Key Dates

Related Announcements

None

Issued by

Office of The Director, National Institutes of Health (OD)

National Heart, Lung, and Blood Institute (NHLBI)

National Institute of Biomedical Imaging and Bioengineering (NIBIB)

Eunice Kennedy Shriver National Institute of Child Health and Human Development (NICHD)

National Institute of Dental and Craniofacial Research (NIDCR)

National Institute of Diabetes and Digestive and Kidney Diseases (NIDDK)

National Institute on Drug Abuse (NIDA)

National Institute of Mental Health (NIMH)

National Institute of Neurological Disorders and Stroke (NINDS)

National Library of Medicine (NLM)

National Center for Complementary and Integrative Health (NCCIH)

National Center for Advancing Translational Sciences (NCATS)

National Cancer Institute (NCI)

Office of Behavioral and Social Sciences Research (OBSSR)

All of Us Research Program, Office of the Director, National Institutes of Health (PRECMED)

Office of Data Science Strategy (ODSS)

Purpose

NIH is requesting information on the utility and useability of sample language and accompanying considerations developed for use in informed consent documents for digital health technologies utilized in research.

Background

Digital health technologies are increasingly being deployed in biomedical and behavioral research, leading to enhanced scientific discovery and improved health outcomes. Incorporating such technologies into traditional research frameworks may pose new considerations when developing and reviewing informed consent documents for research studies. Research institutions, funders, and researchers have a shared responsibility to ensure that the unique potential benefits and risks from use of digital health technologies in research are effectively communicated in a clear and concise manner, to aide participants in making an informed choice regarding whether to take part in a research study. To assist in this effort, NIH has worked to develop sample language and points to consider, intended for voluntary use by investigators and Institutional Review Boards (IRB) when developing and reviewing informed consent for research studies involving digital health technologies.

The sample language and points to consider do not replace any IRB review or guidance but rather are intended to serve as a resource for investigators from which they can tailor appropriate informed consent language to their specific study needs. Use of this resource is voluntary and there are no requirements or expectations that any portion of the sample language be used in an informed consent document for NIH-supported or -conducted studies. The language below may be updated after responses to this request for information are considered.

Information Requested

NIH is interested in input on the specific language proposed in the informed consent sample language and any gaps or additional concepts that should be included or clarified, including within the points to consider. NIH is also interested in input on the utility and usability of this resource, any hurdles or barriers to the voluntary use by the community, and other feedback relevant to this resource. NIH welcomes input from research investigators, institutional review board members, study participants, professional organizations, associations with a focus on research oversight, and other interested members of the public. Response to this Notice is voluntary. Respondents are free to address any or all of the topics listed below or any other relevant topic for NIH to consider. Respondents should not feel compelled to address all items.

Resource for Stakeholder Input Follows:

Informed Consent for Research Using Digital Health Technologies: Points to Consider and Sample Language

Key Points

• The use of this resource is completely voluntary.
• This resource provides points to consider and sample language for informed consent of research studies which plan to use digital health technologies. This consent resource does not address future use of data collected from digital health devices, which may have additional considerations when developing or reviewing informed consent.
• Within this resource, the term digital health technology refers to wearable devices, sensor technologies, and mobile software applications ( apps ) most often used with tablets, watches, or phones. The resource does not address considerations for implantable devices, artificial intelligence, or other types of digital health technologies.
• Considerations are included for both research-grade and commercial digital health technologies.
• The sample language provided in this resource does not alone satisfy the regulatory requirements for informed consent as described in the 2018 revised Common Rule at 45 CFR46.116 or the FDA's regulations governing the protection of human participants (21 CFR parts 50 and 56).
• Language provided in this resource may need further revision or clarification when used in an informed consent.
• As new digital health technologies emerge or existing technologies are used in novel ways, this document may be updated, or new resources may be developed to address unique considerations related to the use of these technologies in research.

I. Introduction

Digital health technologies, such as wearable devices, sensor technologies, and mobile applications (apps), have increasingly been deployed in biomedical and behavioral research, leading to enhanced scientific discovery and improved health outcomes. The individualized information collected from research participants via digital health technologies may enable greater personal insights into health and wellness, and the volume of data that can be collected across studies can provide broader insights to enhance the health of the nation. Bringing research to participants through use of these technologies also enables new clinical trial modalities (e.g., decentralized trials) and can enhance clinical trial diversity by increasing reach and accessibility to participants who do not live near or can t travel to an academic research center.

