Facilitating the ethical use of health data for the benefit of society: electronic health records, consent and the duty of easy rescue

Abstract

Advances in data science allow for sophisticated analysis of increasingly large datasets. In the medical context, large volumes of data collected for healthcare purposes are contained in electronic health records (EHRs). The real-life character and sheer amount of data contained in them make EHRs an attractive resource for public health and biomedical research. However, medical records contain sensitive information that could be misused by third parties. Medical confidentiality and respect for patients' privacy and autonomy protect patient data, barring access to health records unless consent is given by the data subject. This creates a situation in which much of the beneficial records-based research is prevented from being used or is seriously undermined, because the refusal of consent by some patients introduces a systematic deviation, known as selection bias, from a representative sample of the general population, thus distorting research findings. Although research exemptions for the requirement of informed consent exist, they are rarely used in practice due to concerns over liability and a general culture of caution. In this paper, we argue that the problem of research access to sensitive data can be understood as a tension between the medical duties of confidentiality and beneficence. We attempt to show that the requirement of informed consent is not appropriate for all kinds of records-based research by distinguishing studies involving minimal risk from those that feature moderate or greater risks. We argue that the duty of easy rescue-the principle that persons should benefit others when this can be done at no or minimal risk to themselves-grounds the removal of consent requirements for minimally risky records-based research. Drawing on this discussion, we propose a risk-adapted framework for the facilitation of ethical uses of health data for the benefit of society.This article is part of the themed issue 'The ethical impact of data science'.

Keywords: duty of easy rescue; electronic health records; informed consent; privacy; research ethics; selection bias.

Figure 1.

The proposed framework for ethical facilitation of EHR research. The flow chart in the middle and to the right of the figure represents key questions of beneficence and privacy protection. The boxes and arrows on the left indicate which oversight body is responsible for answering them. The overlap of oversight in the middle of the diagram indicates the possibility of appealing local review decisions to the proposed research authority.