The Genetic Discrimination Observatory: confronting novel issues in genetic discrimination.

Genetic discrimination (GD) is the differential or unfair profiling of an individual on the basis of genetic data. This article summarizes the actions of the Genetic Discrimination Observatory (GDO) in addressing GD and recent developments in GD since late 2020. It shows how GD can take many forms in today's rapidly evolving society.

A qualitative interview study to determine barriers and facilitators of implementing automated decision support tools for genomic data access.

Data access committees (DAC) gatekeep access to secured genomic and related health datasets yet are challenged to keep pace with the rising volume and complexity of data generation. Automated decision support (ADS) systems have been shown to support consistency, compliance, and coordination of data access review decisions. However, we lack understanding of how DAC members perceive the value add of ADS, if any, on the quality and effectiveness of their reviews. In this qualitative study, we report findings from 13 semi-structured interviews with DAC members from around the world to identify relevant barriers and facilitators to implementing ADS for genomic data access management. Participants generally supported pilot studies that test ADS performance, for example in cataloging data types, verifying user credentials and tagging datasets for use terms. Concerns related to over-automation, lack of human oversight, low prioritization, and misalignment with institutional missions tempered enthusiasm for ADS among the DAC members we engaged. Tensions for change in institutional settings within which DACs operated was a powerful motivator for why DAC members considered the implementation of ADS into their access workflows, as well as perceptions of the relative advantage of ADS over the status quo. Future research is needed to build the evidence base around the comparative effectiveness and decisional outcomes of institutions that do/not use ADS into their workflows.

"Data makes the story come to life:" understanding the ethical and legal implications of Big Data research involving ethnic minority healthcare workers in the United Kingdom-a qualitative study.

The aim of UK-REACH ("The United Kingdom Research study into Ethnicity And COVID-19 outcomes in Healthcare workers") is to understand if, how, and why healthcare workers (HCWs) in the United Kingdom (UK) from ethnic minority groups are at increased risk of poor outcomes from COVID-19. In this article, we present findings from the ethical and legal stream of the study, which undertook qualitative research seeking to understand and address legal, ethical, and social acceptability issues around data protection, privacy, and information governance associated with the linkage of HCWs' registration data and healthcare data. We interviewed 22 key opinion leaders in healthcare and health research from across the UK in two-to-one semi-structured interviews. Transcripts were coded using qualitative thematic analysis. Participants told us that a significant aspect of Big Data research in public health is varying drivers of mistrust-of the research itself, research staff and funders, and broader concerns of mistrust within participant communities, particularly in the context of COVID-19 and those situated in more marginalised community settings. However, despite the challenges, participants also identified ways in which legally compliant and ethically informed approaches to research can be crafted to mitigate or overcome mistrust and establish greater confidence in Big Data public health research. Overall, our research indicates that a "Big Data Ethics by Design" approach to research in this area can help assure (1) that meaningful community and participant engagement is taking place and that extant challenges are addressed, and (2) that any new challenges or hitherto unknown unknowns can be rapidly and properly considered to ensure potential (but material) harms are identified and minimised where necessary. Our findings indicate such an approach, in turn, will help drive better scientific breakthroughs that translate into medical innovations and effective public health interventions, which benefit the publics studied, including those who are often marginalised in research.

Ethics review of big data research: What should stay and what should be reformed?

BACKGROUND: Ethics review is the process of assessing the ethics of research involving humans. The Ethics Review Committee (ERC) is the key oversight mechanism designated to ensure ethics review. Whether or not this governance mechanism is still fit for purpose in the data-driven research context remains a debated issue among research ethics experts. MAIN TEXT: In this article, we seek to address this issue in a twofold manner. First, we review the strengths and weaknesses of ERCs in ensuring ethical oversight. Second, we map these strengths and weaknesses onto specific challenges raised by big data research. We distinguish two categories of potential weakness. The first category concerns persistent weaknesses, i.e., those which are not specific to big data research, but may be exacerbated by it. The second category concerns novel weaknesses, i.e., those which are created by and inherent to big data projects. Within this second category, we further distinguish between purview weaknesses related to the ERC's scope (e.g., how big data projects may evade ERC review) and functional weaknesses, related to the ERC's way of operating. Based on this analysis, we propose reforms aimed at improving the oversight capacity of ERCs in the era of big data science. CONCLUSIONS: We believe the oversight mechanism could benefit from these reforms because they will help to overcome data-intensive research challenges and consequently benefit research at large.

