Short description 

‘A great quote’ (source)

Informed consent (IC) is the process by which a patient voluntarily agrees to a medical procedure, treatment, or participation in research after being fully informed of the relevant details. Collecting data for scientific purposes typically requires participants' IC [De Novo]. To align with the FAIR principles, it is essential that data-sharing practices are explicitly addressed in the informed consent form. Additionally, consent may also be required for activities such as data archiving and linkage to external registries.

Many different forms of IC exist. The image below highlights some variants of informed consent and how they are (generally) related.

Consent Types (3)-20241115-081851.png

This step provides guidance on creating an Informed Consent Form (ICF) and a Subject Information Sheet (SIS) that align with the FAIR principles. It assumes you are aware of whether your study falls under the WMO (Medical Research Involving Human Subjects Act). If you are unsure, visit the CCMO website, consult the ELSI Servicedesk (available in Dutch) or seek assistance from your local experts

To ensure a dataset can be automatically accessed, processed and utilised by machines without significant manual intervention (i.e. machine-actionable data), the IC must also be machine-actionable. This enables automated systems to interpret consent terms, facilitating the ethical and legal sharing of data across systems while safeguarding participant rights [FAIR]. For more information on making the IC machine-actionable, see Step XYZ.

Why is this step important 

The FAIR principles aim to make data useful for immediate research and future purposes, such as replication, validation, and meta-analysis, while safeguarding participants' privacy and rights. Therefore, informed consent must address both current and potential future data use in compliance with GDPR requirements. This step offers guidance on creating an effective informed consent form and subject information sheet to meet these standards.

How to 

IC is an essential component for collecting and reusing data. Research that falls under the WMO must undergo a review by an accredited Medical Research Ethics Committees (MREC) or the Central Committee on Research Involving Human Subjects (CCMO). Non-WMO studies are reviewed by an MREC. Research is not allowed to start without a positive decision of the approriate reviewing committee.

If your study is subject to the WMO go to Step 1 and for a non-WMO study go to Step 2. Step 3 describes additional paragraphs relevant for FAIR, which you could consider for your ICF and SIS. In Step 4, issues you may encounter in specific cases are highlighted, for example, when you’re setting up a cohort study.

Note: while this guidance aims to provide up-to-date and accurate information, you should always check with your local privacy and legal specialists!

Step 1 - Study is subject to WMO

The CCMO has published SIS models for both adults and children and strongly recommends their usage. The models are available in both English and Dutch. The MREC/CCMO reviewing committee only assesses the Dutch SIS and ICF. However, if a participant who is not adequately fluent in Dutch is asked to participate in a study, the information must be provided in a language the participant is proficient in.

Subject Information Sheet

The CCMO’s SIS has the following item relevant for FAIR:

Here, it is crucial that the researcher clearly explains the potential purposes for which collected data or materials may be reused. While these purposes can be broader than the original study's aim, they should not be overly vague. For instance, "cancer research" might be acceptable, but "any research" would not. If stored data/material is used for a different purpose, participants must give permission again or usage is not permitted.

Informed Consent Form

The CCMO’s SIS contains an ICF as an Appendix. The following items are relevant for FAIR:

These can just be reused the way they are provided.

Participants < 16 years old (children)

The CCMO’s SIS model for children does not contain these FAIR items. Hence, to support reuse of this data, add the information from the adult versions to your SIS and ICF before subjecting the documents for review. (?????)

Next

Go to Step 3.

Step 2 - Study is not subject to WMO

First, check with your local MREC which SIS and ICF templates they have available and accept. Verify whether these templates contain FAIR components. The ELSI Servicedesk provides standardised text that can be used in the SIS and ICF (only available in Dutch).

Subject Information Sheet

In English, the SIS needs information concerning the following topics:

SdR: dit is vrij zwak, aangezien het mijn vertalingen zijn. Is het een optie om de inhoud te vertalen naar het Engels en de inhoud of bij ELSI neer te zetten of desnoods hier? Overleggen met Susanne.