Incorporating digital health technologies into traditional research frameworks may pose new considerations for potential study participants as data ownership and other proprietary issues may limit participant control over how their data are used. Research institutions, funders, and researchers themselves have a shared responsibility to ensure that the potential benefits and risks from use of digital health technologies in research are effectively communicated and understood by participants so they can make an informed choice regarding whether to take part in a research study. As a steward of biomedical and behavioral research, NIH is committed to ensuring the appropriate use of digital health technologies as part of the research enterprise.

II. Instructions for Use

This resource presents general points to consider, instructions for use, and optional sample language for the research community. The intended use of this resource is to inform research teams and Institutional Review Board (IRB) members who are planning, reviewing, or conducting research that studies or uses digital health technologies, with the goal of increasing transparency and understanding for potential participants who are considering joining studies using or investigating digital health technologies. The sample language component sections below outline a variety of considerations and provide optional sample language designed to be modified and incorporated into an informed consent for a study where original data collection will occur.

The sample language provided in the resource does not take the place of an informed consent, but rather is intended to be incorporated into consents (both written and oral) as appropriate. The considerations and sample consent language provided are meant to help investigators best describe digital health technologies and how they will be used in the study. The sample consent language provided should be tailored to institutional and study-specific requirements. It is the responsibility of investigators and IRBs to determine the appropriate use of the sample language including which components, if any, are relevant to a study. The organization of this resource is consistent with sections of a standard informed consent document. Points to consider and sample language are included in the most relevant sections, although they may be relevant to multiple sections.

The use of the sample language in this document by itself does not address Federal, state, local, Tribal, or international requirements that may apply to the research study. Investigators are strongly encouraged to seek consultation with the appropriate local or Tribal contacts to understand cultural norms or preferences that may present in the targeted study population.

Use of this resource is voluntary and there are no requirements or expectations that any portion of the sample language be used during the informed consent process for NIH-supported or -conducted studies. Individuals who find this resource helpful may also be interested in the Secretary’s Advisory Committee on Human Research Protections (SACHRP) recommendations to the Health and Human Services (HHS) Secretary on End-User License Agreements and Terms of Service.

The sample consent language below includes embedded instructions to fill in specific information pertaining to the research study. These embedded instructions are identified using [bold italicized text] and will need to be removed and replaced with study-specific information.

III. General Points to Consider

• The sample language in this resource was designed to ensure readability and comprehension (with an overall goal of not exceeding an 8th grade reading level) with language that conveys the necessary information to research participants. Those writing and approving informed consent documents are encouraged to write in plain language not exceeding an 8th grade reading level, use clear headers and short sentences, include definitions for technical terms, and use plenty of white space. There are several resources that help with creating understandable consent language, including the National Cancer Institute (NCI) guide to evaluating readability. Researchers may also consider using supplemental strategies to assist with comprehension (e.g., interactive videos).
• Many NIH-federally funded studies are required to develop a data management and sharing plan as a requirement for funding. Investigators should ensure alignment of data management and sharing plans with informed consent language.
• The sample language below does not address all scenarios. Several different digital health technologies may be used within a study (e.g., a device and an app), each with unique considerations that should be addressed as part of a consent.
• This resource does not address future use of data collected from digital health devices. If considering inclusion of informed consent language related to this issue, the NIH resource on informed consent for secondary research with data and biospecimens may be helpful.

IV. Sample Language Components

Component 1: Introduction

Considerations:

The introduction component should provide prospective participants with a description of the digital health technologies used in the study and the purpose of their inclusion. Include a clear statement about how the technology is being used to address the study aims, if the technology has been approved by FDA for its intended use, and if the efficacy of the technology is being studied.

• Indicate if use of the digital health technology is mandatory for participation in the study.
• Specify which digital health technology will be used and whether it is open source or proprietary to the research team or an outside entity, such as a commercial company (e.g., manufacturers and/or software developers). Provide explanation around what it means to be proprietary technology and how it may determine who owns or has access to or rights to distribute the data as well as implications for privacy and security.
• Indicate whether the study team will provide the digital health technology, if the participant will be asked to connect hardware or install software on a personal digital device, and if the participant must return study-provided devices or discontinue any subscription services at the conclusion of the study.
• IRBs should consider whether it is important to disclose to potential research participants any relationship (e.g., financial, board position, advisor) between investigators and the company that owns the digital health technology used in a study.

Sample Language:

Instructions: Adjust language as needed. Include [If the ?] text if it pertains to your study. Replace embedded instructions identified in [bold italicized text] with specific information pertaining to the study. Remember to remove the [If the ?] information identified in [bold italicized text].

This [insert digital health technology name/type] is designed to collect [describe, in plain language, the function of the digital health technology and the types of data it will collect]. This information will help the study team better understand [insert general study goal].