Signalling Standards for Progress: Bridging the Divide Between a Valid Consent to Use Patient Data Under Data Protection Law and the Common Law Duty of Confidentiality.

In this article, we analyse the legal components of disclosing confidential patient information under the UK's common law duty of confidentiality (CLDoC) and processing personal (health) data under the UK's General Data Protection Regulation (GDPR) and Data Protection Act 2018. We describe the ostensible divide between the CLDoC and data protection law when it comes to the requirements of a valid signal of consent by a patient to use and disclose patient information, obtained by a health professional in the context of direct care, for health care and health research purposes. Ultimately, our analysis suggests that we are saddled, at least in the medium term, with two regimes operating with different standards of a valid consent-while putatively protecting similar interests. There is, however, opportunity for progress. It is possible to improve professional guidance on the interaction between the regimes and to achieve significant normative alignment without aligning the signalling standard for consent; this would promote consistent protection of reasonable expectations of patients across both regimes. Further coherence would require aligning not only the standard, but also the role played by consent under each regime. Here we argue that, in relation to direct care, any such shift should be away from consent as the normal justification. In relation to health research, on the contrary, it should be toward consent as the normal justification for use and disclosure of patient information under both the CLDoC and data protection law.

Co-production and Managing Uncertainty in Health Research Regulation: A Delphi Study.

European and international regulation of human health research is typified by a morass of interconnecting laws, diverse and divergent ethical frameworks, and national and transnational standards. There is also a tendency for legislators to regulate in silos-that is, in discrete fields of scientific activity without due regard to the need to make new knowledge as generalisable as possible. There are myriad challenges for the stakeholders-researchers and regulators alike-who attempt to navigate these landscapes. This Delphi study was undertaken in order to provide the first interdisciplinary and crosscutting analysis of health research regulation, as it is experienced by such stakeholders in the UK context. As well as reinforcing existing understandings of the regulatory environment, Delphi participants called for greater collaboration, and even co-production, of processes involved in health research regulation. On the basis of this research, we offer insights about how health research regulation can become a matter with which a wider range of stakeholders-including researchers, regulators, publics and research sponsors-can engage. The evidence supports the normative claim that health research regulation should continue to move away from strict, prescriptive rules-based approaches, and towards flexible principle-based regimes that allow researchers, regulators and publics to co-produce regulatory systems serving core principles. By unpacking thorny concepts and practices at the heart of health research regulation-including the public interest and public engagement-our results have the potential to situate and breathe life into them. The results also demonstrate that while proportionality is well-recognised as a crucial element of flexible regulatory systems, more must be done to operationalise this as an ethical assessment of the values and risks at stake at multiple junctures in the research trajectory. This is required if we are to move beyond proportionality as a mere risk-management tool. Compliance culture no longer accurately reflects the needs and expectations of researchers or regulators, nor does it necessarily produce the best research. Embracing uncertainty-both as a human practice and a regulatory objective-may represent the brighter future for health research.

Including all voices in international data-sharing governance.

BACKGROUND: Governments, funding bodies, institutions, and publishers have developed a number of strategies to encourage researchers to facilitate access to datasets. The rationale behind this approach is that this will bring a number of benefits and enable advances in healthcare and medicine by allowing the maximum returns from the investment in research, as well as reducing waste and promoting transparency. As this approach gains momentum, these data-sharing practices have implications for many kinds of research as they become standard practice across the world. MAIN TEXT: The governance frameworks that have been developed to support biomedical research are not well equipped to deal with the complexities of international data sharing. This system is nationally based and is dependent upon expert committees for oversight and compliance, which has often led to piece-meal decision-making. This system tends to perpetuate inequalities by obscuring the contributions and the important role of different data providers along the data stream, whether they be low- or middle-income country researchers, patients, research participants, groups, or communities. As research and data-sharing activities are largely publicly funded, there is a strong moral argument for including the people who provide the data in decision-making and to develop governance systems for their continued participation. CONCLUSIONS: We recommend that governance of science becomes more transparent, representative, and responsive to the voices of many constituencies by conducting public consultations about data-sharing addressing issues of access and use; including all data providers in decision-making about the use and sharing of data along the whole of the data stream; and using digital technologies to encourage accessibility, transparency, and accountability. We anticipate that this approach could enhance the legitimacy of the research process, generate insights that may otherwise be overlooked or ignored, and help to bring valuable perspectives into the decision-making around international data sharing.

