Do Participants Need to Be Reconsented When New Uses for Their Data Are Proposed?

If You Want to Use Existing Data for Something New, Must You Ask Again?

A dataset collected for one research question may later become useful for another. Researchers might want to combine it with another dataset, investigate a different outcome, share it with collaborators, or use stored information in a new project.

The scientific temptation is obvious: the data already exist. But participant authorization does not necessarily expand simply because another worthwhile research question appears.

At the same time, asking every participant for new consent whenever a secondary analysis is proposed is not a universal ethical or regulatory requirement. The answer depends on what participants originally authorized, what kind of data are involved, what the proposed new use entails, and which legal and ethics framework governs the research.

First Determine Whether the New Use Falls Within the Existing Authorization

The Scope of the Original Consent Is the Starting Point

Consent to Provide Data Is Not Automatically Consent to Every Future Use

When participants provide information for research, what matters is not merely that researchers possess the data. The relevant question is what participants were told and what they authorized about collection, storage, access, sharing, and future research use.

Some consent processes authorize only a particular study. Others prospectively describe a range of future research. Under appropriate governance, broad consent can permit secondary uses that cannot all be specified in detail when the data are initially collected.

CIOMS guidance on stored health-related data states that secondary analysis can be ethically acceptable when the intended use falls within the scope of the original broad informed consent. It also calls for ethics review of proposed uses and indicates that when a proposed use falls outside the authorized scope, reconsent is necessary unless an appropriate waiver pathway applies.

Specific Consent and Broad Consent Authorize Different Things

Broad consent does not mean unrestricted consent. Its ethical force depends partly on participants being given meaningful information about the kinds of future research contemplated, storage, access, confidentiality, withdrawal, governance, and other relevant conditions.

Under the U.S. Common Rule, broad consent is a specific regulatory option for the storage, maintenance, and secondary research use of identifiable private information or identifiable biospecimens. For the relevant secondary-research exemption to apply, an IRB conducting limited review must determine that the proposed research falls within the scope of the broad consent that was obtained.

The Real Test Is Scope, Not Whether the Research Question Has a New Title

A secondary analysis can ask a new research question without necessarily exceeding the original authorization. Conversely, a project that appears scientifically related to the original study may still involve a use participants did not authorize.

Researchers should therefore compare the proposed activity with the actual consent language and governance arrangements rather than relying on whether the new project seems “close enough” to the old one.

Identifiability Can Change the Regulatory Analysis

The consent question cannot be answered solely by asking whether the data came from research participants. Whether researchers can readily ascertain the identities associated with the information can be legally and ethically significant.

Under the U.S. Common Rule, research involving coded private information may or may not constitute human-subject research depending on whether investigators can readily ascertain participant identities under the regulatory definition and circumstances. OHRP recommends that the appropriate institutional authority make this determination rather than investigators treating “coded” and “anonymous” as interchangeable.

Other jurisdictions and privacy regimes use different definitions and requirements. Researchers should therefore avoid turning a U.S. regulatory pathway into a universal rule.

Broad Consent Does Not Give Researchers Unlimited Freedom

A participant who agrees to broad future use has not necessarily agreed to every imaginable analysis, recipient, purpose, or disclosure.

Under the Common Rule broad-consent framework, the scope of permitted future research is itself important. Limited IRB review for the relevant secondary-use exemption includes determining whether the proposed research falls within the broad consent obtained.

CIOMS similarly links the ethical acceptability of broad consent to appropriate governance and specifies that stored data require systems governing authorization for future use.

A New Use Outside the Original Consent Does Not Always Mean Recontact Is the Only Possible Route

This is where the issue becomes more nuanced. If the proposed research is not covered by existing consent, researchers should not simply proceed because recontacting participants would be inconvenient. But neither is individual reconsent universally the only permissible solution.

Under the Common Rule, some secondary research may qualify for an exemption or proceed under an IRB-approved waiver of informed consent when the applicable regulatory criteria are satisfied. OHRP notes that nonexempt human-subject research generally requires consent unless an IRB approves an appropriate waiver.

CIOMS likewise permits a research ethics committee to consider waiving individual consent for certain uses of previously stored data when obtaining consent would make the research infeasible or impracticable, the research has important social value, and the research poses no more than minimal risks to participants or their groups.

Data Sharing Can Be a New Use Even When Researchers Do Not Collect Anything New

Secondary use sometimes feels ethically distant from participant interaction because researchers are working only with files already stored on a server. Yet sharing those files with another institution, depositing them in a repository, linking them to another database, or allowing a different category of research can alter the conditions under which participants' information is used.

WHO's policy on sharing and reuse of health-related data emphasizes governance, privacy protections, and alignment with informed consent agreements where consent is required. CIOMS likewise treats future data use as something requiring appropriate authorization and governance rather than assuming that possession of the data is sufficient.

Data and Biospecimens Can Raise Related but Distinct Questions

Research datasets and stored biological materials are often discussed together because biospecimens can generate extensive associated information. Nevertheless, the applicable rules may distinguish between information and specimens, and particular analyses such as genomic sequencing may raise additional disclosure and governance considerations.

The Common Rule, for example, includes specific consent elements concerning research involving biospecimens and possible whole-genome sequencing in applicable circumstances. Researchers proposing a new use should therefore identify exactly what material and information they intend to use rather than treating “data” as one uniform category.

When a New Research Question May or May Not Require New Consent

The new research question alone does not determine whether reconsent is necessary. The answer emerges from the relationship between the proposed use, the original authorization, identifiability, governance arrangements, and the rules governing the secondary research.

Common Mistakes About Reusing Participant Data

Map the Proposed Data Use Against the Permission You Actually Have

Before beginning a secondary analysis, retrieve the consent materials, protocol, data-governance documentation, and any restrictions attached to the dataset. Do not rely on memory or on a generic statement that participants “agreed to research.”

This approach is consistent with viewing informed consent as more than a one-time signature. Respecting the original decision includes respecting the boundaries participants placed around future use, while also recognizing legitimate consent and waiver frameworks designed for secondary research.

Before Reusing Participant Data for a New Purpose

Questions About New Uses of Existing Research Data

New Research Does Not Automatically Mean New Consent, but Existing Data Do Not Mean Unlimited Permission

How to Cite This Guide

This guide is intended to be read, shared, and used in research, teaching, and academic work. If you draw on its ideas, explanations, or other content, please acknowledge the source by citing the guide. Doing so gives appropriate credit and helps your readers locate the original resource.