[If use of the digital health technology is essential to the study and not optional]:

As part of this study, you will be asked to use [insert digital health technology name/type]. If you do not want to use [insert digital health technology name/type], you should not agree to be in this study.

[If one or more digital health technologies used in the study are optional]:

As part of this study, you will be asked to use [insert digital health technology name/type]. Use of [insert digital health technology name/type] is optional. You can still take part in this study, even if you do not want to use [insert digital health technology name/type].

Component 2: Procedures

Considerations:

The procedures component should provide prospective participants with a description of how, when, and under what conditions the digital health technologies will be used in the study.

• Participants should be provided with a clear description of how the digital health technology will be used (e.g., data collection, data management and sharing). The study team should clearly state under what conditions and how frequently participants will be asked to use or interact with the digital health technology for study purposes (e.g., turn on, use, enter data), and how the technology may impact their daily activities. Expectations about what participants should not do (e.g., move a device, turn it off) should also be clearly communicated.
• Participants should be made aware of the device being used in the study and that they will need to agree to the standard terms and conditions for the use of the device and instructed use. Clear instructions should be provided on how to install, configure, and use the study-related digital health technology.
• When participants are familiar with the technology outside the study context, state any key differences between use of the technology for the purposes of the study compared to use in the general population.
• The study team should clearly identify for participants the types of data they will be asked to share or submit to the researchers, including data shared without purposeful participation (i.e., passive data types such as location data, steps, heart rate).
• The study team should provide participants with the names of all third parties along with the frequency and level of access they may have to participant data and at what level of detail.
• The study team should inform participants if their personal health care providers will receive information collected by the digital health technology (including atypical readings or alarms from the digital health technology), whether providers will receive this information (e.g., real-time, specific intervals), and if data will be integrated with a participant’s electronic health record (EHR). Also, the study team should indicate under what circumstances clinically actionable data will be shared and with whom it will be shared. Participants should be informed if they will have direct access to their collected digital health technology data, how often they will be able to directly access this data, and how this can be done.
• If a device is study-provided, clarify when and if the device must be returned (e.g., if the participant withdraws from the study, or at the study’s conclusion). Indicate what happens if a device is not returned per instructions.
• Participants should be alerted to the steps to stop the collection and/or sharing of their data with the study team, which may include discontinuing use of wearables, removing sharing permissions, and/or uninstalling software application(s).
• Include language clarifying whether any portion of a study incentive is dependent on participant use of the device or application.

Sample Language:

Instructions: Adjust language as needed. Include [If the ?] text if it pertains to your study. Replace embedded instructions identified in [bold italicized text] with specific information pertaining to the study. Remember to remove the [If the ?] information identified in [bold italicized text].

Taking part in this study means that you will need to set up [insert digital health technology name/type]. This means that you will need to [describe how the participant must set up, place, install, configure, or activate the digital health technology]. If you have questions about setting up this device, please contact [insert contact name, email and/or phone number for study team member that can assist with tech-related questions]. You will be asked to use [insert digital health technology name/type] for about [insert approximate amount of time (e.g., hours/day for days/weeks/months)] over the course of [specific number of days/weeks/months].

You will be asked to share [insert types of data] via [insert digital health technology name/type] [insert frequency (e.g., at random intervals throughout the day, daily, weekly)]. These data will be shared with the study team [insert frequency with which the data will be shared (e.g., in real-time, every 24 hours, weekly)]. The [insert digital health technology name/type] will continue to collect [insert types of data] until [insert digital health technology name/type] is [insert is removed/uninstalled/or no longer used].

The data you share with the study team [will/will not] be monitored [by whom (e.g., study team, healthcare provider)] [frequency]. If you have any questions about your health during this study, you should reach out directly to your health care providers.

[If the digital health technology sends auto-notifications]:

While you are in this study, the [insert digital health technology name/type] may send auto-notifications. You should not take these notifications as medical advice. The feedback may not be reviewed by the study team or your healthcare provider(s). If you have concerns about your health while you are in this study, or about the notifications you might be getting, reach out to your healthcare provider(s).

[If the study team will be monitoring participant data and sending messages to participants about their health]:

You may receive messages from the study team with information we think you should know about your health. If you have questions or concerns about your health information shared in the message, reach out to [insert the study team OR your healthcare provider ].

[If the participant will need to create a user account]:

You will be required to create an account with [insert digital technology name/type] to participate in this study. Creating an account with [insert digital technology name/type] requires providing personal information. If you do not want to do this, you should not agree to be in this study. When you are no longer taking part in the study or choose to stop using the [insert digital health technology name/type], your account will be [insert the future use of the study team’s access to the account and previously collected data as it pertains to the study guidelines].

