01 · The Question
If Someone Leaves a Study, Can They Also Say “Stop Using My Data”?
A participant withdraws from a research study and then asks a second question: “I don't want you using anything you already collected from me either.”
That request may sound like a natural extension of withdrawal, but research rules do not always treat the two decisions identically. Stopping future participation concerns what researchers may continue to do with or obtain from the participant. A request concerning information already collected raises additional questions about data integrity, privacy authorization, consent promises, completed analyses, and the regulatory framework governing the study.
Participants can sometimes restrict future uses of their data, but they cannot universally require every trace of previously collected information to be removed from every research context.
02 · The Short Answer
Withdrawal From Participation and Withdrawal of Data Permission Are Different
In Brief
Participants may be able to withdraw permission for some future collection or future research uses of their data, but withdrawing from a study does not automatically require researchers to delete or stop analyzing all data already collected.
The answer depends on the governing research and privacy rules, what the participant originally authorized, whether the study is FDA-regulated, whether the data have already been incorporated into research or shared, and what researchers promised about withdrawal in the consent process.
03 · What You Need to Know
There Are Several Different Things a Participant Might Mean by “Stop Using My Data”
First Separate Future Collection From Existing Data
When a participant withdraws from all components of HHS-regulated research, OHRP states that investigators must stop research interactions and interventions and stop obtaining additional identifiable private information about that participant for the study. That includes obtaining additional identifiable information from sources such as medical or educational records.
That is different from information already obtained and recorded before withdrawal. OHRP interprets the HHS regulations as permitting investigators to retain and analyze such previously collected data, including identifiable private information, when the analysis remains within the IRB-approved protocol.
Future data collection
Obtaining additional information from or about the participant after withdrawal.
Previously collected data
Information already obtained and recorded while the participant was enrolled, which may be subject to different retention and use rules.
Withdrawal From the Study Does Not Automatically Delete Existing Data
This distinction can surprise participants if it was not explained clearly during consent. A person may have an unquestioned right to stop further participation while having more limited control over information already incorporated into the research record.
For non-FDA-regulated research covered by OHRP's guidance, investigators may retain and analyze previously collected data within the scope of the IRB-approved protocol. OHRP also states that, where FDA requirements do not apply, investigators can choose to honor a participant's request to destroy or exclude previously collected data. In other words, retention may be permitted without necessarily being mandatory in every HHS-regulated study.
FDA-Regulated Clinical Trials Are More Restrictive About Removing Existing Data
FDA-regulated clinical trials require particular care because FDA policy does not allow withdrawal to extend backward to data already accrued. FDA states that data collected up to the point of withdrawal must remain in the trial database and be included in subsequent analyses as appropriate. The agency explains that complete study data are necessary for an accurate assessment of the investigational product's safety and effectiveness.
A researcher should therefore never promise participants in an FDA-regulated trial that withdrawing will cause all previously collected trial data to disappear.
Participant request
Key distinction
Possible implication
“Stop collecting anything new from me.”
Future research collection
Withdrawal from all relevant components generally stops further participant interaction and additional identifiable data collection under HHS rules.
“Delete everything you already collected.”
Existing research data
May be possible in some non-FDA research, but is not a universal participant entitlement under every framework.
“Do not use my data in any future studies.”
Future secondary research
May restrict future use depending on the consent arrangement, data status, and applicable governance rules.
“Take my data out of the clinical trial database.”
FDA-regulated accrued trial data
FDA policy requires data accrued before withdrawal to remain in the trial database.
“Remove information you already sent to another researcher.”
Previously distributed information
Withdrawal may not require retrieval of information already validly distributed.
Future Secondary Research Can Be Different From Completing Research Already Underway
Suppose a participant agreed to have identifiable data or biospecimens stored for future research and later withdraws that permission. SACHRP states that participants can withdraw specimens from future research and should be told in advance how withdrawal from a repository works. However, this obligation does not generally extend to retrieving specimens already distributed to secondary researchers, and completed analyses ordinarily will not be destroyed or removed from datasets.
SACHRP's recommendations concerning broad consent similarly distinguish future research from studies already underway. They recommend that after withdrawal of broad consent, no further collection and storage occur and existing identifiable information or biospecimens not be used for new research purposes, while recognizing that research already commenced and research-integrity requirements may limit what can be undone.
This is closely related to whether new uses of participant data require additional consent . Permission for future research should not be treated as infinitely expandable.
What the Consent Form Promised Matters
Regulatory permission to retain data does not mean researchers may ignore explicit commitments made during consent. If researchers promised that withdrawal would stop specified future uses or result in particular handling of identifiable data or specimens, those representations can constrain what researchers should subsequently do.
SACHRP specifically emphasizes that the consequences of withdrawing broad consent should be described carefully and that representations made to participants should be honored.
Researchers should therefore retrieve the actual consent version used with the participant before answering a data-withdrawal request. “Our usual policy” is a poor substitute for reading what this participant was actually told.
Privacy Authorization May Create Another Layer
Where the U.S. HIPAA Privacy Rule applies, an individual generally may revoke an authorization for use and disclosure of protected health information in writing, subject to an important limitation: revocation does not undo actions already taken in reliance on the authorization.
