Framework for Harmonizing Consent Across Countries

1. Introduction

Harmonization of consent across countries refers to the development of common principles, procedures, and safeguards for obtaining valid consent in activities that cross national borders. It is particularly important in medical research, clinical trials, biotechnology, artificial intelligence, digital data processing, genetic research, and international commercial transactions.

Different jurisdictions follow different legal standards concerning informed consent, contractual capacity, disclosure of risks, data protection, withdrawal of consent, and the rights of vulnerable individuals. For example, European data protection law places considerable emphasis on freely given and specific consent, while Indian medical jurisprudence emphasises voluntary, competent, and adequately informed consent. These differences can create uncertainty for organisations conducting multinational research or providing services across borders.

The objective of harmonization is not to replace national laws with a single universal rule. Instead, it is to establish minimum common standards while respecting domestic legislation, cultural differences, constitutional protections, and individual autonomy.

2. Fundamental Principles of Consent Harmonization

A. Voluntary and Informed Consent

Consent must be given freely, without coercion, deception, undue influence, or inappropriate pressure. Individuals should receive understandable information about the purpose, nature, risks, benefits, alternatives, and consequences of the activity for which consent is requested.

A harmonized system should ensure that consent is meaningful rather than merely a signature on a standard form.

B. Capacity and Legal Competence

Countries differ in their rules concerning minors, persons with disabilities, guardianship, and decision-making capacity. International frameworks should establish procedures for assessing capacity and obtaining legally authorised representative consent where permitted. They should also respect the person's own wishes, involvement, and evolving capacity.

C. Specificity and Purpose Limitation

Consent for one activity should not automatically authorise unrelated activities. For instance, consent to participate in a clinical trial should not necessarily authorise indefinite commercial use of biological samples or transfer of identifiable health information to unrelated companies.

D. Transparency and Comprehensibility

Consent documents should use clear language and be translated into languages understood by participants. Technical terminology should be explained, and participants should have an opportunity to ask questions. Digital consent systems should be accessible to individuals with disabilities and those with limited digital literacy.

E. Right to Withdraw

Individuals should be informed about whether and how they can withdraw consent, what happens to information already collected, and whether withdrawal affects their access to services or treatment. Withdrawal cannot always reverse completed research or require deletion where another lawful basis for retention applies.

3. International Legal Framework

A. European Union: General Data Protection Regulation

The General Data Protection Regulation (GDPR), particularly Articles 4(11), 7, and 9, provides an important model for consent harmonization. Article 4(11) defines consent through the requirements of being freely given, specific, informed, and unambiguous. Article 7 addresses proof of consent and withdrawal, while Article 9 establishes additional restrictions concerning special categories of personal data.

EUR-Lex

B. India: Constitutional and Statutory Protection

The Indian framework combines the fundamental right to privacy recognised in Justice K.S. Puttaswamy v. Union of India (2017) with applicable data protection, medical, and contractual laws. The Digital Personal Data Protection Act, 2023, is relevant to consent for digital personal data within its scope. Harmonization must account for applicable Indian requirements rather than assume that a foreign consent form automatically satisfies domestic law.

C. International Research Standards

The Declaration of Helsinki and the CIOMS International Ethical Guidelines provide important ethical guidance for medical research involving human participants. They emphasise informed consent, participant welfare, independent ethical review, and additional safeguards for vulnerable populations. These standards can support consistent research protocols across participating countries, although their legal force depends on the applicable jurisdiction and institutional framework.

4. Important Case Laws

1. Samira Kohli v. Dr. Prabha Manchanda, (2008) 2 SCC 1

The Supreme Court of India held that valid medical consent must be voluntary, given by a competent person, and based on adequate information. Consent for a diagnostic procedure does not ordinarily authorise a different therapeutic procedure, subject to a narrow emergency exception.

The case supports harmonized standards requiring procedure-specific consent and respect for patient autonomy.

2. Planet49 GmbH, Case C-673/17 (2019)

The Court of Justice of the European Union held that pre-ticked boxes do not constitute valid consent for the relevant cookie-storage activities under EU law. Consent requires an active expression of choice, rather than silence or inactivity.

EUR-Lex

This decision illustrates how courts can establish common minimum standards for digital consent and prevent organisations from relying on ambiguous interface designs.

3. Data Protection Commissioner v. Facebook Ireland Ltd and Maximillian Schrems, Case C-311/18 (2020)

In Schrems II, the Court of Justice of the European Union invalidated the EU–US Privacy Shield framework and examined safeguards governing international personal-data transfers. The judgment demonstrates that consent harmonization cannot be separated from cross-border transfer rules, government-access risks, and enforceable data protection safeguards.

EUR-Lex

5. Practical Mechanism for Harmonization

A workable international framework should include:

Common minimum standards: Establish baseline requirements for voluntary, informed, specific, and documented consent wherever applicable.

Jurisdictional compliance review: Identify the laws of every relevant country before collecting information or commencing research.

Standardised consent documentation: Use a common core consent form with jurisdiction-specific additions.

Cross-border safeguards: Document international transfers, recipient responsibilities, security measures, and applicable legal mechanisms.

Withdrawal and complaint procedures: Provide accessible methods for withdrawing consent and addressing grievances.

Regular audits: Review consent validity when research purposes, technologies, participating countries, or data recipients change.

6. Conclusion

Harmonizing consent across countries requires a balance between international consistency and national legal autonomy. The GDPR, Indian privacy jurisprudence, and the decisions in Samira Kohli, Planet49, and Schrems II demonstrate the importance of meaningful choice, adequate disclosure, purpose limitation, and effective safeguards.

The most practical approach is a common international baseline supported by country-specific legal review, transparent documentation, and enforceable accountability. Such a framework can facilitate international research and commercial cooperation without compromising individual autonomy or domestic legal protections.