A Smart Contract-Based Dynamic Consent Management System for Personal Data Usage under GDPR

A massive amount of sensitive personal data is being collected and used by scientists, businesses, and governments. This has led to unprecedented threats to privacy rights and the security of personal data. There are few solutions that empower individuals to provide systematic consent agreements on distinct personal information and control who can collect, access, and use their data for specific purposes and periods. Individuals should be able to delegate consent rights, access consent-related information, and withdraw their given consent at any time. We propose a smart-contract-based dynamic consent management system, backed by blockchain technology, targeting personal data usage under the general data protection regulation. Our user-centric dynamic consent management system allows users to control their personal data collection and consent to its usage throughout the data lifecycle. Transaction history and logs are recorded in a blockchain that provides trusted tamper-proof data provenance, accountability, and traceability. A prototype of our system was designed and implemented to demonstrate its feasibility. The acceptability and reliability of the system were assessed by experimental testing and validation processes. We also analyzed the security and privacy of the system and evaluated its performance.

A Blockchain-Based Dynamic Consent Architecture to Support Clinical Genomic Data Sharing (ConsentChain): Proof-of-Concept Study

Background In clinical genomics, sharing of rare genetic disease information between genetic databases and laboratories is essential to determine the pathogenic significance of variants to enable the diagnosis of rare genetic diseases. Significant concerns regarding data governance and security have reduced this sharing in practice. Blockchain could provide a secure method for sharing genomic data between involved parties and thus help overcome some of these issues. Objective This study aims to contribute to the growing knowledge of the potential role of blockchain technology in supporting the sharing of clinical genomic data by describing blockchain-based dynamic consent architecture to support clinical genomic data sharing and provide a proof-of-concept implementation, called ConsentChain, for the architecture to explore its performance. Methods The ConsentChain requirements were captured from a patient forum to identify security and consent concerns. The ConsentChain was developed on the Ethereum platform, in which smart contracts were used to model the actions of patients, who may provide or withdraw consent to share their data; the data creator, who collects and stores patient data; and the data requester, who needs to query and access the patient data. A detailed analysis was undertaken of the ConsentChain performance as a function of the number of transactions processed by the system. Results We describe ConsentChain, a blockchain-based system that provides a web portal interface to support clinical genomic sharing. ConsentChain allows patients to grant or withdraw data requester access and allows data requesters to query and submit access to data stored in a secure off-chain database. We also developed an ontology model to represent patient consent elements into machine-readable codes to automate the consent and data access processes. Conclusions Blockchains and smart contracts can provide an efficient and scalable mechanism to support dynamic consent functionality and address some of the barriers that inhibit genomic data sharing. However, they are not a complete answer, and a number of issues still need to be addressed before such systems can be deployed in practice, particularly in relation to verifying user credentials.

DynamiChain: Development of Medical Blockchain Ecosystem Based on Dynamic Consent System

Although blockchain is acknowledged as one of the most important technologies to lead the fourth industrial revolution, major technical challenges regarding security breach and privacy issues remain. This issue is particularly sensitive in applied medical fields where personal health information is handled within the network. In addition, contemporary blockchain-converged solutions do not consider restricted medical data regulations that are still obstacles in many countries worldwide. This implies a crucial need for a system or solution that is suitable for the healthcare sector. Therefore, this article proposes the development of a dynamic consent medical blockchain system called DynamiChain, based on a ruleset management algorithm for handling health examination data. Moreover, medical blockchain-related studies were systematically reviewed to prove the novelty of DynamiChain. The proposed system was implemented in a scenario where the exercise management healthcare company provided health management services based on data obtained from the data provider’s hospital. The proposed research is envisioned to provide a widely compatible blockchain medical system that could be applied in future healthcare fields.

Adding dynamic consent to a longitudinal cohort study: A qualitative study of EXCEED participant perspectives

Background Dynamic consent has been proposed as a process through which participants and patients can gain more control over how their data and samples, donated for biomedical research, are used, resulting in greater trust in researchers. It is also a way to respond to evolving data protection frameworks and new legislation. Others argue that the broad consent currently used in biobank research is ethically robust. Little empirical research with cohort study participants has been published. This research investigated the participants’ opinions of adding a dynamic consent interface to their existing study. Methods Adult participants in the Extended Cohort for E-health, Environment and DNA (EXCEED) longitudinal cohort study who are members of the EXCEED Public and Participant Engagement Group were recruited. Four focus groups were conducted and analysed for thematic content. Discussion topics were derived from a review of the current literature on dynamic consent. Results Participants were in favour of many aspects of a dynamic consent interface, such as being able to update their information, add additional data to their records and choose withdrawal options. They were supportive provided it was simple to use and not intrusive. Participants expressed a markedly high level of trust in the study and its investigators and were unanimously happy with their current participation. No strong support was found for adding a dynamic consent interface to EXCEED. Conclusions Trust in the study researchers was the strongest theme found. Openness and good data security were needed to retain their trust. While happy to discuss dynamic consent, participants were satisfied with the current study arrangements. There were indications that changing the study might unnecessarily disturb their trust. This raised the question of whether there are contexts where dynamic consent is more appropriate than others. This study was limited by the small number of participants who were committed to the study and biased towards it. More research is needed to fully understand the potential impact of adding a dynamic consent interface to an existing cohort study.