Component 3: Data Sharing and Ownership

Considerations:

This component should provide prospective participants with a clear understanding of data ownership and how participant data is collected, stored, and shared.

• Participants should be informed whether the data collected by digital health technologies is sensitive or identifiable (e.g., if the data is associated with possible stigma, or contains confidential or identifiable information).
• Indicate whether the data collected by the digital health technology is owned by the company and whether the data may be sold or shared to third parties without explicit participant consent. Provide awareness of end user agreements, terms and conditions, and terms of service that participants will need to accept. Educate participants about these agreements and/or data access tiers and procedures by end users.
• As capabilities evolve to enable linkages between digital health data and disparate data sources, consider the risk of re-identification and its implications on participant’s privacy and confidentiality. Consider how the informed consent language informs participants of this potential risk.
• Consider including language on where and how the study team or others involved in the research store and manage participant data and how to contact the digital health technology company (e.g., their website) for questions about how it stores data. Explain what security protections will be put in place by the study team, who has access to the data, and the controls to prevent unauthorized data access, noting that data held by a digital health technology company may not be protected in the same way.
• Participants should be informed about the length of time their data will be retained for the study, purposes for which data could be used during and after the study (i.e., repositories or future studies) and if additional consent will be required for any further activities.

Sample Language:

Instructions: Include relevant text below. Replace embedded instructions identified in [bold italicized text] with specific information pertaining to the study.

Information from your [insert digital health technology name/type] will be stored by the study team [insert location where the data will be stored]. We plan to store your data for [insert duration data will be stored as indicated in the protocol]. We may share your information with [insert with whom information will be shared, including data repositories as applicable], but we will not share information that directly identifies you. [If data is shared with a repository, insert basic summary information about the repository and how they may use or share the data]. We will do our best to protect the confidentiality of the data we collect from you during this study.

[If the study is using commercial digital health technology]:

[Insert company] will have access to, and may retain a copy of, any data collected by [insert digital health technology name/type]. When using [insert digital health technology name/type] you agree to the Terms and Conditions set out by the company. We do not have control over how [insert company] will protect your data and privacy.

Component 4: Potential Risks

Considerations:

The potential risks component is meant to provide prospective participants with a clear understanding of reasonably foreseeable risks and/or discomforts related to the use of digital health technologies in research other than those described in the Data Sharing and Ownership section.

• Investigators using digital health technologies are expected to assess and identify the reasonably foreseeable risks and/or discomforts that may be associated with digital health technologies being used in the study. This includes possible privacy and security risks (e.g., location data), along with physical or psychosocial discomforts (e.g., skin irritation, allergic reaction, broken skin, anxiety).
• Investigators will need to be aware of any changes that might alter the risks or benefits of the study and consider these with the IRB for the purposes of notification to participants.
• The research team should prioritize selecting technologies capable of the study measures needed while presenting the least amount of risk to participants.
• Address the potential of continued data collection after the study ends should the digital health technology remain on a participant’s device or continue to be used by the participant.
• Address if the digital health technology may store, collect, and/or display additional information as part of the technology’s normal functioning.
• Inform participants if there could be updates to software, privacy policies, or terms of service agreements during the study period and the potential risks these updates may pose. This includes informing participants that companies deploying a commercial digital health technology may not be required to follow the same study privacy rules as the research team and the company’s rules can change at any time without notice.
• Inform participants how linking or using multiple technologies might impact who has access to the participant’s data and how much data they might have access to. If the participant has a digital health technology that can be accessed by others (e.g., shared devices or accounts with family members, relatives, neighbors), they need to be informed that this might result in less privacy and an inability to maintain confidentiality.
• Study teams and their institutions are expected to provide participants with a clear understanding of how their study data is being protected, who might have access to it, and the steps being taken to minimize possible privacy risks that could arise.
• The study team should consider including language to help participants understand the role they can play in protecting their confidentiality and private information when using digital health technologies (e.g., creating a secure password).
• The study team should include language explaining whether the privacy policies for the digital health technology used in the study can or cannot be changed by the research team.
• Address the potential risks for breaches of participant study data.
• When the digital health technology used in the study could collect information on other individuals, especially when those individuals may not know their data is being collected (e.g., participant’s social networks, or home and other surroundings), language should be added to inform participants of the possible risks (e.g., security risks) for non-participants.

Address any potential risks that arise from adding the digital health component to a participant’s existing technology, including the potential for interference with another technology the participant currently uses.

Sample Language:

Instructions: Adjust language as needed. Include [If the study?] text if it pertains to your study. Replace embedded instructions identified in [bold italicized text] with specific information pertaining to the study. Remember to remove the [If the study?] information identified in [bold italicized text].

