What Is Broad Consent in Research and Data Sharing?
Meta description: Learn what broad consent means in U.S. research, how it supports future data and biospecimen sharing, what participants agree to, and how it differs from specific consent.
Research studies can generate data and biological samples that remain useful long after the original project ends. Broad consent is one way researchers may ask people to permit certain future uses of identifiable information or biospecimens, rather than seeking permission for every new study. In the United States, the term has a specific meaning under the revised Common Rule, but its use is subject to limits. Knowing what broad consent covers—and what it does not—helps participants make informed choices and helps research teams plan responsible data sharing.
What Broad Consent Means
Broad consent is permission for the storage, maintenance, and specified secondary research use of identifiable private information or identifiable biospecimens. “Secondary research” means research that uses information or samples collected for another purpose, such as a prior study, clinical care, or a biobank.
Under the revised U.S. Common Rule—the federal policy for protecting human subjects in covered research—broad consent is an optional consent pathway. It is designed for situations where researchers anticipate that identifiable information or biospecimens may be used in future research, but cannot yet describe every future study in detail. The regulation’s broad-consent provisions appear in 45 CFR 46.116(d).
Broad consent is not the same as permission to use a person’s information for any purpose, without limits. The consent must describe the general types of research that may be conducted, the kinds of information or samples involved, and other required details. Future research still must meet applicable ethical, legal, and institutional requirements.
How Broad Consent Works in the United States
The revised Common Rule, which generally took effect in 2019, gives institutions a choice: they may use the broad-consent pathway for certain future research or rely on other permitted approaches. Broad consent is not required for every study, and not every institution or research organization uses it.
When a covered institution seeks broad consent, it must provide the required information and obtain a person’s agreement before storing, maintaining, or using identifiable information or biospecimens for the relevant future research. An institutional review board (IRB) reviews the consent process and the proposed use of the information or samples, as applicable.
Broad consent applies to identifiable private information and biospecimens. If materials are properly deidentified, the Common Rule’s human-subjects requirements may not apply to their secondary use, although other laws, agreements, or institutional policies can still govern them. Whether data or a sample is identifiable depends on the circumstances, including whether a code or other information can be used to link it to a person.
What Broad Consent Must Explain
The Common Rule specifies information that must appear in a broad-consent form. In clear language, the form generally must explain:
- The general purpose of collecting and using the information or biospecimens, including the types of research that may be conducted.
- The types of identifiable information or biospecimens that may be used, shared, or stored.
- Whether the information or samples might be shared with other researchers or institutions, and the types of organizations or researchers that may receive them.
- The length of time the information or biospecimens may be stored or used, if that period is known, or that it may be retained and used indefinitely if that is the plan.
- That participation is voluntary, and that a person may choose not to provide broad consent without penalty or loss of benefits to which they are otherwise entitled.
- Whether the person may be unable to withdraw consent after information or samples have been distributed, deidentified, or incorporated into completed research.
- Whether the research might involve whole-genome sequencing, when applicable.
- Whether the research may produce commercially valuable products and whether the participant may share in any resulting profits.
- Whether clinically relevant research results, including individual results, will be disclosed and under what conditions, if applicable.
These details help people understand the scope of permission before agreeing. A broad-consent form should not imply that every future project has already been approved or that all possible risks can be predicted. Future studies may still require IRB review, privacy protections, and other approvals.
Broad Consent Compared With Specific Consent
With specific consent, a participant is asked to agree to a particular study with a defined purpose, methods, and risks. Broad consent instead addresses a range of future research uses described in general terms. Specific consent can be more informative when a new study is already planned; broad consent can reduce the need to recontact people for every eligible secondary use.
Broad consent should not be confused with blanket consent. Blanket consent suggests unrestricted use, while broad consent under the Common Rule has defined content and applies to certain research involving identifiable information or biospecimens. The distinction matters: a future study outside the scope of the original consent may need another permission pathway or may not be permissible.
| Feature | Broad consent | Specific consent |
|---|---|---|
| Research scope | General categories of future secondary research | A particular study or clearly defined research plan |
| Timing | Often obtained when information or samples are collected or stored | Obtained for the study described to the participant |
| Future use | May support uses within the agreed scope, subject to applicable review | Usually tied to the study and uses explained in that consent |
| Participant choice | Permission covers described categories, not unlimited use | Permission covers the specific proposed research |
What Broad Consent Means for Data Sharing
Broad consent can make it easier for researchers to share eligible data or biospecimens with other qualified researchers. This can support replication, larger studies, and research into questions that were not practical to investigate when the material was first collected. A biobank, for example, may store samples and related health information for future studies that fit the consent’s stated scope.
