatory and Legal Considerations with Artificial Intelligence in Dermatology. Dermatologic Clinics, 43(4), 611-623.
- Synthetic Data in Healthcare and Drug Development: Definitions, Regulatory Frameworks, Issues. CPT: Pharmacometrics & Systems Pharmacology, 14(5), 840-852.
- Using Video Cameras as a Research Tool in Public Spaces: Addressing Ethical and Information Governance Challenges Under Data Protection Legislation. Journal for the Measurement of Physical Behaviour, 6(2), 145-155.
- Author Correction: Discovery of drug–omics associations in type 2 diabetes with generative deep-learning models. Nature Biotechnology, 41(7), 1026-1026.
- Discovery of drug–omics associations in type 2 diabetes with generative deep-learning models. Nature Biotechnology, 41(3), 399-408.
- Pharmacogenomics of GLP-1 receptor agonists: a genome-wide analysis of observational data and large randomised controlled trials. The Lancet Diabetes & Endocrinology, 11(1), 33-41.
- Patent power in biomedical innovation: Technology governance in biomodifying technologies. The Journal of World Intellectual Property, 25(2), 473-494.
- Biomodifying the ‘natural’: from Adaptive Regulation to Adaptive Societal Governance. Journal of Law and the Biosciences, 9(1).
- Controversies between regulations of research ethics and protection of personal data: informed consent at a cross-road. Medicine, Health Care and Philosophy, 25(1), 23-30.
- Transparency of machine-learning in healthcare: The GDPR & European health law. Computer Law & Security Review, 43, 105611-105611.
- Profiles of Glucose Metabolism in Different Prediabetes Phenotypes, Classified by Fasting Glycemia, 2-Hour OGTT, Glycated Hemoglobin, and 1-Hour OGTT: An IMI DIRECT Study. Diabetes, 70(9), 2092-2106.
- Ethical Issues in Consent for the Reuse of Data in Health Data Platforms. Science and Engineering Ethics, 27(1).
- Processes Underlying Glycemic Deterioration in Type 2 Diabetes: An IMI DIRECT Study. Diabetes Care, 44(2), 511-518.
- Governance of research consortia: challenges of implementing Responsible Research and Innovation within Europe. Life Sciences, Society and Policy, 16(1).
- Anonymity in EU Health Law: Not an Alternative to Information Governance. Medical Law Review, 28(3), 478-501.
- Gene therapy regulation: could in-body editing fall through the net?. European Journal of Human Genetics, 28(7), 979-981.
- Five models for child and adolescent data linkage in the UK: a review of existing and proposed methods. Evidence Based Mental Health, 23(1), 39-44.
- Governance of academic research data under the GDPR—lessons from the UK. International Data Privacy Law, 9(3), 192-206.
- Genetic studies of abdominal MRI data identify genes regulating hepcidin as major determinants of liver iron concentration. Journal of Hepatology, 71(3), 594-602.
- Biomodifying technologies and experimental space: organisational and regulatory implications for the translation and valuation of health research. - ESRC. Impact, 2019(1), 63-65.
- Balancing Data Subjects’ Rights and Public Interest Research:. European Data Protection Law Review, 5(1), 43-53.
- Are ‘pseudonymised’ data always personal data? Implications of the GDPR for administrative data research in the UK. Computer Law & Security Review, 34(2), 222-233.
- Genetic analysis of blood molecular phenotypes reveals common properties in the regulatory networks affecting complex traits. Nature Communications, 14(1).
- Contractual Mechanisms for Securing the Public Interest in Data Sharing in Public-Private Health Research Partnerships. SCRIPTed: A Journal of Law, Technology & Society, 20(2), 325-351.
- eTRANSAFE: Building a sustainable framework to share reproducible drug safety knowledge with the public domain. F1000Research, 11, 287-287.
- ‘Leading by Science’ through Covid-19: the GDPR & Automated Decision-Making. International Journal of Population Data Science, 5(4).
- Health Data Linkage for Public Interest Research in the UK: Key Obstacles and Solutions. International Journal of Population Data Science, 4(1).
- Lawful disclosure of administrative data for research purposes in the UK. Journal of Data Protection & Privacy, 2(3), 264-264.
- Engagement and Co-Design: Routes to Lawful Research?. International Journal of Population Data Science, 3(2).
Book chapters
- Identity, Profiles and Pseudonyms in the Digital Environment, The Boundaries of Data (pp. 275-293). Routledge
- 14. Identity, Profiles and Pseudonyms in the Digital Environment, The Boundaries of Data (pp. 275-294). Amsterdam University Press
- Secondary uses of patients' data in the European Health Data Space, Confidentiality, Privacy, and Data Protection in Biomedicine (pp. 127-149). Routledge
Preprints
- The ‘Dpia+’: Aligning Data Protection with Equality Law, Elsevier BV.
- Patent Power in Biomedical Innovation: Technology Governance in Biomodifying Technologies, Elsevier BV.
- Genetic analysis of blood molecular phenotypes reveals regulatory networks affecting complex traits: a DIRECT study, openRxiv.
- Dictionary of Privacy, Data Protection and Information Security. Edward Elgar Publishing Limited.