The ethics chain that turned consent from a conversation into a document, told in order, with what each instrument actually is. Written for anyone who has handed someone a consent form without knowing where it came from.

In this file:

·        Why the form exists, in the order the failures happened

·        Ethical code, statute, regulation, report: 4 different kinds of thing

·        What the 2018 Common Rule actually changed about the form itself

·        The gap that is still open, in the same building

In 1963, at a hospital in Brooklyn, investigators injected live cancer cells into elderly patients. Patients who were capable of consenting were not told the cells were cancerous. Many others were incapacitated, or did not speak English.

That’s the case worth starting with, and not the one most people expect, because it’s the one that removes the comfortable explanation. Nuremberg could be filed away as something done by war criminals in another country. Brooklyn was a hospital, with federal money, in 1963.

Then Willowbrook, where children with intellectual disabilities were deliberately infected with hepatitis. The National Academies' own account notes that the consent form "might have been misleading," and that parents may have faced undue influence connected to their child's place on an admission waiting list.

And Tuskegee, running the whole time. From 1932 to 1972 the US Public Health Service followed 600 Black men in Macon County, Alabama, 399 with syphilis and 201 as controls, without informed consent, and didn’t offer them penicillin after it became the treatment of choice for syphilis in 1943.

Three failures, 3 decades, none of them secret at the time. Each one produced a document, and every consent form handed over at a site today is the accumulated residue of all of them.

Here’s the part this series exists to teach, and almost nobody teaches it. These documents are not the same kind of thing as each other. Knowing which is which is the difference between understanding this system and reciting it.

The Nuremberg Code, August 1947. An ethical code, written by judges. It came out of the American military tribunal at Nuremberg, in the doctors' trial. Not a legislature, not a regulator, not a professional body. Judges, ruling on a criminal case, who set out 10 principles for permissible human experimentation. Principle 1 reads, in full: "The voluntary consent of the human subject is absolutely essential."

That sentence is the origin of everything downstream, and it had no enforcement machinery whatsoever.

The Declaration of Helsinki, June 1964. A professional association's own policy. Adopted by the World Medical Association. It is not law anywhere by itself, it binds through adoption into national rules, journal requirements and sponsor policy, and it has been amended repeatedly: the WMA records 10 amendments since 1964, most recently in October 2024, at its 75th General Assembly, in Helsinki.

Read that revision count as the real story. This is the most rewritten document in this timeline, because each rewrite followed an argument the previous text had lost.

1962. Consent enters US statute, with an escape hatch. The Drug Amendments of that year required investigators to certify that they would inform people that a drug was being used for investigational purposes and obtain their consent, "except where they deem it not feasible or, in their professional judgment, contrary to the best interests of such human beings."

Look at that clause. Consent was required unless the investigator decided otherwise, and the person deciding was the person who wanted the study to proceed. That is why statute alone was not enough, and it is the single best illustration in this file of a rule that exists on paper and not in practice.

The National Research Act, 12 July 1974. A statute. Passed after Tuskegee became public. It required IRB review of federally funded human subjects research and created the national commission that would go on to write the next document.

The Belmont Report, 18 April 1979. A report, not a rule. Three principles: respect for persons, beneficence, justice. It has no enforcement power of its own and it is the philosophical spine every IRB in the country still works from. In ordinary practice, respect for persons is operationalized as informed consent, beneficence as risk and benefit assessment, and justice as equitable selection of subjects. That mapping is standard practice rather than a quotation from the report.

The Common Rule, 1991. Regulation, finally. HHS revised its human subjects regulations and 15 federal departments and agencies adopted a common version, which is where the name comes from. Regulation is the level with teeth: it binds, it is enforceable, and it is also the slowest moving layer in this entire system.

The revised Common Rule. Published 19 January 2017 at 82 Federal Register 7149, effective after 2 delays on 21 January 2019. The single IRB requirement for cooperative research followed on 20 January 2020.

For anyone who works with the form itself, 3 changes matter. Consent forms must now begin with a concise, focused presentation of the key information a reasonable person would want in deciding whether to participate, rather than burying it after 14 pages of boilerplate. Broad consent became available as an alternative pathway for storage and secondary research use of identifiable biospecimens and private information. And for Common Rule supported clinical trials, a copy of the consent form has to be posted publicly.

That first one is the most quietly radical thing in the list. It is a regulation about the order in which information appears, written because everyone knew nobody was reading past page 2.

Two gaps, and the first one is live right now.

FDA's own regulations are not harmonized with the 2018 Common Rule. Section 3023 of the 21st Century Cures Act, signed 13 December 2016, directs the Secretary to harmonize the differences between the HHS human subjects regulations and FDA's. FDA issued a proposed rule, "Protection of Human Subjects and Institutional Review Boards," on 28 September 2022, and its comment period closed that November. As of the preparation of this issue in September 2026, no final rule has been found. One piece has moved. In December 2023, FDA finalized a narrower rule, 21 CFR 50.22, letting IRBs waive or alter consent for some minimal risk studies on the same criteria the Common Rule uses. The broader harmonization rule is the one still waiting.

You can see the gap in the regulation's own history. 21 CFR 50.25, the section listing the required elements of informed consent, originated in January 1981 and was last amended in January 2011. That is 7 years before the Common Rule it is supposed to match took effect.

The practical consequence, and this is the sentence to keep: an FDA regulated trial and an HHS funded trial can be running in the same building, on the same day, under 2 different consent and continuing review regimes. Nearly 10 years after Congress told the agencies to fix it.

And Belmont's third principle never got machinery. Respect for persons became a consent form. Beneficence became an IRB risk and benefit review. Justice became a word in a report. There is no form, no committee and no signature line anywhere in this system that enforces equitable selection of subjects, which is why the enrollment gaps in that area are measured rather than prevented.