OHRP explains that research entities may continue certain uses or disclosures of protected health information already obtained when necessary to preserve research integrity. For FDA-regulated research, retention and analysis of already collected data are considered necessary to protect trial integrity.
This illustrates why withdrawal of research consent, revocation of privacy authorization, and deletion of research data should not be treated as interchangeable actions.
Data Already Distributed May Be Impossible or Unnecessary to Recall
Research data can move beyond the original study team. They may have been transferred to an approved repository, provided to another research group, included in an analysis dataset, or used to generate derived results.
SACHRP notes that withdrawal obligations do not generally require retrieving specimens already distributed to secondary users. The same practical issue can arise with information already disclosed under valid authorization.
This limitation should be communicated before participants agree to future storage and sharing whenever it is relevant.
De-Identification Is Not a Clever Way Around a Withdrawal Promise
One tempting response is to remove identifiers immediately after withdrawal and then continue using the data on the theory that they are no longer identifiable. SACHRP has cautioned against using de-identification merely to circumvent withdrawal from broad consent. It recommends that if researchers intend to de-identify withdrawn data or specimens and continue using them, that possibility should have been disclosed in the original consent, while also recognizing ethical concerns with such a practice.
The larger lesson is straightforward: technical transformation of data should not be used to defeat a participant-facing promise.
Watch Out
Do not promise “you can withdraw your data at any time” unless you can explain exactly what that means. Once data have been incorporated into an FDA-regulated trial database, distributed to other researchers, anonymized under an approved process, or used in completed analyses, some forms of withdrawal may no longer be possible.
04 · A Practical Example
When a Participant Wants Both to Leave and Remove Their Data
Hypothetical Example
“I Don't Want You Using Anything From Me Anymore”
Imagine a participant in a non-FDA-regulated longitudinal study who withdraws after completing three of six assessments. They also ask the research team to delete everything collected during the first three assessments.
Stop future participation
The research team stops the future research interactions and identifiable data collection covered by the participant's withdrawal.
Separate the data request
The team does not assume that withdrawal automatically deletes the first three assessments. It identifies the request concerning previously collected data separately.
Check the governing framework
The team reviews the consent, approved protocol, IRB requirements, privacy obligations, funding conditions, and data status.
Determine what can be honored
Because the study is not FDA-regulated, the investigators may be able to honor the deletion or exclusion request if doing so is consistent with the applicable approvals and obligations.
Explain the outcome accurately
The participant is told what will stop, what can be removed, and whether anything must or will remain rather than being given a blanket promise that “everything is deleted.”
The participant's withdrawal is respected immediately for future participation, while the request concerning existing data receives the separate analysis it requires.
06 · What This Means for You
Translate the Participant's Request Into Specific Data Actions
When someone says “withdraw my data,” do not guess what they mean. Determine whether they are asking you to stop new collection, stop future secondary research, delete identifiable records, exclude existing observations from analysis, retrieve shared material, or some combination of these.
A simple decision framework
If the request concerns future identifiable data collection
Stop collection as required by the participant's withdrawal and the applicable framework.
If the request concerns existing data in non-FDA-regulated research
Review the protocol, consent promises, IRB requirements, privacy obligations, and whether deletion or exclusion can and should be honored.
If the data are part of an FDA-regulated clinical trial
Do not remove already-accrued trial data contrary to FDA data-retention requirements.
If the request concerns future secondary research
Determine what the participant's original authorization, withdrawal terms, and applicable data-governance framework permit.
If the information has already been distributed or incorporated into completed work
Explain the practical and regulatory limits accurately rather than promising retrieval or deletion that cannot be achieved.
The next practical question is therefore what should happen to the participant's data after withdrawal . The answer requires tracking the data's status, not merely the participant's enrollment status.
07 · A Quick Checklist
When a Participant Asks You to Stop Using Their Data
Before responding to the request, check:
Clarify whether the participant wants to stop future collection, future secondary use, use of existing data, or all of these.
Retrieve the actual consent and privacy authorization that applied to this participant.
Determine whether the research is FDA-regulated or subject to another framework requiring retention of existing data.
Identify whether the relevant data remain identifiable, have been de-identified or anonymized, or have already been distributed.
Determine whether the data have already entered an analysis, dataset, report, or completed research product.
Check what the approved protocol and consent materials promised about data handling after withdrawal.
Consult the responsible IRB, ethics committee, privacy office, sponsor, or data-governance authority when the permitted response is uncertain.
Tell the participant precisely what can stop, what can be removed, and what must or will remain.
09 · The Bottom Line
Stopping Participation Does Not Automatically Erase the Research Record
The Bottom Line
Participants may be able to withdraw permission for future collection or future uses of their data, but leaving a study does not universally give them the right to erase all information already collected.
Separate future collection from existing data, and then determine what the applicable research, privacy, regulatory, consent, and data-governance framework requires. Pay particular attention to FDA-regulated trial data, previously distributed information, completed analyses, and promises made during the original consent process.
11 · Cite this Guide
How to Cite This Guide
This guide is intended to be read, shared, and used in research, teaching, and academic work. If you draw on its ideas, explanations, or other content, please acknowledge the source by citing the guide. Doing so gives appropriate credit and helps your readers locate the original resource.
Recommended (Field Guide)
APA
MLA
Chicago
Copy Citation