If you join this study, there is a potential risk that data you share might be accessed by unauthorized people or that someone may be able to identify you. These people may misuse the data you share with us in a way that leads to personal harm (e.g., discrimination). There may also be other risks that are not currently known. While we will do our best to protect your data, we cannot remove all risks. In general, there is no additional risk to using [insert digital health technology name/type] in this study beyond the risk you take when using [insert digital health technology name/type] in your daily life.

Using [insert digital health technology name/type] requires that you agree to [insert company]’s Terms of Service and privacy policy. We do not control these terms and policies, which can change at any time. You should read the terms and the privacy policies before using [insert digital health technology name/type]. You should also review your privacy settings often. If any changes are made to [insert company] privacy policies, the research team [insert will or will not] notify you.

[Insert company] may also collect, store, and sell information you provide through [insert digital health technology name/type]. This may include personal information, location data, video, audio, and photos. We do not control whether [insert company] will store or sell your data. We cannot control if they collect more data than the study requires, or how [insert company] will protect your privacy. We will continue to protect the privacy of the data we collect. However, [insert company] may share or disclose information per their terms and conditions. We have no control over the data they collect or own. Please know that [insert company] may continue to have access to your data even after you stop being part of the study.

By using [insert digital health technology name/type] there is a risk you may be identified as a study participant. This may occur if the [insert digital health technology name/type] is lost, misplaced, or stolen. It may also occur if your identity and information recorded in the [insert digital health technology name/type] is otherwise accessed by another person.

Component 5: Potential Benefits

Considerations:

The potential benefits component informs prospective participants about any anticipated direct benefits related to their use of digital health technologies during the research study.

Sample Language:

Instructions: Adjust language as needed. Include [If there are?] text if it pertains to your study. Replace embedded instructions identified in [bold italicized text] with specific information pertaining to the study. Remember to remove the [If there are?] information identified in [bold italicized text].

[If there are no known benefits from using the digital health technology]:

There are no known benefits from using [insert digital health technology name/type] as part of this study. In the future, other people might benefit because of what we learn from your use of the [insert digital health technology name/type].

[If there are known benefits from using the digital health technology]:

You may benefit from using [insert digital health technology name/type] in the study. [Fill in any DIRECT benefits from using the digital health technology IN THE STUDY. Do not include indirect or ancillary benefits.]

Component 6: Cost

Considerations:

The cost component should inform prospective participants of any potential costs to them related to use of digital health technologies in the study. Consent forms should clearly state who will be responsible for which costs related to the use of the digital health technology, whether study-provided or a personal device.

• If the participant will be using their own device and/or needs a cellular service/ internet connection to transmit data, clearly outline who is expected to cover the cost of the required cellular service/internet connection (i.e., any reimbursement provided to cover or offset the costs).
• If the study provides paid access/subscription to a digital technology, clearly specify how long the participant will have access to the application and whether they will have to pay for the service after the study ends should they wish to continue use.

There may be situations where the device breaks, is lost or stolen, is faulty, or needs maintenance (e.g., replacement parts including batteries). Specify what to do in such situations and under what circumstances the participant, or the study will be responsible for paying for the maintenance or replacement of the device.

Component 7: Withdrawal

Considerations: The withdrawal component should clearly address the limitations of data removal when a participant withdraws from a study using digital health technologies and specify any collection of data beyond the withdrawal point or study conclusion. For studies using personal devices, clarify if software must be uninstalled when leaving or ending participation in the study.

• Inform participants whether the company may be able to keep and use participant data after the study ends or a participant withdraws from the study.
• Inform participants if their study data cannot be removed even upon withdrawing from the study.
• Inform participants if the digital health technology will continue to collect data until the device and/or the software application have been removed, uninstalled, or the associated account is deactivated or closed.

Submitting a Response

Comments should be submitted electronically to https://osp.od.nih.gov/comment-form-developing-consent-language-for-using-digital-health-technologies/ by December 12, 2023. You may provide comments to one or all of the topics in the comment boxes found on the form. Comments received may be posted without change after NIH has finished considering all of the comments received. Please do not include any proprietary, classified, confidential, or sensitive information in your response.

This Request for Information (RFI) is for planning purposes only and should not be construed as a policy, solicitation for applications, or as an obligation on the part of the Government to provide support for any ideas identified in response to it. NIH may use information gathered by this RFI to inform development or modification of websites, policies and practices, processes and procedures, and supporting documentation.

Inquiries

Please direct all inquiries to:

NIH Office of Science Policy

Email: SciencePolicy@mail.nih.gov