Consent, Disclosure, and Non-Disclosure
Section 3
Waivers and Alterations
Pragmatic research is often deemed to be minimal risk, and for no more than minimal risk research, IRBs can approve a waiver or an alteration of consent if other criteria (listed below) are met. Although the criteria are the same for both, a waiver and alteration are in fact quite different. A waiver means no consent is required. An alteration is consent in which some of the elements of full regulatory consent (described previously in this chapter) are altered. We describe alteration of consent in more detail later in this chapter.
Both HIPAA and the Common Rule allow an Institutional Review Board (or a Privacy Board, in the case of HIPAA) to approve a consent procedure that does not include or alters some or all of the basic elements of informed consent, or it may waive the requirement to obtain informed consent altogether. The IRB or Privacy Board must find and document the conditions shown in the table below.
Table. Under the Common Rule and HIPAA, consent or authorization can be waived or altered if the following conditions are met:
| Common Rule (45 CFR 46.116)(Code of Federal Regulations | HHS.gov) | HIPAA(104th Congress) 45 CFR 164.512(i) |
|---|---|
| The research involves no more than minimal risk to the subjects. | The use or disclosure of PHI involves no more than a minimal risk to the privacy of individuals (i.e., there is an adequate plan to protect identifiers, a plan to destroy the identifiers at earliest opportunity, and there are adequate assurances of no reuse or re-disclosure). |
| The research could not practicably be carried out without the waiver or alteration (described in more detail below); | The research could not practicably be conducted without the waiver or alteration; and |
| If the research involves using identifiable private information or identifiable biospecimens, the research could not practicably be carried out without using such information or biospecimens in an identifiable format | The research could not practicably be conducted without access to and use of the protected health information. |
| The waiver or alteration will not adversely affect the rights and welfare of the subjects | |
| Whenever appropriate, the subjects will be provided with additional pertinent information after participation |
From (McGraw et al 2015).
Minimal Risk Research
A study’s IRB makes the determination as to whether the research is minimal risk. The Common Rule defines minimal risk research as follows:
“Minimal risk means that the probability and magnitude of harm or discomfort anticipated in the research are not greater in and of themselves than those ordinarily encountered in daily life or during the performance of routine physical or psychological examinations or tests.” §46.102
Note that this definition of minimal risk only applies to the additional risk of the research, as opposed to the underlying risk of the clinical disease or disorder. For example, consider a study that requires values from a cardiac catheterization. If the cardiac catheterization was performed solely for the research (additional risk), the research would be greater than minimal risk, but if the catheterization was done as a part of routine care, the research could be considered minimal risk because using the data for research does not add any additional or very little risk. In some research, the additional risks are largely informational—the risk of harm is not physical at all—but comes from the potential for inappropriate disclosure of private information.
In 1998, the Office for Human Research Protections (OHRP) generated a list of categories of research that may be reviewed through an expedited review procedure – a review process that can only be applied to minimal risk research. The list provides useful examples of minimal risk research.
In pragmatic trials that compare different types of usual care, additional risk may be limited to informational risk. But in pragmatic studies that compare usual care to usual care with an additional procedure (A versus A+), there may be additional risks to consider.
Practicability
The Secretary’s Advisory Committee on Human Research Protections (SACHRP) drafted a letter that can be used as guidance to aid IRBs in determining whether the research itself could not practicably be carried out without a waiver or alteration of consent (OHRP 2008). The key considerations include:
- Whether the scientific validity would be compromised if consent was required. For example, if the sample size required is extremely large or if the subjects to be included are no longer followed or may be lost to follow-up.
- Whether consent raises ethical concerns, such as creating additional threats to privacy or a threat of psychological, social, or other harm by contacting individuals or families.