Add the applicable sections to your SIS to ensure it allows for FAIR usage of data and materials.

Informed Consent Form

In English, the ICF needs to include the following:

SdR: dit is vrij zwak, aangezien het mijn vertalingen zijn. Is het een optie om de inhoud te vertalen naar het Engels en de inhoud of bij ELSI neer te zetten of desnoods hier? Overleggen met Susanne.

Participants < 16 years old (children)

If the MREC requires you to use a specific SIS/ICF template for children, check whether it contains FAIR components. If not, consider reusing the entries described above.

Next

Go to Step 3.

Step 3 - Additional FAIR consideration

Sources:

3.1 Sharing data with parties outside of the EU

Subject Information Sheet

(Vertaalde versie van standardised text van de ELSI Servicedesk)

<if applicable> If we collaborate with countries outside the European Union

In this study, we send encoded data [and biological material] to countries outside the EU because [explain the reason here]. It is [also] possible that the data will be shared outside the EU for other scientific research.
We only share your data [and biological materials] with researchers outside the EU if they handle your data [and biological materials] as securely as required for researchers within the EU. We also make written agreements with them regarding this.

Informed Consent Form

Amsterdam UMC

Subject Information Sheet

Toestemming voor het delen van gegevens en lichaamsmateriaal met commerciële partijen

In dit onderzoek delen we uw gegevens met [naam bedrijf of bedrijven]. Als u niet wilt dat we uw gegevens delen met commerciële partijen, kunt u dit aangeven op het toestemmingsformulier.

Informed Consent Form

3.2 Sharing data with commercial parties

Subject Information Sheet

(Gebaseerd op de vorige, waarschijnlijk niet goed…………)

In this study, your data [and biological material] may be shared with commercial parties for research purposes, such as [explain the reason here]. It is also possible that the data will be shared with commercial entities for the development of new products or services.

We only share your data [and biological materials] with commercial parties if they handle your data [and biological materials] securely and in accordance with the same standards required for researchers within the EU. We will also make written agreements with them to ensure your privacy and the protection of your data.

Informed Consent Form

Amsterdam UMC

Subject Information Sheet

We sturen uw gegevens naar landen buiten de Europese Economische Ruimte (EER)

In dit onderzoek sturen we uw gecodeerde gegevens en lichaamsmateriaal ook naar landen buiten de Europese Economische Ruimte. In die landen gelden niet dezelfde privacyregels als binnen de EU. Maar wij trachten uw privacy zo goed mogelijk te beschermen met goede contracten. Wij vragen u op het toestemmingsformulier apart toestemming voor het doorsturen van uw gecodeerde gegevens en/of lichaamsmateriaal. Wanneer u besluit ons die toestemming niet te geven, kunt u [niet/toch] meedoen met het onderzoek.

Informed Consent Form

3.3 CBS linkage

Susanne: Please note: The cause of death data must be intended for scientific research in the field of public health and the study must be carried out by a university, university hospital, planning bureau or other institution, as referred to in Art. 41 of the Statistics Netherlands Act.

Amsterdam UMC

Subject Information Sheet

Mogen wij gegevens van u opvragen bij het CBS?

Het Centraal Bureau voor de Statistiek (CBS) is de officiële instantie in Nederland die doodsoorzaken registreert. Mocht u tijdens het onderzoek onverhoopt komen te overlijden dan vragen wij u om toestemming om de gegevens over uw doodsoorzaak bij het CBS op te vragen. Wij vragen uw gegevens alleen op wanneer die gegevens van belang kunnen zijn voor dit onderzoek.

Informed Consent Form

3.4 Generic database linkage

Amsterdam UMC

Subject Information Sheet

Wordt niet genoemd in de PIF…

Informed Consent Form

3.5 Hoe lang bewaren we uw gegevens?

Amsterdam UMC

Subject Information Sheet

We bewaren uw gegevens [xx] jaar [in het ziekenhuis/ huisartsenpraktijk/ onderzoekscentrum]. En [xx] jaar bij [ naam instelling / naam bedrijf].

