What Should You Do When the Original Consent Does Not Clearly Cover Your New Study?

What If the Old Consent Form Simply Does Not Answer Your New Question?

You have found a valuable existing dataset. Participants signed consent forms when the original study was conducted, but those forms were written years ago and say little about secondary research. Perhaps they mention “research purposes” without defining them. Perhaps future use was never discussed at all.

You cannot confidently say that participants authorized your proposed study. But you also cannot point to an explicit statement prohibiting it. What should you do with that uncertainty?

Do Not Resolve Ambiguity by Simply Assuming Permission

Unclear Consent Is a Governance Problem, Not a Guessing Exercise

First establish whether the consent is actually ambiguous

Researchers sometimes call a consent form “unclear” after reading one sentence in isolation. Before concluding that the original authorization is indeterminate, reconstruct the complete consent context.

Review the signed form, participant information sheet, approved protocol, recruitment materials where relevant, data-management plan, repository documentation, ethics correspondence, and any separate permission for storage or future use. Older studies may have addressed future use somewhere other than the paragraph you first expected to find it.

The objective is not to search selectively for language that supports your preferred interpretation. It is to establish as accurately as possible what participants were told and what they agreed to.

Silence is not the same as broad consent

If an old consent form never discusses future secondary research, that omission should not be transformed retrospectively into broad authorization. Broad consent is an affirmative consent model with substantive requirements under frameworks that formally recognize it.

For example, the U.S. Common Rule permits broad consent for storage, maintenance, and secondary research use of identifiable private information or identifiable biospecimens, but specifies information that must be provided as part of that process. A decades-old form that simply failed to discuss future research does not become Common Rule broad consent because researchers later wish it had done so.

Ambiguity is not automatically a prohibition either

The opposite shortcut can also be mistaken. An unclear old consent does not necessarily mean that secondary research is impossible. Ethical and regulatory frameworks may provide pathways for certain secondary uses without obtaining new individual consent.

CIOMS, for example, provides that when stored health-related data collected in past research or other contexts lack consent for future research use, a research ethics committee may consider a waiver of individual informed consent under specified conditions.

Under the U.S. Common Rule, certain secondary research uses can also qualify for exemptions, while an IRB may waive or alter informed consent for nonexempt research when the criteria in 45 CFR 46.116(f) are satisfied.

The correct conclusion is therefore not “silence means yes” or “silence means no.” It is “the original consent does not settle this, so what legitimate pathway governs the proposed use?”

Determine exactly how your new study differs

Before asking an ethics committee or institutional authority to evaluate the problem, describe the proposed secondary use precisely. What question will you ask? Which variables will you use? Will you receive identifiers? Will you link records? Will additional researchers receive access? Could the analysis generate sensitive new information?

The farther the new study moves from the purpose participants originally understood, the harder it may be to rely on the old authorization itself. But conceptual distance is only part of the assessment. Changes in sensitivity, recipients, identifiability, linkage, and consequences can also matter.

Check whether the data are identifiable under the applicable framework

Identifiability can materially change the regulatory analysis. Under OHRP guidance, secondary research involving coded private information may or may not constitute human-subjects research depending on whether investigators can readily ascertain the identities of the individuals and the circumstances of access. OHRP recommends that institutions designate knowledgeable persons or entities to make these determinations.

Do not remove names yourself and then declare the ethical question solved. Whether information is considered identifiable, de-identified, coded, or otherwise outside particular regulatory requirements depends on the governing definitions and actual access arrangements.

New consent is one option, not the automatic solution

If participants can feasibly be recontacted, obtaining new consent may sometimes be the clearest route. It allows people to evaluate the proposed use directly rather than asking researchers to infer permission from old documents.

Re-consent is not always practicable, however. Participants may number in the tens of thousands, contact information may no longer be valid, some participants may have died, or recontact itself may create privacy or welfare concerns.

This is why the broader question of whether secondary data research needs new consent cannot be answered solely by checking whether the original form mentions the new study.

A waiver requires an authorized determination

If new consent is not practicable, researchers may consider whether the applicable framework permits a waiver. But “impracticable to recontact” should not be translated into “therefore I may proceed.”

Under the Common Rule, an IRB may waive or alter informed consent only after making specified findings, including that the research involves no more than minimal risk, could not practicably be carried out without the requested waiver or alteration, and would not adversely affect subjects' rights and welfare. Where identifiable private information or identifiable biospecimens are involved, additional practicability considerations apply.

CIOMS likewise places the waiver decision with a research ethics committee and links it to conditions including important social value, impracticability without the waiver, and no more than minimal risk.

Do not confuse “difficult” with “impracticable”

Recontact can be expensive, slow, and administratively unpleasant. Those facts may be relevant, but inconvenience alone should not be treated as a self-evident ethical justification for dispensing with consent.

A waiver request should explain why the research could not practicably be carried out under the relevant standard, what risks the secondary use presents, how privacy will be protected, and why the proposed approach satisfies every applicable criterion. The reviewing body, not the investigator acting alone, evaluates that case.

Consider whether the study can be redesigned

The consent problem may sometimes be reduced without abandoning the research question. Perhaps the secondary investigator does not need identifiers. Perhaps fewer variables are necessary. Perhaps linkage can be performed by an authorized intermediary. Perhaps an aggregate dataset would answer the question sufficiently.

These changes should be scientifically defensible rather than cosmetic. Nevertheless, data minimization and separation of identifying information can sometimes reduce risk and alter the regulatory requirements that apply.

Privacy law may create a separate analysis

Ethics approval does not automatically settle whether personal-data processing is lawful. Under the Philippine Data Privacy Act, personal information must generally be processed in a manner compatible with declared, specified, and legitimate purposes, with provisions addressing scientific and statistical research and appropriate safeguards.

If the original consent is unclear, researchers should therefore determine not only what an ethics committee requires but also the lawful basis, purpose compatibility, data-subject rights, security requirements, and other privacy obligations applicable to the proposed processing.

Explicit refusal is different from ambiguity

A particularly important distinction arises when participants were asked about future use and said no. That is not an unclear consent form. It is an expressed choice.

The Common Rule makes this distinction concrete: when an individual was asked to provide broad consent for storage, maintenance, and secondary research use of identifiable private information or identifiable biospecimens and refused, an IRB may not waive consent for those activities.

Researchers should therefore distinguish missing authorization from explicit refusal rather than placing both under the convenient label “consent issue.”

When a Ten-Year-Old Consent Form Says Almost Nothing About Reuse

Common Mistakes When Old Consent Does Not Give a Clear Answer

Turn the Ambiguity Into a Documented Decision

Your task is not to find the interpretation that makes the dataset easiest to use. It is to establish what can actually be supported about the original authorization and then identify a legitimate route for the new study.

When Original Consent Does Not Clearly Cover Your Study

Frequently Asked Questions About Unclear Original Consent

When Consent Is Unclear, Establish a Legitimate Path Rather Than Inventing One

How to Cite This Guide

This guide is intended to be read, shared, and used in research, teaching, and academic work. If you draw on its ideas, explanations, or other content, please acknowledge the source by citing the guide. Doing so gives appropriate credit and helps your readers locate the original resource.