Note that SACHRP states that there must be “a scientifically and ethically justifiable rationale why the research could not be conducted with a population from whom consent can be obtained” and the “practicability should not be determined solely by considerations of convenience, cost, or speed.” (OHRP 2008)
Case Example for Waiver of Consent: Lumbar Imaging with Reporting of Epidemiology (LIRE)
Lumbar Imaging with Reporting of Epidemiology (LIRE), an NIH Collaboratory Trial, was designed to test whether inserting epidemiological evidence (essentially representing the prevalence data for common imaging findings in individuals without back pain) in lumbar spine imaging reports will reduce subsequent diagnostic and therapeutic interventions, including cross-sectional imaging (MR/CT), opioid prescriptions, spinal injections, and surgery (Jarvik et al 2020, Jarvik et al 2015). As part of their justification for a waiver of patient consent (Ethics and Regulatory Documentation), the investigators cited that the project was minimal risk and would not adversely affect the rights and welfare of the subjects, and that the research could not practicably be carried out without a waiver (because there was a large study population of ~250,000 and there was no easily implementable means of obtaining consent as neither the researchers nor the radiologists who read the images had contact with the patients).
Furthermore, the investigators explain:
“By informing primary care providers and patients of the study, we risk invalidating the results. If providers and patients are aware of the intervention but are allocated to the control group, they may nevertheless change their behavior.
The risk of contacting subjects is greater than the risk of the study procedures. The risk for breach of patient confidentiality increases when subject contact information is maintained for the purposes of contacting patients for their consent. It is our opinion that this increased risk far exceeds the risk to subjects associated with the insertion of epidemiologic data into the radiology report interpreted by their provider.”
SECTIONS
Resources
Considerations in the evaluation and determination of minimal risk in pragmatic clinical trials For PCTs, minimal risk determinations have been variable and confusing. In this article, the authors examine factors involved in the determination of minimal risk for PCTs and advocate for an assessment based on incremental risk. The implications for informed consent are also explored.
Practical steps to identifying the research risk of pragmatic trials
This article provides a four-step process of risk determination in pragmatic randomized clinical trials.
NIH Pragmatic Trials Collaboratory Ethics and Regulatory Documentation
This page contains links to minutes summarizing discussions about NIH Collaboratory Trials from regulatory and ethical perspectives, including the topics of minimal risk and consent approaches.
REFERENCES
104th Congress. Health Insurance Portability and Accountability Act of 1996. https://www.govinfo.gov/app/details/PLAW-104publ191#:~:text=An%20act%20to%20amend%20the,access%20to%20long%2Dterm%20care Accessed Feb 6, 2025
Code of Federal Regulations | HHS.gov. http://www.hhs.gov/ohrp/humansubjects/guidance/45cfr46.html. Accessed Feb 6, 2025
DeBar L, Mayhew M, Benes L, et al. 2022. A primary care–based cognitive behavioral therapy intervention for long-term opioid users with chronic pain: a randomized pragmatic trial. Ann Intern Med. 175:46-55. doi:10.7326/M21-1436. PMID: 34724405
Debar LL, Kindler L, Keefe FJ, et al. 2012. A primary care-based interdisciplinary team approach to the treatment of chronic pain utilizing a pragmatic clinical trials framework. Transl Behav Med. 2:523-530. doi:10.1007/s13142-012-0163-2. PMID: 23440672
Jarvik JG, Comstock BA, James KT, et al. 2015. Lumbar imaging with reporting of epidemiology (LIRE): protocol for a pragmatic cluster randomized trial. Contemp Clin Trials. doi:10.1016/j.cct.2015.10.003. PMID: 26493088
McGraw D, Greene SM, Miner CS, Staman KL, Welch MJ, Rubel A. 2015. Privacy and confidentiality in pragmatic clinical trials. Clinical Trials. 12:520–529. doi:10.1177/1740774515597677.
Office for Human Research Protections (OHRP). 2008. January 31, 2008, SACHRP letter to HHS Secretary: Recommendations related to waiver of informed consent and interpretation of “minimal risk.” https://www.hhs.gov/ohrp/sachrp-committee/recommendations/2008-january-31-letter/index.html. Accessed January, 2025.