Big data trends in biomedical and health research enable large-scale and multi-dimensional aggregation and analysis of heterogeneous data sources, which could ultimately result in preventive, diagnostic and therapeutic benefit. The methodological novelty and computational complexity of big data health research raises novel challenges for ethics review. In this study, we conducted a scoping review of the literature using five databases to identify and map the major challenges of health-related big data for Ethics Review Committees (ERCs) or analogous institutional review boards. A total of 1093 publications were initially identified, 263 of which were included in the final synthesis after abstract and full-text screening performed independently by two researchers. Both a descriptive numerical summary and a thematic analysis were performed on the full-texts of all articles included in the synthesis. Our findings suggest that while big data trends in biomedicine hold the potential for advancing clinical research, improving prevention and optimizing healthcare delivery, yet several epistemic, scientific and normative challenges need careful consideration. These challenges have relevance for both the composition of ERCs and the evaluation criteria that should be employed by ERC members when assessing the methodological and ethical viability of health-related big data studies. Based on this analysis, we provide some preliminary recommendations on how ERCs could adaptively respond to those challenges. This exploration is designed to synthesize useful information for researchers, ERCs and relevant institutional bodies involved in the conduction and/or assessment of health-related big data research.

The SARS-CoV-2 pandemic is a public health challenge of unprecedented scale. In the midst of the first wave of the pandemic, governments worldwide introduced digital contact tracing systems as part of a strategy to contain the spread of the virus. In Europe, after intense discussion about privacy-related risks involving policymakers, technology experts, information technology companies, and—albeit to a limited extent—the public at large, technical protocols were created to support the development of privacy-compatible proximity tracing apps. However, as the second wave of SARS-CoV-2 sweeps the continent, digital contact tracing in Europe is evolving in terms of both technological and governance features. To enable policymakers to harness the full potential of digital health tools against SARS-CoV-2, this paper examines the evolution of digital contact tracing in eight European countries. Our study highlights that while privacy and data protection are at the core of contact tracing apps in Europe, countries differ in their technical protocols, and in their capacity to utilize collected data beyond proximity tracing alone. In particular, the most recently released apps tend to offer users more granular information about risk in specific locations, and to collect data about user whereabouts, in order to enhance retrospective contact tracing capacity. These developments signal a shift from a strict interpretation of data minimization and purpose limitation toward a more expansive approach to digital contact tracing in Europe, calling for careful scrutiny and appropriate oversight.

Background Ethics review is the process of assessing the ethics of research involving humans. The Ethics Review Committee (ERC) is the key oversight mechanism designated to ensure ethics review. Whether or not this governance mechanism is still fit for purpose in the data-driven research context remains a debated issue among research ethics experts. Main text In this article, we seek to address this issue in a twofold manner. First, we review the strengths and weaknesses of ERCs in ensuring ethical oversight. Second, we map these strengths and weaknesses onto specific challenges raised by big data research. We distinguish two categories of potential weakness. The first category concerns persistent weaknesses, i.e., those which are not specific to big data research, but may be exacerbated by it. The second category concerns novel weaknesses, i.e., those which are created by and inherent to big data projects. Within this second category, we further distinguish between purview weaknesses related to the ERC’s scope (e.g., how big data projects may evade ERC review) and functional weaknesses, related to the ERC’s way of operating. Based on this analysis, we propose reforms aimed at improving the oversight capacity of ERCs in the era of big data science. Conclusions We believe the oversight mechanism could benefit from these reforms because they will help to overcome data-intensive research challenges and consequently benefit research at large.

Patient-facing mobile health applications (apps) hold the promise to change the way individuals take responsibility for their own health by enabling more effective delivery of health information, allowing better monitoring of symptoms, and encouraging healthier lifestyles. 1 Enthusiasm about the potential of health apps has grown rapidly, generating uncertainty as to who should regulate such apps and how. In most countries, medical device regulation applies only to a subset of high-risk health apps that have well defined medical purposes. However, most health apps available on the market target a wide range of healthrelated issues, including diet and exercise, pregnancy, and mental health, while still being considered nonmedical devices. These apps can collect a variety of personal data 2 and, because they are designed to affect health, it is important to ensure their safety, validity, reliability, privacy, and security. Many low-quality health apps exist that, as well as providing advice that is incomplete, misleading, or wrong, might also fall short of meeting the expected standards in privacy and security. 3,4 In a 2017 report, the Organisation for Economic Co-Operation and Development (OECD) concluded that the use of low-quality, non-medical health apps raises a wide range of ethical, legal, and governance issues, and pointed to the need for international agreement on minimum standards in quality assurance controls. 5 We examined guidance for the development of safe, secure, and reliable apps issued by data protection authorities in nine OECD countries (see appendix for methodological details). All these authorities had reported guidance relating to mobile apps in response to the 2017 Census of the International Conference on Data Protection and Privacy Commissioners. We also examined guidance by national health authorities in the same nine countries, and international guidance issued by WHO and the European Commission (EC). We did a comparative assessment of the guidance against the qualitative indicators and the principles and best practices set out in the 2013 OECD Privacy Guidelines and the 2016 OECD Recommendation on Health Data Governance (appendix).

Big data trends in health research challenge the oversight mechanism of the Research Ethics Committees (RECs). The traditional standards of research quality and the mandate of RECs illuminate deficits in facing the computational complexity, methodological novelty, and limited auditability of these approaches. To better understand the challenges facing RECs, we explored the perspectives and attitudes of the members of the seven Swiss Cantonal RECs via semi-structured qualitative interviews. Our interviews reveal limited experience among REC members with the review of big data research, insufficient expertise in data science, and uncertainty about how to mitigate big data research risks. Nonetheless, RECs could strengthen their oversight by training in data science and big data ethics, complementing their role with external experts and ad hoc boards, and introducing precise shared practices.