Uw lichaamsmateriaal bewaren we [in het ziekenhuis/ onderzoekscentrum/ …]. Het wordt [xx] jaar bewaard om het voor dit onderzoek te kunnen gebruiken. Zodra dit niet meer nodig is, vernietigen we uw lichaamsmateriaal.

Informed Consent Form

Next

Go to Step 4.

Step 4 - Special cases

4.1 Cohort studies

If you are setting up an ICF and SIS for a cohort study, keep the following in mind:

Always consult your data protection officer for guidance.

Quint Olislagers 16-12-2024:

Long-term cohort studies often face changing laws and regulations over the course of the study. Informed consent requirements have also changed over the years. The most recent informed consent applies to the participant's data. So it may be that 10 years ago no participant was asked whether their data may be shared outside the EU, but that this was done in a new round this year. With a cohort, however, you always face participants dropping out between measurement rounds. Therefore, it is possible that certain participants participated for the last time 10 years ago and have not participated since then. Therefore the informed consent of 10 years ago remains valid. This can lead to complicated situations within cohorts, for which it is advisable to contact the data protection officer of your institute.

One other common situation is when children in birth cohorts reach adulthood. Before they become adults, their parent or caregivers will have given informed consent for data collections concerning their child. As a adult they might not want their previous collected data to be used.

It is also advisable to think carefully from the beginning of a study about the possible retrieval or linking of data with other institutes in the future. An important point here could be asking permission to request the cause of death from CBS when a participant dies. Updating address information through the BRP can also be very important in cohort studies to ensure that participants are not lost from sight. Informed consent should also be requested for this.

Furthermore, an informed consent or the accompanying information material describes the retention period of the data, often 15 years. It is important that it then says 15 years after the study has ended. Otherwise, there could be situations where a cohort that has had measurement rounds for 20 years has to destroy data from its first measurement rounds. This can also be avoided by saying that instead of doing a specific number of years as the retention period, it will be evaluated every x number of years as to whether the data should still be retained and the participant will be informed of this.

Research involving animals.

Here, informed consent is not applicable in the same way it is for human research. Instead, ethical approval is required to ensure the humane treatment of animals.

Deceased participants.

Informed consent is generally not required for the use of data or biological specimens from deceased individuals, provided that the research adheres to ethical guidelines and legal regulations.

Anonymised data.

If data is anonymised, it is no longer considered personal data under regulations like the GDPR.

Step 4 - Finally

With your SIS and ICF fully FAIR ready and (checked/approved?) by your data protection officer, get it reviewed by the appropriate committee:

Informed Consent Research Roadmap Amsterdam UMC


Opmerking Meriem 24-10-2024: {

 

[Sander / Miriem]

Question: what is specific information that should be in your IC to accomodate for FAIR data and its further usage. IC information concerning secondary use of data / materials, potential data linkage to external registries (e.g. PALGA, IKNL)?  

Step-wise how about something like:  

  1. Check your institute for an IC template 

    1. Miriem: Zou hier niet ook verwezen moeten worden naar de CCMO templates: Subject information, informed consent and informed consent procedure | Onderzoekers | Centrale Commissie Mensgebonden Onderzoek (ccmo.nl)

  2. Check whether it allows for “whatever it is we need for making this data FAIR and its sharing”  

    1. I know there are factors which depend on the study, like e.g. linkage with PALGA, IKNL, etc. 

    2. Does this depend on FAIR Objectives? Does “I want to publish the study in the HRI Catalogue” require something different in an IC than “I want to use a patient’s data for federated querying?” 