Better governance, better access: practising responsible data sharing in the METADAC governance infrastructure.

BACKGROUND: Genomic and biosocial research data about individuals is rapidly proliferating, bringing the potential for novel opportunities for data integration and use. The scale, pace and novelty of these applications raise a number of urgent sociotechnical, ethical and legal questions, including optimal methods of data storage, management and access. Although the open science movement advocates unfettered access to research data, many of the UK's longitudinal cohort studies operate systems of managed data access, in which access is governed by legal and ethical agreements between stewards of research datasets and researchers wishing to make use of them. Amongst other things, these agreements aim to respect the reasonable expectations of the research participants who provided data and samples, as expressed in the consent process. Arguably, responsible data management and governance of data and sample use are foundational to the consent process in longitudinal studies and are an important source of trustworthiness in the eyes of those who contribute data to genomic and biosocial research. METHODS: This paper presents an ethnographic case study exploring the foundational principles of a governance infrastructure for Managing Ethico-social, Technical and Administrative issues in Data ACcess (METADAC), which are operationalised through a committee known as the METADAC Access Committee. METADAC governs access to phenotype, genotype and 'omic' data and samples from five UK longitudinal studies. FINDINGS: Using the example of METADAC, we argue that three key structural features are foundational for practising responsible data sharing: independence and transparency; interdisciplinarity; and participant-centric decision-making. We observe that the international research community is proactively working towards optimising the use of research data, integrating/linking these data with routine data generated by health and social care services and other administrative data services to improve the analysis, interpretation and utility of these data. The governance of these new complex data assemblages will require a range of expertise from across a number of domains and disciplines, including that of study participants. Human-mediated decision-making bodies will be central to ensuring achievable, reasoned and responsible decisions about the use of these data; the METADAC model described in this paper provides an example of how this could be realised.

Familial genetic risks: how can we better navigate patient confidentiality and appropriate risk disclosure to relatives?

This article investigates a high-profile and ongoing dilemma for healthcare professionals (HCPs), namely whether the existence of a (legal) duty of care to genetic relatives of a patient is a help or a hindrance in deciding what to do in cases where a patient's genetic information may have relevance to the health of the patient's family members. The English case ABC v St George's Healthcare NHS Trust and others considered if a duty of confidentiality owed to the patient and a putative duty of care to the patient's close relatives could coexist in this context. This article examines whether embracing the concept of coexisting duties could enable HCPs to respect duties in line with their clinical judgement, thereby providing legal support and clarity to professionals to allow them to provide the best possible genetics service to both the patient and their family. We argue that these dual duties, framed as a novel, composite duty to consider the interests of genetic relatives, could allow HCPs to exercise and act on their professional judgements about the relative value of information to family members, without fears of liability for negligence or breach of confidence.

Charting Regulatory Stewardship in Health Research: Making the Invisible Visible.

This section focuses on the ethical, legal, social, and policy questions arising from research involving human and animal subjects.

When can the Child Speak for Herself? The Limits of Parental Consent in Data Protection Law for Health Research.

Draft regulatory guidance suggests that if the processing of a child's personal data begins with the consent of a parent, then there is a need to find and defend an enduring consent through the child's growing capacity and on to their maturity. We consider the implications for health research of the UK Information Commissioner's Office's (ICO) suggestion that the relevant test for maturity is the Gillick test, originally developed in the context of medical treatment. Noting the significance of the welfare principle to this test, we examine the implications for the responsibilities of a parent to act as proxy for their child. We argue, contrary to draft ICO guidance, that a data controller might legitimately continue to rely upon parental consent as a legal basis for processing after a child is old enough to provide her own consent. Nevertheless, we conclude that data controllers should develop strategies to seek fresh consent from children as soon as practicable after the data controller has reason to believe they are mature enough to consent independently. Techniques for effective communication, recommended to address challenges associated with Big Data analytics, might have a role here in addressing the dynamic relationship between data subject and processing. Ultimately, we suggest that fair and lawful processing of a child's data will be dependent upon data controllers taking seriously the truism that consent is ongoing, rather than a one-time event: the core associated responsibility is to continue to communicate with a data subject regarding the processing of personal data.

