Which practice helps balance participant privacy with the value of future research when using existing data?

• A. For secondary use, always use identifiable data if consent exists.
• B. Ignore future use implications and proceed.
• C. Obtain consent or use de-identified data with governance and privacy protections.
• D. Only use data if it is anonymized.

Answer: (C)

When reusing existing data for future research, the best practice is to protect privacy while allowing valuable reuse by either obtaining consent for the secondary use or handling the data in a de-identified form with strong governance and privacy protections. Seeking consent respects participants’ autonomy and their wishes about future use, while de-identifying data reduces the risk of identifying individuals. Governance and privacy protections—such as data access controls, data-sharing agreements, minimization of data, and ethics oversight—provide ongoing safeguards as new research uses arise.

This approach is superior because it explicitly addresses privacy risk and the long-term value of data. Relying on identifiable data simply because consent exists can leave residual privacy concerns and isn’t necessary if privacy protections and governance are in place. Ignoring future use implications fails to anticipate evolving risks and uses. Requiring anonymization alone can be impractical or insufficient if re-identification is possible or if future research requires linking data, and it ignores the governance framework that governs how data are used over time.