Change Control. Current: the 2018 Requirements of the Common Rule, 45 CFR 46 subpart A, general compliance from 21 January 2019, single IRB requirement from 20 January 2020. Supersedes: the 1991 Common Rule. Partly aligned since December 2023 on minimal risk consent waivers (21 CFR 50.22). Otherwise not aligned with it: FDA's 21 CFR Parts 50 and 56, where the informed consent elements at 50.25 were last amended in January 2011. Next: FDA's harmonization rule, proposed 28 September 2022, still not final as of September 2026. Recheck this box before quoting it, because it is the most likely line in this issue to go stale.

Note to File. Consent is a process, and the form is the receipt. That distinction sounds like a slogan until the day an inspector asks you to prove it, at which point the only evidence that a process happened is what you wrote in the note: who explained it, how long it took, what was asked, and that the person had time to decide. A signature on a page proves a page was signed. And check the version. Consenting somebody on a superseded form is one of the most common and most avoidable deviations at a site, and it happens because the current version arrived by email on a Friday.

Know which regime your study runs under. FDA regulated, Common Rule funded, or both. The answer changes which consent elements apply and what continuing review looks like, and until the harmonization rule lands, being able to say which one you are under is a genuine mark of competence.

Read the key information section of your own consent form as a reader would. It is a regulatory requirement that the first thing on the page is the information a reasonable person would want. If your form's opening page still reads like a liability waiver, that is a finding waiting to happen.

Learn to say which kind of instrument you are citing. "The Declaration of Helsinki says" and "the regulation requires" are not the same claim, and using them interchangeably in front of a monitor or an interviewer is the fastest way to reveal that the vocabulary was learned from a slide deck.

The consent form exists because voluntary consent failed repeatedly, in ordinary hospitals, with public money, into the 1970s. The documents that responded are 4 different kinds of thing: the Nuremberg Code of August 1947 is an ethical code written by judges, the Declaration of Helsinki of June 1964 is a professional body's own policy that has been amended 10 times, most recently in October 2024, the Belmont Report of 18 April 1979 is a report with no enforcement power, and the Common Rule of 1991, revised in 2017 with a compliance date of 21 January 2019, is regulation, which is the only layer that binds. Consent first entered US statute in 1962 with an exception that let the investigator decide it was not feasible. And the chain is not finished: Congress directed FDA and HHS to harmonize their human subjects regulations in December 2016, FDA proposed a rule in September 2022, and as of September 2026 that rule is still not final, which means 2 different consent regimes are running in the same buildings right now.

Consent became a document because it kept failing as a conversation. The document is now on its fourth or fifth revision depending on which system you are counting, and the 2 halves of the US system still do not match.

Reply to this email or leave a comment on the newsletter: when you signed a consent form, or explained one, what was the part nobody read closely? Every query gets read, and the best ones get answered in a future issue.

Know someone training for their first coordinator job, or thinking about one? Send them this issue with your own referral link below, so the share counts. The Open Site File is written for exactly that person.

The Open Site File is one part of Root to Rx, and we all work toward the same thing: making clinical research easier to understand and harder to misrepresent. Monday, The Root Room shows a real health claim trying to work on someone. Wednesday, Plain Talk takes one topic from the news apart in plain language, with the receipts. Sunday, The Roots, on LinkedIn, is a letter for the people whose family treats them as the medical desk. And twice a week, The Open Site File shows you the inside of the site, where the people who make trials run actually work. Different doors, one mission: more people who understand how medicine gets made, and fewer people misled about it.

·        Previous issue: Issue 16, what happens when a patient misses a study visit

·        Next issue: Issue 18, what happens when someone leaves a trial early

·        The series this belongs to: Version History, the dated log of why the rules exist.

·        Related: Issue 13, GCP has a version number

·        For the people whose family treats them as the medical desk: The Roots, our weekly letter.

·        Helping a patient or family member look for a study? A walkthrough of the public trial registries.

·        Patient materials, including a medication and supplement log modeled on the conmed logs used in trials: shop.roottorx.com.

·        United States Holocaust Memorial Museum, The Nuremberg Code

·        World Medical Association, Declaration of Helsinki, including the full amendment history

·        Centers for Disease Control and Prevention, The Tuskegee Timeline

·        National Research Act of 1974, Public Law 93-348

·        The Belmont Report, 44 Federal Register 23192, 18 April 1979

·        HHS OHRP, Revised Common Rule, 82 Federal Register 7149, 19 January 2017, and the compliance date delays

·        21 CFR 50.25, Elements of informed consent, with its amendment history (eCFR)

·        FDA, Institutional Review Board Waiver or Alteration of Informed Consent for Minimal Risk Clinical Investigations, final rule, Federal Register, 21 December 2023

·        FDA, Protection of Human Subjects and Institutional Review Boards, proposed rule, 28 September 2022

·        21st Century Cures Act, Public Law 114-255, section 3023

•  •  •

The Open Site File is general education about how clinical research sites work. It is not regulatory, legal, or medical advice, and it is not tied to any specific study, sponsor, or employer. If you are in a trial, your study team and your own doctor are the right people to ask about your situation. Always follow your own site’s SOPs, your protocol, and your PI and QA team. Names and characters are invented composites.

Disclosure: The Open Site File is part of Root to Rx, published independently by Open Label Media LLC. Views expressed are personal views of Justin Yamashita and do not represent his employer or any affiliated organization. No employer resources or proprietary information are used. Every claim is sourced from publicly available materials.

Filed by Justin Yamashita, MSc., Open Label Media

Next in the file: Issue 18, the difference between stopping the drug and leaving the study.