      1. Miriem: Meestal moet er voor gezondheidsdata een data sharing agreement opgezet worden. Binnen het informed consent wordt de context van de dataverzameling beschreven en mag data binnen eenzelfde context gedeeld worden (indien er toestemming is gegeven voor data delen). Dit betekent dat er voor iedere data aanvraag gecontroleerd moet worden of de doelen voor het gebruik overeenkomen met de doelen die beschreven staan in het informed consent.

        Het is nog wel een idee om hier iemand met kennis van wetgeving naar te laten kijken.

      2. Sander: The first, I want to publish the study in the HRI Catalogue, doesn’t require anything special in the IC I think? Only when the data owner actually wants to share your data does the IC become relevant? 

        1. Meriem: De metadata over welke gegevens er zijn verzameld mogen vrij gedeeld worden (tenzij dit mogelijk valt onder geheimhouding vanwege mogelijke patenten oid). Maar ook hier zou ik iemand met meer kennis over het opzetten van (DSA) contracten naar laten kijken. Zij kunnen misschien meer toevoegen over de uitzonderingen.

      3. Sander: Is “sharing” by sending someone the data and “sharing via federated querying” different? If federated querying is anonymous by default, since the data never leaves a center, does IC about sharing the data still matter? 

        1. Meriem: Ik weet niet of federated querying by default anoniem is. Volgens mij kan deze data nog steeds gepseudonimiseerd zijn. Daarom moet er nog steeds een goede infrastructuur worden opgezet waarbij de bescherming van persoonsgegevens gewaarborgd kan worden.

      4. Federated querying is a method of querying and accessing distributed datasets without physically centralizing the data. In the healthcare context, federated querying allows researchers, clinicians, or data scientists to access and analyze health data across multiple systems (e.g., hospitals, research institutions) without transferring sensitive patient data to a central location.
        When sharing or accessing health data via federated querying, compliance with the GDPR is crucial, particularly because health data is classified as special category data under Article 9 of the GDPR. Health data includes information such as medical history, diagnosis, treatment, and genetic data. Key GDPR principles relevant to federated querying include: 

        1. Lawfulness, Fairness, and Transparency 

          1. Lawful Basis for Processing: You must have a lawful basis to access or share health data, such as explicit consent from the data subject, or processing for research purposes under Article 9(2)(j). 

          2. Transparency: Data subjects must be informed about how their data is used, even if it’s queried remotely. Transparent data-sharing policies and consent mechanisms are essential. 

        2. Data Minimization and Purpose Limitation 

          1. Minimization: The GDPR requires that only the data necessary for the specific purpose is accessed or processed. In federated querying, this means limiting access to the minimum amount of data required to answer the query. 

          2. Purpose Limitation: Health data accessed through federated queries must only be used for the specific purpose (e.g., research) for which it was originally collected, and not for secondary purposes unless additional consent is obtained or a legal basis exists. 

        3. Data Security and Confidentiality 

          1. Security of Processing: Federated querying must implement robust technical and organizational measures to secure health data. This includes encryption, anonymization, pseudonymization, and access controls to prevent unauthorized access. 

          2. Data Localization: Since data remains on local servers, federated systems reduce the risks associated with transferring health data, but the data controllers (entities holding the data) must ensure secure query execution and auditability. 

        4. Accountability and Governance 

          1. Data Controllers and Processors: Each institution participating in a federated querying system is likely to act as a data controller, responsible for ensuring GDPR compliance. Federated systems often require detailed Data Processing Agreements (DPAs) between the entities to govern how data is accessed and used. 

          2. Data Protection Impact Assessments (DPIAs): If federated querying involves high-risk processing of health data, organizations may need to conduct a DPIA to assess risks and ensure GDPR compliance. 

  3. Make sure the necessary lines are in the IC 

  4. Get the IC approved 

[Meriem]

When sharing or linking health data with external registries (e.g., disease-specific databases, national health registries, or international research databases), the informed consent process must clearly define: 

Step 0 - Determine whether your study is subject to the WMO

Determine whether your study is subject to the Medical Research Involving Human Subjects Act (WMO) or not. The Central Committee on Research Involving Human Subjects (CCMO) executes the WMO and the Embryo’s Act. Research that falls under the WMO or the Embryo’s Act must undergo a review by an accredited Medical Research Ethics Committees (MREC) or the CCMO. Research is not allowed to start without a positive decision of this committee.