Sharing does not automatically mean information is posted publicly or that every recipient can use it without restrictions. A data-sharing plan may limit access to approved researchers, require a data-use agreement, prohibit attempts to identify participants, or specify security requirements. Researchers and institutions should match the actual sharing practices to what participants were told.
For participants, an important practical question is whether the consent describes sharing outside the original institution, including with commercial organizations or researchers in other locations. The form should be read for the categories of recipients, purposes, and any limits it states. Where details are unclear, the research team or IRB contact can explain how the institution handles access requests.
Can Participants Change Their Minds?
Broad consent is voluntary. A person can decline it, and that decision should not carry a penalty or affect benefits the person is otherwise entitled to. Participants may also be able to withdraw permission later, but withdrawal does not necessarily undo past research or retrieve every shared copy of data.
After information or biospecimens have been distributed, used in completed analyses, combined with other data, or deidentified, it may be impracticable to remove them. The Common Rule therefore requires broad-consent materials to explain that withdrawal may not be possible in some circumstances. A participant should check the form or ask the research team how to submit a withdrawal request and what the institution can do with material that has already been shared.
Institutions may have different procedures for receiving and acting on withdrawal requests. A request might stop future uses controlled by the institution while leaving completed analyses or data already provided to collaborators unchanged. The exact result depends on the consent terms, the research status, and applicable policies.
What Happens If Someone Declines Broad Consent?
Under the Common Rule, if a person is asked to provide broad consent for the storage, maintenance, or secondary research use of identifiable private information or identifiable biospecimens and declines, an IRB generally cannot later waive consent for that same covered use under the broad-consent pathway. This provision is intended to respect a person’s explicit refusal.
That rule does not mean that every future use of a person’s information is automatically prohibited in every setting. The Common Rule has different provisions for different research circumstances, and other legal or regulatory frameworks may apply. Researchers and institutions must determine which rules govern the proposed activity rather than assuming that a refusal—or a prior approval—answers every question.
Broad Consent, Privacy, and Other Legal Requirements
Broad consent is one part of research oversight, not a substitute for privacy and security safeguards. Researchers may use access controls, encryption, secure computing environments, coding systems, and data-use agreements to reduce the risk of unauthorized access or reidentification. These safeguards are important even when participants have agreed to future research.
The Common Rule and the Health Insurance Portability and Accountability Act (HIPAA) are separate frameworks. HIPAA may require an authorization or another permitted basis for the use or disclosure of protected health information by covered entities and their business associates. A Common Rule broad-consent form does not automatically satisfy HIPAA requirements. State privacy laws, genetic privacy rules, contractual obligations, and other federal regulations may also apply.
Likewise, the Common Rule does not govern every research activity in the United States. Its requirements generally apply to research conducted or supported by federal departments and agencies that have adopted the policy, and to institutions or projects that have made a broader commitment to follow it. The Food and Drug Administration has separate human-subject regulations; whether Common Rule provisions apply to a particular FDA-regulated activity depends on the circumstances.
Limits and Common Misunderstandings
- Broad consent is not unlimited permission. Future uses must fit the scope described, and other applicable rules still matter.
- Consent does not guarantee that a particular study will proceed. A proposed use may still need IRB review, privacy review, or additional approvals.
- Permission to share does not mean public release. Data may be shared only through controlled-access systems or under specific conditions.
- Withdrawal may not reverse prior use. Copies already shared, completed analyses, and data that can no longer be linked to an individual may be difficult or impossible to retrieve.
- Broad consent is not necessarily required. Researchers may use other legally permitted approaches, depending on the study and the information involved.
Another frequent misunderstanding is that agreement to broad consent means a participant will receive individual research findings. The consent must explain whether relevant results will be returned when applicable, but return of results is not automatic. Research findings may not be validated for clinical care, and decisions about reporting them depend on the study, the consent, professional standards, and applicable rules.
Questions to Ask Before Agreeing
Before signing a broad-consent form, a participant can ask how the information or samples will be protected, who may receive them, and whether commercial researchers may have access. It is also useful to ask whether the institution plans to keep the material indefinitely, whether future uses will be reviewed, and how to request withdrawal.
Participants may want to clarify whether the research involves genetic information, whether results may be returned, and whether information could be shared across institutions or with researchers outside the United States. The answers should be consistent with the written consent. People can take time to review the form, discuss it with someone they trust, and decline if they do not wish to authorize the described future uses.
Why Broad Consent Matters
Broad consent offers a structured way to support future research while informing participants about the general purposes and limits of data and biospecimen use. For researchers, it can enable valuable secondary studies without asking participants to approve each project individually. For participants, its value depends on clear explanations, meaningful choices, and honest communication about sharing and withdrawal.
In practice, the key is to treat broad consent as a defined permission—not a blank check. Researchers should use information and samples only within the stated scope and applicable rules, while participants should have a clear opportunity to understand what they are agreeing to before deciding.