dynamic consent dynamic consent dynamic consent is an approach to informed consent that enables on-going engagement and communication between individuals and the users and custodians of their data. it is designed to address the many issues that are raised by the use of digital technologies in research and clinical care that enable the wide-scale use, linkage, analysis and integration of diverse datasets and the use of ai and big data analyses. these issues include how to obtain informed consent in a rapidly-changing environment; growing expectations that people should know how their data is being used; increased legal and regulatory requirements for the management of secondary use of data in biobanks and other medical research infrastructure. the concept has been developed in 2007 by an italian group who introduced the concept of an ongoing process between researcher and participant where "technology now allows the establishment of dynamic participant–researcher partnerships." dynamic consent therefore describes a personalised, digital interface that enables two-way communication between participants and researchers and is a practical example of how software can be developed to give research participants greater understanding and control over how their data is used. it also enables clinical trial managers, researchers and clinicians to know what type of consent is attached to the use of data they hold and to have an easy way to seek a new consent if the use of the data changes. it is able to support greater accountability and transparency, streamlining consent processes to enable compliance with regulatory requirements. background researchers are required to obtain informed consent from potential participants before any research begins – this is a fundamental principle of medical research as laid out in the declaration of helsinki. traditionally this has been done through a paper consent form which is accompanied by a subject information sheet that describes the risks and benefits of being involved in the research. increasingly, this also outlines how an individual's data will be protected and their privacy maintained. this constitutes a formal agreement that specifies how a research participant’s data will be used in that particular study. participants should be informed about the purpose(s) for which their data will (or may) be used; where it will be stored; the expected retention time; if any other parties are involved; the amount and the sensitivity of the information exchanged; whether the data will be shared onward to yet other parties; whether the consent to use these data can be revoked. consent to data processing is also a requirement of data protection and privacy laws in most countries. traditionally, participants have obtained details of how their data will be used from patient information sheets and face-to-face interactions with researchers or healthcare staff. however, now both medical research and data processing are changing through developments in information communication technology, especially the internet with examples including genetic databases and registries, electronic health records, biobanks, and online digital services and databases. more and more data is being collected online and being stored in large data sets with the intention for them to be used by many researchers, research groups and institutions for a variety of purposes. these include different research projects, as well as public health assessments, marketing, and the design of algorithms and data mining. the collection and use of data in this way raises some challenges. firstly with regard to privacy: can participants' data and identity truly be anonymised and sensitive data be kept safe and confidential? individuals, in general, are not aware of how their personal information is used, for what purpose and which parties have a copy. they are not usually given the opportunity to declare their specific consents and privacy-related personal data management preferences. secondly, with regard to consent: informed consent requires a person to know in advance what they are agreeing to and what the likely risks and benefits of agreeing will be. but with these large, linked data sets, it is often not clear at the time someone is asked to consent how their data will be used in the future. this is known as a broad consent or a blanket consent. blanket consent means that a person effectively agrees to permit any and all uses of their data once it is provided. broad consent is more common and involves agreeing to a broad set of potential future uses under a particular governance framework. broad consent has become the standard practice in many genetic registries and biobanks. its legal and ethical adequacy has been questioned. in addition, consent is still frequently done as a one-off procedure with a paper form for participants to sign. these forms are often lost or filed away, and over time people forget what they have consented to and why. operation dynamic consent is a personalised digital interface to facilitate participant engagement in clinical and research activities over time. it seeks to address some of the issues raised by the traditional, paper-based, static consent approach, where consent must be obtained for all future activities in a face to face interview. dynamic consent operates through a secure it interface for consent and communication that enables participants to view a digital record of their consent decisions, subsequent to their initial agreement. some versions of dynamic consent also have the functionality for people to personalise according to their preferences, which can be changed at any time. further, dynamic consent aims to put people in control of their data and how it is used, reflecting patient-centric initiatives happening elsewhere in medical research. through the tool, participants can consent to new projects or change their consent choices; they can complete surveys and receive information about research findings. preferences are linked with a participant's samples and data and so if these are shared, so too are the individual's preferences. it enables people to give a range of different kinds of consent, for example, a broad consent to low-risk epidemiological research or an explicit consent to a new, high-risk proposal. this flexibility is enabled by the digital interface where preferences can be changed in line with new situations. dynamic consent may facilitate recruitment in research, as information is provided to potential participants in a user-friendly and standardised way across research sites and