Personalized medicine beyond genomics: alternative futures in big data-proteomics, environtome and the social proteome.

No field in science and medicine today remains untouched by Big Data, and psychiatry is no exception. Proteomics is a Big Data technology and a next generation biomarker, supporting novel system diagnostics and therapeutics in psychiatry. Proteomics technology is, in fact, much older than genomics and dates to the 1970s, well before the launch of the international Human Genome Project. While the genome has long been framed as the master or "elite" executive molecule in cell biology, the proteome by contrast is humble. Yet the proteome is critical for life-it ensures the daily functioning of cells and whole organisms. In short, proteins are the blue-collar workers of biology, the down-to-earth molecules that we cannot live without. Since 2010, proteomics has found renewed meaning and international attention with the launch of the Human Proteome Project and the growing interest in Big Data technologies such as proteomics. This article presents an interdisciplinary technology foresight analysis and conceptualizes the terms "environtome" and "social proteome". We define "environtome" as the entire complement of elements external to the human host, from microbiome, ambient temperature and weather conditions to government innovation policies, stock market dynamics, human values, political power and social norms that collectively shape the human host spatially and temporally. The "social proteome" is the subset of the environtome that influences the transition of proteomics technology to innovative applications in society. The social proteome encompasses, for example, new reimbursement schemes and business innovation models for proteomics diagnostics that depart from the "once-a-life-time" genotypic tests and the anticipated hype attendant to context and time sensitive proteomics tests. Building on the "nesting principle" for governance of complex systems as discussed by Elinor Ostrom, we propose here a 3-tiered organizational architecture for Big Data science such as proteomics. The proposed nested governance structure is comprised of (a) scientists, (b) ethicists, and (c) scholars in the nascent field of "ethics-of-ethics", and aims to cultivate a robust social proteome for personalized medicine. Ostrom often noted that such nested governance designs offer assurance that political power embedded in innovation processes is distributed evenly and is not concentrated disproportionately in a single overbearing stakeholder or person. We agree with this assessment and conclude by underscoring the synergistic value of social and biological proteomes to realize the full potentials of proteomics science for personalized medicine in psychiatry in the present era of Big Data.

Reconfiguring Social Value in Health Research Through the Lens of Liminality.

Despite the growing importance of 'social value' as a central feature of research ethics, the term remains both conceptually vague and to a certain extent operationally rigid. And yet, perhaps because the rhetorical appeal of social value appears immediate and self-evident, the concept has not been put to rigorous investigation in terms of its definition, strength, function, and scope. In this article, we discuss how the anthropological concept of liminality can illuminate social value and differentiate and reconfigure its variegated approaches. Employing liminality as a heuristic encourages a reassessment of how we understand the mobilization of 'social value' in bioethics. We argue that social value as seen through the lens of liminality can provide greater clarity of its function and scope for health research. Building on calls to understand social value as a dynamic, rather than a static, concept, we emphasize the need to appraise social value iteratively throughout the entire research as something that transforms over multiple times and across multiple spaces occupied by a range of actors.

Data Safe Havens in health research and healthcare.

MOTIVATION: The data that put the 'evidence' into 'evidence-based medicine' are central to developments in public health, primary and hospital care. A fundamental challenge is to site such data in repositories that can easily be accessed under appropriate technical and governance controls which are effectively audited and are viewed as trustworthy by diverse stakeholders. This demands socio-technical solutions that may easily become enmeshed in protracted debate and controversy as they encounter the norms, values, expectations and concerns of diverse stakeholders. In this context, the development of what are called 'Data Safe Havens' has been crucial. Unfortunately, the origins and evolution of the term have led to a range of different definitions being assumed by different groups. There is, however, an intuitively meaningful interpretation that is often assumed by those who have not previously encountered the term: a repository in which useful but potentially sensitive data may be kept securely under governance and informatics systems that are fit-for-purpose and appropriately tailored to the nature of the data being maintained, and may be accessed and utilized by legitimate users undertaking work and research contributing to biomedicine, health and/or to ongoing development of healthcare systems. RESULTS: This review explores a fundamental question: 'what are the specific criteria that ought reasonably to be met by a data repository if it is to be seen as consistent with this interpretation and viewed as worthy of being accorded the status of 'Data Safe Haven' by key stakeholders'? We propose 12 such criteria. CONTACT: paul.burton@bristol.ac.uk.

