How Far Can Secondary Research Move From the Purpose Participants Originally Consented To?

When Does a New Use Become Too Different From What Participants Agreed To?

Participants may have agreed to provide data for research on diabetes, university learning, mental health, employment, or another stated purpose. Years later, those same data might be useful for a study the original researchers never contemplated.

How far can researchers move before the new use no longer resembles what participants reasonably understood themselves to be authorizing? There is no universal percentage, number of conceptual steps, or keyword test. The boundary has to be assessed from the substance of the original authorization and the proposed secondary use.

There Is No Fixed Distance That Secondary Research May Move

The Boundary Is About Scope and Expectations, Not Semantic Similarity

Consent to a study is not necessarily consent to a single statistical question

Participants ordinarily receive an explanation of the purpose and nature of research rather than a binding list of every regression, subgroup analysis, or hypothesis that investigators might eventually examine. A secondary analysis therefore does not automatically fall outside consent merely because its research question differs from the question emphasized in the original paper.

At the same time, a statement that data are being collected for a particular purpose cannot reasonably be treated as permission for every imaginable use. The central issue is the scope of the authorization participants were actually given.

Start with the language participants received

The protocol can help reconstruct the original study, but the participant-facing information is particularly important when assessing what people were told. Review the consent form, participant information sheet, recruitment materials where relevant, and any separate authorization for future storage or secondary use.

Look for descriptions of the research purpose, categories of future research, data sharing, storage, access by other researchers, commercial use where relevant, restrictions, and any choices participants were allowed to make.

If participants were explicitly told that information would be used only for a narrowly defined purpose, that limitation matters. If they were given appropriately constructed broad consent covering categories of future research, a wider range of secondary studies may fall within the authorization.

A different research question and a different research purpose are not always the same thing

This distinction is easy to miss. Imagine that participants joined a longitudinal study described as investigating factors associated with healthy aging. The original investigators focused first on physical activity and cardiovascular outcomes. A later analysis examines sleep and cognitive function using variables already collected under the same program.

The secondary research question is clearly different, but the broader research purpose may still fall within what participants were told, depending on the wording of the consent and applicable governance.

Now imagine using the same identifiable data to investigate an unrelated and potentially stigmatizing characteristic that participants were never told could be studied. The fact that both projects happen to use the same dataset does not make their purposes ethically equivalent.

The Common Rule's broad-consent framework uses a reasonable-person standard

The U.S. Common Rule illustrates one formal way of addressing the scope problem. Broad consent for secondary research must include a general description of the types of research that may be conducted with identifiable private information or identifiable biospecimens. That description must contain sufficient information that a reasonable person would expect the broad consent to permit those types of research.

Broad consent can therefore accommodate future studies that were not individually specified when participants enrolled. It is not, however, equivalent to an unrestricted authorization for anything a researcher later finds scientifically interesting. For the secondary-research exemption at 45 CFR 46.104(d)(8), limited IRB review includes determining whether the proposed research falls within the scope of the broad consent obtained.

Reasonable expectations also matter in data-protection analysis

The Philippine National Privacy Commission's Guidelines on Consent provide a useful example of purpose compatibility in personal-data processing. The guidelines state that further processing for another purpose may occur without additional consent when it is within the data subject's reasonable expectations concerning the purpose, scope, manner, and extent of processing and when the further purpose is compatible with the original purpose.

The guidelines further direct organizations assessing compatibility to establish a clear and reasonable link between the original and further purposes and consider the impact of the further processing on the data subject. Where the additional purpose is incompatible or goes beyond what the data subject may reasonably expect, consent for the additional purpose is required under that guidance.

That is a data-protection rule rather than a universal research-ethics test. It nevertheless illustrates why researchers should not evaluate purpose solely by comparing labels such as “health research” or “education research.” Context and expected consequences matter.

Broad labels can conceal substantial changes in use

Calling two studies “health research” does not necessarily make them compatible. Health research encompasses everything from relatively ordinary epidemiological questions to analyses involving genetics, stigmatized conditions, reproductive information, mental health, or other highly sensitive characteristics.

Likewise, “educational research” could encompass classroom learning, disability information, disciplinary records, political expression, socioeconomic circumstances, or predictive profiling. A category broad enough to contain both studies is not automatically the category participants understood themselves to authorize.

Risk can change even when the data themselves do not

The same variables can take on different ethical significance when used for a different purpose. A dataset originally used to study service provision, for example, might later be used to classify individuals or groups in ways that create privacy, discrimination, reputational, or stigmatization concerns.

This means that purpose drift cannot be evaluated merely by asking whether researchers are collecting any new variables. A secondary analysis can create new informational risks through new inferences, linkages, classifications, or outputs even when the underlying records are unchanged.

Participants' explicit restrictions deserve particular attention

If participants expressly declined a category of future use, researchers should not treat a later waiver or technical transformation as a convenient mechanism for defeating that choice. Under the U.S. Common Rule, for example, if an individual was asked to provide broad consent for storage, maintenance, and secondary research use of identifiable private information or identifiable biospecimens and refused, an IRB may not waive consent for their storage, maintenance, or secondary research use.

More generally, the ethical significance of an explicit refusal differs from a situation in which the original materials simply failed to anticipate the later question.

Crossing the original boundary does not necessarily make the research impossible

Determining that a proposed study falls outside the original consent is not the same as concluding that the research can never occur. It means the original authorization should not be used as the justification for proceeding.

Depending on the governing framework, researchers may be able to obtain new consent, redesign the study, use appropriately non-identifiable information, qualify for an applicable exemption, or request a waiver from an authorized ethics committee. When the original documents are ambiguous, the appropriate response is to address what to do when consent does not clearly cover the new study rather than simply assuming the broadest possible interpretation.

When a New Analysis Moves Gradually Away From the Original Purpose

Common Mistakes When Interpreting the Scope of Original Consent

Ask Whether Participants Would Recognize the Use They Authorized

A useful starting point is to stop asking how many conceptual steps separate the studies. Instead, reconstruct what participants were told and compare that with what the secondary research will actually do.

This approach is more defensible than searching for a universal definition of “related research.” The appropriate boundary is shaped by what was communicated, what was authorized, and what the new use means for the people whose information makes the research possible.

Before Deciding That a Secondary Purpose Fits the Original Consent

Frequently Asked Questions About Secondary Research and Original Purpose

The Boundary Is What Participants Authorized, Not How Researchers Label the New Study

How to Cite This Guide

This guide is intended to be read, shared, and used in research, teaching, and academic work. If you draw on its ideas, explanations, or other content, please acknowledge the source by citing the guide. Doing so gives appropriate credit and helps your readers locate the original resource.