REGULATION OF DECENTRALIZED CLINICAL TRIAL PLATFORMS USING BLOCKCHAIN SYSTEMS

1. INTRODUCTION

Decentralized clinical trials (DCTs) use digital technologies, remote consultations, wearable devices, electronic consent, and home-based assessments to conduct research outside conventional clinical sites. Blockchain technology can support these trials through tamper-evident records of consent, protocol amendments, data transfers, and research activities.

However, blockchain does not independently guarantee the accuracy of medical data, the validity of consent, or compliance with clinical-trial regulations. Legal regulation must protect participants, preserve reliable records, maintain confidentiality, and ensure accountability among sponsors, investigators, technology providers, and ethics committees.

2. LEGAL FRAMEWORK IN INDIA

A. NEW DRUGS AND CLINICAL TRIALS RULES, 2019

The New Drugs and Clinical Trials Rules, 2019, framed under the Drugs and Cosmetics Act, 1940, establish requirements for regulated clinical trials, including regulatory permissions, ethics committee oversight, informed consent, participant safety, and compensation for trial-related injury or death where applicable. Blockchain implementation does not replace these requirements. <Cite refs={["turn433082search36","turn433082search8"]}/>

Sponsors must ensure that decentralised procedures comply with the approved protocol and applicable regulatory requirements. Remote recruitment, electronic consent, digital monitoring, and home-based assessments should be appropriately documented and overseen.

B. INFORMED CONSENT AND ETHICAL REVIEW

Participants must receive appropriate information about the research, foreseeable risks, alternatives, and their rights. Electronic consent should preserve evidence of the information presented, the participant's decision, and the consent process.

Blockchain timestamps or digital signatures cannot cure consent obtained through coercion, inadequate disclosure, or a participant's inability to understand the information. Ethics committees must exercise their applicable review and oversight responsibilities.

C. DATA PROTECTION AND CYBERSECURITY

The Digital Personal Data Protection Act, 2023, and applicable rules and commencement provisions must be considered when personal data is processed digitally. Clinical platforms should implement appropriate access controls, security measures, and data-governance procedures.

Identifiable medical records, genetic information, and consent documents should not ordinarily be written directly to a broadly accessible blockchain. A safer architecture stores sensitive information in controlled systems and places only necessary hashes, timestamps, or references on the blockchain.

D. ELECTRONIC RECORDS AND AUDIT TRAILS

Blockchain records may help establish the history of clinical data, but sponsors must also preserve source documents, system validation evidence, audit trails, and records required by applicable law. International trials may additionally be subject to jurisdiction-specific electronic-record requirements, including United States FDA requirements where applicable. The FDA's October 2024 guidance addresses electronic systems, records, and signatures in clinical investigations. <Cite refs={["turn433082search0","turn433082search5"]}/>

3. PRINCIPAL REGULATORY REQUIREMENTS

A. SYSTEM VALIDATION: Platforms must be tested for accuracy, reliability, access restrictions, and intended functionality.

B. DATA INTEGRITY: Records should be attributable, legible, contemporaneous, original or appropriately verified, accurate, and reconstructable.

C. PRIVACY: Access should be limited according to authorised roles and legitimate research purposes. Correction, withdrawal, retention, and deletion procedures must account for applicable law and the technical limitations of immutable records.

D. PARTICIPANT SAFETY: Remote monitoring must provide procedures for identifying adverse events, escalating medical emergencies, and referring participants for appropriate clinical care.

E. ACCOUNTABILITY: Contracts should allocate responsibility for system failures, compromised credentials, inaccurate data, security incidents, and regulatory reporting.

4. RELEVANT CASE LAWS

1. SWASTHYA ADHIKAR MANCH v. UNION OF INDIA (2013–2014) — DIRECT CLINICAL-TRIAL AUTHORITY

The Supreme Court examined concerns regarding the regulation, supervision, and protection of participants in clinical trials in India.

Application: Decentralized platforms must not weaken regulatory oversight or participant protection merely because trial activities occur remotely. The case supports the importance of effective safeguards and accountable clinical-trial governance.

2. SAMIRA KOHLI v. DR. PRABHA MANCHANDA (2008) — DIRECT CONSENT PRINCIPLE; ANALOGOUS APPLICATION

The Supreme Court explained the requirements of valid medical consent, including adequate disclosure and consent for the procedure undertaken.

Application: Electronic consent must communicate material information and record a genuine decision by the participant. A blockchain entry alone does not establish informed or voluntary consent.

3. JUSTICE K.S. PUTTASWAMY (RETD.) v. UNION OF INDIA (2017) — DIRECT CONSTITUTIONAL PRIVACY AUTHORITY

The Supreme Court recognised privacy as a fundamental right under Article 21, including informational privacy.

Application: Digital trial platforms processing identifiable health information must take privacy seriously. Unnecessary disclosure, excessive collection, or unjustified access to participant records may raise legal concerns.

4. ARJUN PANDITRAO KHOTKAR v. KAILASH KUSHANRAO GORANTYAL (2020) — ANALOGOUS ELECTRONIC-EVIDENCE AUTHORITY

The Supreme Court clarified the requirements for admissibility of electronic records under Section 65B of the Indian Evidence Act, 1872, under the law applicable to the proceedings.

Application: Blockchain-based clinical records are not automatically admissible merely because they are tamper-evident. Evidentiary requirements, authenticity, system records, and applicable procedural law must still be satisfied. For proceedings governed by the Bharatiya Sakshya Adhiniyam, 2023, its electronic-record provisions must be considered instead.

5. JACOB MATHEW v. STATE OF PUNJAB (2005) — ANALOGOUS PROFESSIONAL-NEGLIGENCE AUTHORITY

The Supreme Court considered the legal standards for establishing criminal negligence in medical practice.

Application: Where a remote trial platform contributes to an alleged medical injury, liability must be assessed on the evidence and the applicable legal standards. Automation or blockchain infrastructure does not eliminate the responsibility of medical professionals or other legally accountable parties.

6. SHAFHI MOHAMMAD v. STATE OF HIMACHAL PRADESH (2018) — ANALOGOUS ELECTRONIC-EVIDENCE AUTHORITY

The Supreme Court addressed evidentiary requirements concerning electronic records. Its approach to the certificate requirement was subsequently reconsidered and clarified in Arjun Panditrao Khotkar.

Application: The case illustrates why electronic-record evidence must be assessed under the applicable evidentiary framework rather than accepted solely because it exists on a digital platform. Arjun Panditrao Khotkar should be consulted for the governing position on Section 65B under the former Evidence Act.

5. PRACTICAL COMPLIANCE AND RISK MANAGEMENT

Sponsors should establish clear governance for blockchain permissions, encryption, key management, system upgrades, and incident response. Personal data should generally remain off-chain, with carefully controlled references linking it to verified records.

Independent audits should test the platform's security and integrity. Trial protocols should specify which data is collected remotely, how measurements are validated, how participants contact clinicians, and how adverse events are escalated. Contracts must clearly allocate responsibilities among sponsors, investigators, vendors, and data processors.

6. CONCLUSION

Decentralized clinical trial platforms using blockchain can strengthen traceability and record integrity, but their use remains subject to clinical-trial regulation, informed-consent requirements, privacy protections, and evidentiary rules. Indian judicial decisions concerning clinical-trial safeguards, consent, privacy, negligence, and electronic evidence provide important legal principles, although none of the cited cases directly determines the legality of blockchain-based decentralized clinical trials.

The appropriate regulatory objective is to use blockchain as a supporting technology—not a substitute for ethical oversight, clinical judgment, validated systems, participant protection, or legal accountability.