Informed consent bears significant relevance as a legal basis for the processing of personal data and health data in the current privacy, data protection and confidentiality legislations. The consent requirements find their basis in an ideal of personal autonomy. Yet, with the recent advent of the global pandemic and the increased use of eHealth applications in its wake, a more differentiated perspective with regards to this normative approach might soon gain momentum. This paper discusses the compatibility of a moral duty (...) to share data for the sake of the improvement of healthcare, research, and public health with autonomy in the field of data protection, privacy and medical confidentiality. It explores several ethical-theoretical justifications for a duty of data sharing, and then reflects on how existing privacy, data protection, and confidentiality legislations could obstruct such a duty. Consent, as currently defined in the General Data Protection Regulation – a key legislative framework providing rules on the processing of personal data and data concerning health – and in the recommendation of the Council of Europe on the protection of health-related data – explored here as soft-law – turns out not to be indispensable from various ethical perspectives, while the requirement of consent in the General Data Protection Regulation and the recommendation nonetheless curtails the full potential of a duty to share medical data. Also other legal grounds as possible alternatives for consent seem to constitute an impediment. (shrink)

Increasing adoption of electronic health records in hospitals provides new opportunities for patient data to support public health advances. Such learning healthcare models have generated ethical debate in high-income countries, including on the role of patient and public consent and engagement. Increasing use of electronic health records in low-middle income countries offers important potential to fast-track healthcare improvements in these settings, where a disproportionate burden of global morbidity occurs. Core ethical issues have been raised around the role and form of (...) information sharing processes for learning healthcare systems, including individual consent and individual and public general notification processes, but little research has focused on this perspective in low-middle income countries. We conducted a qualitative study on the role of information sharing and governance processes for inpatient data re-use, using in-depth interviews with 34 health stakeholders at two public hospitals on the Kenyan coast, including health managers, providers and researchers. Data were collected between March and July 2016 and analysed using a framework approach, with Nvivo 10 software to support data management. Most forms of clinical data re-use were seen as an important public health good. Individual consent and general notification processes were often argued as important, but contingent on interrelated influences of the type of data, use and secondary user. Underlying concerns were linked to issues of patient privacy and autonomy; perceived risks to trust in health systems; and fairness in how data would be used, particularly for non-public sector re-users. Support for engagement often turned on the anticipated outcomes of information-sharing processes, as building or undermining trust in healthcare systems. As reported in high income countries, learning healthcare systems in low-middle counties may generate a core ethical tension between supporting a public good and respecting patient autonomy and privacy, with the maintenance of public trust acting as a core requirement. While more evidence is needed on patient and public perspectives on learning healthcare activities, greater collaboration between public health and research governance systems is likely to support the development of efficient and locally responsive learning healthcare activities in LMICs. (shrink)

This article argues that personal medical data should be made available for scientific research, by enabling and encouraging individuals to donate their medical records once deceased, similar to the way in which they can already donate organs or bodies. This research is part of a project on posthumous medical data donation developed by the Digital Ethics Lab at the Oxford Internet Institute at the University of Oxford. Ten arguments are provided to support the need to foster posthumous medical data donation. (...) Two major risks are also identified—harm to others, and lack of control over the use of data—which could follow from unregulated donation of medical data. The argument that record-based medical research should proceed without the need to secure informed consent is rejected, and instead a voluntary and participatory approach to using personal medical data should be followed. The analysis concludes by stressing the need to develop an ethical code for data donation to minimise the risks, and offers five foundational principles for ethical medical data donation suggested as a draft code. (shrink)

The concept of ‘ownership’ is increasingly central to debates, in the media, health policy and bioethics, about the appropriate management of clinical data. I argue that the language of ownership acts as a metaphor and reflects multiple concerns about current data use and the disenfranchisement of citizens and collectives in the existing data ecosystem. But exactly which core interests and concerns ownership claims allude to remains opaque. Too often, we jump straight from ‘ownership’ to ‘private property’ and conclude ‘the data (...) belongs to the patient’. I will argue here that private property is only one type of relevant relationship between people, communities and data. There are several reasons to doubt that conceptualising data as private property presents a compelling response to concerns about clinical data ownership. In particular I argue that clinical data are co-constructed, so a property account would fail to confer exclusive rights to the patient. A non-property account of ownership acknowledges that the data are ‘about the patient’, and therefore the patient has relevant interests, without jumping to the conclusion that the data ‘belongs to the patient’. On this broader account of ownership, the relevant harm is the severing of the connection between the patient and their data, and the solution is to re-engage and re-connect patients to the data research enterprise. (shrink)