Research is subject to the WMO if the following criteria are met:

  1. It concerns medical scientific research and

  2. Participants are subject to procedures or are required to follow rules of behaviour.

To learn more, contact your local experts, see the CCMO website or the ELSI Servicedesk (in Dutch).

Multi-center IC?

FAIRopoly 

The development of this ICF benefited from previous experience with ICF submissions by 4 ERN Registries (ERKReg, EuRRECa, ENROL, VASCA) and from the utilization of “machine-readable” consent-related Ontologies (Data Use Ontology and Informed Consent Ontology). Several iterative expert reviews (including patient organizations and ERN representatives) were conducted to finalize the ICF.

Some potential sources: 

[HANDS] - chapter privacy and autonomy

Consent

Consent aims at informing potential study subjects of all aspects of participation, including the procedures for data handling, data access and anonymity. An informed person can freely decide to participate or not. If someone does participate, he or she understands and accepts the risks and burdens involved in participation.

The Central Committee on Research Involving Human Subjects (CCMO) has produced guidelines for obtaining informed consent and has adapted the nationally mandatory proefpersonen-informatieformulier in light of the GDPR (for WMO research). In addition, the NFU working group ‘Privacy, ethiek & recht in gezondheidsonderzoek’ is currently developing a UMC format for broad consent, which may be applicable to certain non-WMO research. Advice on how to inform donors and patients about the use of their biomaterials and/or data in scientific research can be found at the ELSI servicedesk.

The ethical committee at your UMC can help you design your informed consent procedure. Regarding data management, the informed consent should include the person's wishes about:

Consent should be documented along with the collected data, so subsequent users of the data are aware of the conditions agreed to by study subjects.

In general, it is very difficult to re-contact patients or study subjects to extend or change the consent. So, we advise you to obtain informed consent for storing clinical and personal data for the purpose of both healthcare and future scientific research, each with a separate specific informed consent (also see: care and research environment). In addition, patients should always be able to retract their consent.

Frequently Asked Questions


A general informed consent form may be available, but a local Institutional Ethical Review Board may demand changes after reviewing. It is crucial that essential data sharing aspects are explicitly handled in the informed consent form [De Novo]. The consent information should be made available as metadata. 

IC is also vital for GDPR compliance, as processing personal data (especially sensitive health data) often requires explicit consent from the data subject.  Furthermore, patient consent is necessary for, for example, archiving, sharing [uu_consent] and linkage with external registries.  

A general informed consent form is available on the website of the CCMO, but a local Institutional Ethical Review Board may demand changes after reviewing and assesses whether the IC aligns with ethical standards, legal requirements and takes considerations into account such as age. This is important because: 

[uu_consent] https://www.uu.nl/en/research/research-data-management/guides/informed-consent-for-data-sharing  

SdR: The step is call Obtain informed consent. Can you “obtain” IC with an opt-out model?


Expertise requirements for this step 

This section could describe the expertise required. Perhaps the Build Your Team step could then be an aggregation of all the “Expertise requirements for this step” steps that someone needs to fulfil his/her FAIRification goals.  

Policy maker - Policy makers gather information through consultation and research, and reduce and extract from the information a policy, set of policies or a strategic framework which serve to promote a preferred course of action and could include financial support to research.

ELSI expert - ELSI experts provide guidance and answers to the ethical, legal and social implications of research.

Practical examples from the community 

Examples of how this step is applied in a project (link to demonstrator projects).  

Training

Add links to training resources relevant for this step. Since the training aspect is still under development, currently many steps have “Relevant training will be added in the future if available.”

Suggestions

Visit our How to contribute page for information on how to get in touch if you have any suggestions about this page.