A Blockchain-Based Dynamic Consent Architecture to Support Clinical Genomic Data Sharing (ConsentChain): Proof-of-Concept Study (Preprint)

BACKGROUND In clinical genomics, sharing of rare genetic disease information between genetic databases and laboratories is essential to determine the pathogenic significance of variants to enable the diagnosis of rare genetic diseases. Significant concerns regarding data governance and security have reduced this sharing in practice. Blockchain could provide a secure method for sharing genomic data between involved parties and thus help overcome some of these issues. OBJECTIVE This study aims to contribute to the growing knowledge of the potential role of blockchain technology in supporting the sharing of clinical genomic data by describing blockchain-based dynamic consent architecture to support clinical genomic data sharing and provide a proof-of-concept implementation, called ConsentChain, for the architecture to explore its performance. METHODS The ConsentChain requirements were captured from a patient forum to identify security and consent concerns. The ConsentChain was developed on the Ethereum platform, in which smart contracts were used to model the actions of patients, who may provide or withdraw consent to share their data; the data creator, who collects and stores patient data; and the data requester, who needs to query and access the patient data. A detailed analysis was undertaken of the ConsentChain performance as a function of the number of transactions processed by the system. RESULTS We describe ConsentChain, a blockchain-based system that provides a web portal interface to support clinical genomic sharing. ConsentChain allows patients to grant or withdraw data requester access and allows data requesters to query and submit access to data stored in a secure off-chain database. We also developed an ontology model to represent patient consent elements into machine-readable codes to automate the consent and data access processes. CONCLUSIONS Blockchains and smart contracts can provide an efficient and scalable mechanism to support dynamic consent functionality and address some of the barriers that inhibit genomic data sharing. However, they are not a complete answer, and a number of issues still need to be addressed before such systems can be deployed in practice, particularly in relation to verifying user credentials.

The practice of active patient involvement in rare disease research using ICT: experiences and lessons from the RUDY JAPAN project

Background The role of patients in medical research is changing, as more emphasis is being placed on patient involvement, and patient reported outcomes are increasingly contributing to clinical decision-making. Information and communication technology provides new opportunities for patients to actively become involved in research. These trends are particularly noticeable in Europe and the US, but less obvious in Japan. The aim of this study was to investigate the practice of active involvement of patients in medical research in Japan by utilizing a digital platform, and to analyze the outcomes to clarify what specific approaches could be put into practice. Methods We developed the RUDY JAPAN system, an ongoing rare disease medical research platform, in collaboration with the Rare and Undiagnosed Diseases Study (RUDY) project in the UK. After 2 years of preparation, RUDY JAPAN was launched in December 2017. Skeletal muscle channelopathies were initially selected as target diseases, and hereditary angioedema was subsequently added. Several approaches for active patient involvement were designed through patient-researcher collaboration, namely the Steering Committee, questionnaire development, dynamic consent, and other communication strategies. We analyzed our practices and experiences focusing on how each approach affected and contributed to the research project. Results RUDY JAPAN has successfully involved patients in this research project in various ways. While not a part of the initial decision-making phase to launch the project, patients have increasingly been involved since then. A high level of patient involvement was achieved through the Steering Committee, a governance body that has made a major contribution to RUDY JAPAN, and the process of the questionnaire development. The creation of the Patient Network Forum, website and newsletter cultivated dialogue between patients and researchers. The registry itself allowed patient participation through data input and control of data usage through dynamic consent. Conclusions We believe the initial outcomes demonstrate the feasibility and utility of active patient involvement in Japan. The collaboration realized through RUDY JAPAN was enabled by digital technologies. It allowed busy patients and researchers to find the space to meet and work together for the Steering Committee, questionnaire development and various communication activities. While the practice of active patient involvement in Japan is still in its early stages, this research confirms its viability if the right conditions are in place. (331 words).

‘CTRL’: an online, Dynamic Consent and participant engagement platform working towards solving the complexities of consent in genomic research

The complexities of the informed consent process for participating in research in genomic medicine are well-documented. Inspired by the potential for Dynamic Consent to increase participant choice and autonomy in decision-making, as well as the opportunities for ongoing participant engagement it affords, we wanted to trial Dynamic Consent and to do so developed our own web-based application (web app) called CTRL (control). This paper documents the design and development of CTRL, for use in the Australian Genomics study: a health services research project building evidence to inform the integration of genomic medicine into mainstream healthcare. Australian Genomics brought together a multi-disciplinary team to develop CTRL. The design and development process considered user experience; security and privacy; the application of international standards in data sharing; IT, operational and ethical issues. The CTRL tool is now being offered to participants in the study, who can use CTRL to keep personal and contact details up to date; make consent choices (including indicate preferences for return of results and future research use of biological samples, genomic and health data); follow their progress through the study; complete surveys, contact the researchers and access study news and information. While there are remaining challenges to implementing Dynamic Consent in genomic research, this study demonstrates the feasibility of building such a tool, and its ongoing use will provide evidence about the value of Dynamic Consent in large-scale genomic research programs.