Balancing potential risks and benefits of using confidential dataBMJ 2006; 333 doi: http://dx.doi.org/10.1136/bmj.333.7563.349 (Published 10 August 2006) Cite this as: BMJ 2006;333:349
- Christina Davies, senior research fellow1,
- Rory Collins, British Heart Foundation professor of medicine and epidemiology (firstname.lastname@example.org)1
- 1 MRC/BHF/Cancer Research UK Clinical Trial Service Unit and Epidemiological Studies Unit, University of Oxford, Oxford OX3 7LF
- Correspondence to: R Collins
Confidential medical information is used in almost every type of clinical and public health research. Different research scenarios raise different practical, ethical, and legal issues, and with these come the challenges of balancing the potential risks associated with the use of personal data against the potential benefits that might be gained from the research. We consider a strategy for explicitly reviewing the balance of these potential risks and benefits when planning research.
Effect of current legislation
Changes in the laws on data protection1–3 have had an important effect on training for medical research and on the design, costs, and feasibility of research projects. In many instances, this has improved the ways in which personal data are handled and protected the privacy of patients. There is, however, a general concern that varying interpretations of current legislation are stifling important research.4 Widespread uncertainty among professional bodies, hospital managers, ethics committees, clinicians, medical researchers, and the public may be producing disproportionate obstacles to the use of personal data when there is not genuine risk. In some instances, interpretations of legislation seem to have been driven less by careful consideration of the likelihood of real harm for individuals than by the desire to minimise the risk of criticism for organisations.
It needs just a few such decisions to impart an extra twist to the cycle of inefficiency in the use of public money for medical research. Clearly, research should conform to good practice, but it remains appropriate to consider whether over-interpretation of data protection legislation represents another real, albeit difficult to quantify, risk to the public.
Balancing risks and benefits
It is essential to …