Lably
Skip to content

Dynamic consent

  • 12 min read
  • 6 chapters

Related on Lably

Through Research, Privacy and Data processing

Background

Researchers are required to obtain informed consent from potential participants before any research begins – this is a fundamental principle of medical research as laid out in the Declaration of Helsinki. Traditionally this has been done through a paper consent form which is accompanied by a subject information sheet that describes the risks and benefits of being involved in the research. Increasingly, this also outlines how an individual's data will be protected and their privacy maintained. This constitutes a formal agreement that specifies how a research participant’s data will be used in that particular study. Participants should be informed about the purpose(s) for which their data will (or may) be used; where it will be stored; the expected retention time; if any other parties are involved; the amount and the sensitivity of the information exchanged; whether the data will be shared onward to yet other parties; whether the consent to use these data can be revoked. Consent to data processing is also a requirement of data protection and privacy laws in most countries. Traditionally, participants have obtained details of how their data will be used from patient information sheets and face-to-face interactions with researchers or healthcare staff.

However, now both medical research and data processing are changing through developments in information communication technology, especially the internet with examples including genetic databases and registries, electronic health records, biobanks, and online digital services and databases. More and more data is being collected online and being stored in large data sets with the intention for them to be used by many researchers, research groups and institutions for a variety of purposes. These include different research projects, as well as public health assessments, marketing, and the design of algorithms and data mining.

The collection and use of data in this way raises some challenges. Firstly with regard to privacy: can participants' data and identity truly be anonymised and sensitive data be kept safe and confidential? Individuals, in general, are not aware of how their personal information is used, for what purpose and which parties have a copy. They are not usually given the opportunity to declare their specific consents and privacy-related personal data management preferences. Secondly, with regard to consent: informed consent requires a person to know in advance what they are agreeing to and what the likely risks and benefits of agreeing will be. But with these large, linked data sets, it is often not clear at the time someone is asked to consent how their data will be used in the future.

This is known as a broad consent or a blanket consent. Blanket consent means that a person effectively agrees to permit any and all uses of their data once it is provided. Broad consent is more common and involves agreeing to a broad set of potential future uses under a particular governance framework. Broad consent has become the standard practice in many genetic registries and biobanks. Its legal and ethical adequacy has been questioned. In addition, consent is still frequently done as a one-off procedure with a paper form for participants to sign. These forms are often lost or filed away, and over time people forget what they have consented to and why.

Sign in to keep reading

5 more chapters are free with a Lably account.

More in Computing and communication