A human rights approach to an international code of conduct for genomic and clinical data sharing.

Fostering data sharing is a scientific and ethical imperative. Health gains can be achieved more comprehensively and quickly by combining large, information-rich datasets from across conventionally siloed disciplines and geographic areas. While collaboration for data sharing is increasingly embraced by policymakers and the international biomedical community, we lack a common ethical and legal framework to connect regulators, funders, consortia, and research projects so as to facilitate genomic and clinical data linkage, global science collaboration, and responsible research conduct. Governance tools can be used to responsibly steer the sharing of data for proper stewardship of research discovery, genomics research resources, and their clinical applications. In this article, we propose that an international code of conduct be designed to enable global genomic and clinical data sharing for biomedical research. To give this proposed code universal application and accountability, however, we propose to position it within a human rights framework. This proposition is not without precedent: international treaties have long recognized that everyone has a right to the benefits of scientific progress and its applications, and a right to the protection of the moral and material interests resulting from scientific productions. It is time to apply these twin rights to internationally collaborative genomic and clinical data sharing.

Psychiatric Illness and Clinical Negligence: When Can "Secondary Victims" Successfully Claim for Damages? Recent Developments from the United Kingdom.

On January 11, 2024, the United Kingdom (U.K.) Supreme Court rendered its judgment in Paul v Royal Wolverhampton NHS Trust, restricting the circumstances in which "secondary victims" can successfully claim for damages in clinical negligence cases. This ruling has provided welcome clarity regarding the scope of negligently caused "pure" psychiatric illness claims, but the judgment may well prove controversial. In this article, I trace the facts and opinion from the majority and also discuss an important dissenting opinion. I then reflect on what the ruling means for psychiatric illness claims by secondary victims, and more broadly on the implications for clinical negligence law. I suggest that while much-needed clarity has been injected in this area of the law, it is difficult, reading the majority of the Supreme Court's emphasis on the restricted scope of a medical practitioner's duty, to envision a scenario in which secondary victim could ever succeed in a clinical negligence context.

Achieving Procedural Parity in Managing Access to Genomic and Related Health Data: A Global Survey of Data Access Committee Members.

Data access committees (DACs) are critical players in the data sharing ecosystem. DACs review requests for access to data held in one or more repositories and where specific constraints determine how the data may be used and by whom. Our team surveyed DAC members affiliated with genomic data repositories worldwide to understand standard processes and procedures, operational metrics, bottlenecks, and efficiencies, as well as their perspectives on possible improvements to quality review. We found that DAC operations and systemic issues were common across repositories globally. In general, DAC members endeavored to achieve an appropriate balance of review efficiency, quality, and compliance. Our results suggest a similarly proportionate path forward that helps DACs pursue mutual improvements to efficiency and compliance without sacrificing review quality.

Purpose definition as a crucial step for determining the legal basis under the GDPR: implications for scientific research.

The General Data Protection Regulation (GDPR) of the European Union, which became applicable in 2018, contains a new accountability principle. Under this principle, controllers (ie parties determining the purposes and the means of the processing of personal data) are responsible for ensuring and demonstrating the overall compliance with the GDPR. However, interpretive uncertainties of the GDPR mean that controllers must exercise considerable judgement in designing and implementing an appropriate compliance strategy, making GDPR compliance both complex and resource-intensive. In this article, we provide conceptual clarity around GDPR compliance with respect to one core aspect of the law: the determination and relevance of the purpose of personal data processing. We derive from the GDPR's text concrete requirements for purpose specification, which we subsequently apply to the area of secondary use of personal data for scientific research. We offer guidance for correctly specifying purposes of data processing under different research scenarios. To illustrate the practical necessity of purpose specification for GDPR compliance, we then show how our proposed approach can enable controllers to meet their compliance obligations, using the example of the overarching GDPR principle of lawfulness to highlight the relevance of purpose specification for the identification of a suitable legal basis.