irrespective of the participants' geographical location. dynamic consent enables two-way, ongoing communication between researchers and research participants. for instance, research participants are able to upload additional health data, or researchers may inform participants about new research opportunities or findings. such ongoing interface may increase the participants' understanding of research and positively impact retention rates. dynamic consent may be useful in supporting indigenous data sovereignty and supporting culturally-acceptable data governance in health research involving indigenous people and communities. what makes dynamic consent dynamic? this digital interface is dynamic because individuals can: give different kinds of consents (e.g. broad, explicit, specific) to different activities change their consent preferences to the use of their samples and information in real time in response to their changing circumstances enrol in new studies or engage in self-reported research receive up to date information on how their samples and data are being used and on the progress and outcomes of research tailor the way they receive information, change these preferences over time and have a record of all transactions in one place be contacted easily by researchers when there is a protocol change, their opinion is needed or a new consent is required. examples of dynamic consent first genetic trust in 2001 first genetic trust (fgt) put forward the idea that they act as a 'broker' of genetic information. they would be a third party between people taking part in research that involved their genetic data and those carrying out the research. fgt recommended a method that would protect 'the confidentiality of individual medical and genetic information, allowing access to select information and the use or application of an individual's dna only when the patient has given specific consent.' this system has characteristics of dynamic consent before the term was coined. encore the encore project – ensuring consent and revocation – began in 2008 and ran until 2012. it was funded by the engineering and physical sciences research council (epsrc), the economic and social research council (esrc) and the uk government's technology strategy board. institutional partners for the project were hewlett-packard (and specifically the hewlett-packard systems security lab in bristol), the warwick manufacturing group at the university of warwick, qinetiq, hw communications, helex from the university of oxford and the london school of economics. the project's aim was to give individuals more control over any personal data they disclose to organisations, with an overall vision to make giving and revoking consent as reliable and easy as turning a tap on and off. this was an attempt to tackle the lack of any legal requirement for organisations to obtain consent before using personal data about individuals. encore aimed to enable people to determine what their information is used for, who it is shared with and for how long and where it is stored. three case studies were carried out as part of the encore project, each with different requirements for consent and revocation. a technical architecture was produced for each scenario, setting out all the functions needed for the management (including capture and revocation) and enforcement of individuals' consents. the three reports are publicly available online. it was in the encore project that the term 'dynamic consent' was coined by professor jane kaye's team at the university of oxford and become one of the outputs of the encore project. it is now used to describe this new way of obtaining consent. inbank over time, the focus of dynamic consent has shifted from simply enabling participants to change their consent preferences to incorporating it as part of a larger apparatus that facilitates communication between participants and researchers or health professionals. the inbank team at the university of manchester looked at dynamic consent as a way of collecting and sharing electronic health records. the work was uk-focused, considering dynamic consent in the context of the nhs and positioning it as a device to increase or restore public trust. the public scandal over the care.data initiative was positioned as evidence of a deficit in trust, and equally that it showed a lack of transparent and accountable governance of people's personal medical records in the uk. rudy rudy is a study of rare diseases led by researchers at the university of oxford. rudy is an internet-based platform that enables registration and capture of patient reported outcome measures (proms) and events to be done online within a dynamic consent framework. chris the chris (cooperative health research in south tyrol) study is a prospective epidemiological study investigating chronic conditions, particularly cardiovascular, metabolic, neurological and psychiatric diseases and was the first study to implement dynamic consent in biobanking. it describes itself as 'a true partnership between the people participating, the staff working in the healthcare system and the research personnel'. the study is designed to be longitudinal so a dynamic consent process was set up which enables participants to receive ongoing information about the project as well as an interactive consent webpage with dynamic options. peer in the us, the platform for engaging everyone responsibly (peer) has been set up by non-profit health advocacy organisation genetic alliance and software company private access. not only can participants choose to consent to only some aspects of research and not to others, but they can also specify preferences for types of data access by third parties and consent to other activities that are offered, such as the use of their biological samples after death. ctrl in australia, the australian genomic health alliance (australian genomics) has developed and is trialling a dynamic consent platform called 'ctrl' for people participating in genomic research. challenges to dynamic consent some empirical studies that were carried out before dynamic consent was developed concluded that it is unnecessary, that people are happy to give broad or 'one-off' consent for some kinds of research. for example, a face-to face interview study of 1001 scottish adults as part of the prospective scottish family health study genetic database carried out in 2009 found that respondents preferred 'scenarios where consent is only asked for at the start of the study' over options to renew consent every 5 or 10 years. similarly, a survey of us adults published in