Maryland

Enacted in 2002, the Maryland research law requires “a person conducting human subject research to comply with federal regulations on the protection of human subjects.”³ The Maryland law regulates “all research using a human subject,” regardless of whether such research is federally funded,⁴ and prohibits “a person” from “conduct[ing] research using a human subject unless the person conducts the research in accordance with the federal regulations on the protection of human subjects.”⁵ The law authorizes the Maryland Attorney General to seek injunctive and other relief to prevent the conduct of human subject research in violation of the Common Rule.⁶

The Maryland law is desirable in the context of mobile app-mediated research due to its unrestricted use of the word “person.” The Maryland law applies to all researchers, including traditional scientists, independent scientists, citizen scientists, and patient researchers, as well as any other person who conducts research.⁷ Other state research laws discussed below only apply to certain researchers, such as researchers who are licensed physicians or researchers who conduct research in licensed health care facilities.

A second desirable feature of the Maryland law is its definition of “federal regulations on the protection of human subjects.” The definition specifically references “Title 45, Part 46 of the Code of Federal Regulations [the Common Rule], and any subsequent revision of those regulations.”⁸ The Maryland law anticipates the possible revision of the Common Rule and expresses a clear desire for Maryland research to be conducted in accordance with the most current version of the Common Rule. If other states enacted laws like the Maryland law (or if the Maryland law were used as a model for a Uniform State Research Law), research regulation would be uniform among all fifty states and interpretation of such laws would be consistent with the Common Rule, greatly easing implementation, compliance, and enforcement efforts.

Virginia

The Virginia research law, enacted in 1979,⁹ has been amended several times. Currently, it regulates “human research,” defined as a “systematic investigation, including research development, testing and evaluation, utilizing human subjects, that is designed to develop or contribute to generalized knowledge.”¹⁰ Like the Maryland law, the Virginia law is not limited in application to federally-funded research.¹¹ Instead, it applies to any human research conducted by the State of Virginia and any political subdivision thereof, as well as “any facility, program, or organization owned or operated by … any person, firm, corporation, association, or other legal entity.”¹² As written, the Virginia law would apply to research programs owned or operated by independent scientists, citizen scientists, and patient researchers.

Unlike the Maryland law, which defers to the Common Rule, the Virginia law establishes its own unique research regulations, including detailed requirements for the formation of human research review committees,¹³ criteria for review committee approval of research,¹⁴ and mandatory informed-consent-to-research statements.¹⁵ If other states followed Virginia and established their own unique research protections, the result could be a patchwork of state laws. Compliance with this patchwork would prove difficult for mobile app-mediated researchers who collect data from study participants who reside in a variety of states.

The Virginia law does, however, appear to have contemplated that independent scientists might be involved in the conduct of human research and considered how best these independent researchers might be brought into the fold: “Every person engaged in the conduct of human research or proposing to conduct human research shall affiliate himself with an institution or agency having a research review committee, and the human research which he conducts or proposes to conduct shall be subject to review and approval by such committee in the manner set forth in [the Virginia law].”¹⁶ The Virginia law also mandates that review committees assess “whether the persons proposing to conduct the particular human research are appropriately competent and qualified.”¹⁷ These provisions, in theory, respond to the quality concerns associated with independent researchers and citizen scientists.^{Reference Rothstein18}

New York

Enacted in 1975, the New York research law establishes a policy of protecting state residents against “pain, suffering or injury resulting from human research conducted without their knowledge or consent.”¹⁹ To this end, the New York law regulates “human research” involving “human subjects” to the extent such research is not subject to the federal Common Rule.²⁰ The New York law broadly defines “human subjects” to include “any individual who may be exposed to the possibility of injury, including physical, psychological or social injury, as a consequence of participation as a subject in any research … ”²¹

At first glance, the New York law would appear to protect mobile research participants who could be psychologically or socially injured by privacy and security breaches involving research data. However, human subjects are only protected by the New York law if they participate in “human research,” defined narrowly as those investigations that involve physical or psychological intervention by the researcher on the body of the subject.²² The New York law thus does not protect participants of mobile app-mediated informational research. If “human subjects” are involved in “human research,” however, the New York law contains detailed requirements relating to the formation of human research review committees,²³ specific criteria for review committee approval of research,²⁴ and explicit informed-consent-to-research obligations.²⁵

A desirable feature of the New York law, like the Virginia law, is that it appears to have contemplated that independent scientists might be involved in the conduct of human research: “Each person engaged in the conduct of human research or proposing to conduct human research shall affiliate himself with an institution or agency having a human research review committee, and such human research as he conducts or proposes to conduct shall be subject to review by such committee in the manner set forth in [the New York law].”²⁶ The New York law also requires review committees to determine “that the persons proposed to conduct the particular medical research are appropriately competent and qualified,”²⁷ thus potentially responding to quality concerns associated with citizen science and other forms of unregulated research.²⁸

California

Signed into law in 1978, the California Protection of Human Subjects in Medical Experimentation Act (California law) recognizes that “medical experimentation on human subjects is vital for the benefit of mankind, however such experimentation shall be undertaken with due respect to the preciousness of human life and the right of individuals to determine what is done to their own bodies.”²⁹ To this end, the California law establishes a detailed “bill of rights”³⁰ as well as a series of explicit informed consent requirements³¹ designed to benefit subjects of medical experiments.³²

However, the California law only applies to “medical experiments,” narrowly defined to include the “severance or penetration or damaging” of tissues of a human subject as well as the use of certain drugs, devices, and substances. The California law thus would not apply to many mobile app-mediated research projects due to the research participants’ lack of physical involvement. That said, some internet-mediated research studies have involved participants’ ingestion of drugs, such as lithium,^{Reference Wicks33} and these types of studies might be captured by the California law.

Illinois

The Illinois law, “An Act Concerning Certain Rights of Medical Patients,” was enacted in 1979. As currently written, the Illinois law requires physician researchers who conduct research programs or experimental procedures involving hospital inpatients and outpatients to provide those patients with an “explanation of the nature and possible consequences of [the] research or experiment before the research or experiment is conducted” as well as the opportunity to consent, or refuse to consent, to research participation.³⁴ The Illinois law further specifies that no physician shall conduct a research program or an experimental procedure without the prior informed consent to research of the patient.³⁵

Regulations implementing the Illinois law define a “research program” as an “organized activity intended to establish new medical or scientific information, involving medical, surgical, manipulative, or psychiatric diagnosis or treatment of human subjects who are inpatients or outpatients of a hospital and who are subjects at risk.”³⁶ The regulations further define “experimental procedures” as “the use of medical, surgical, manipulative, or psychiatric procedures, drugs, or devices for purposes of diagnosis or treatment of human subjects who are inpatients or outpatients of a hospital and who are subjects at risk.”³⁷ As a result of these limited definitions, the Illinois law would not apply to mobile app-mediated research studies conducted by non-physician researchers and/or involving non-hospital patients.

Florida

Enacted in 1991, the “Florida Patient’s Bill of Rights and Responsibilities” was intended to “promote the interests and well-being of the patients of health care providers and health care facilities and to promote better communication between the patient and the health care provider.”³⁸ To this end, and among many other requirements, the Florida law establishes certain notification and consent requirements applicable to experimental research.³⁹ In particular, the Florida law provides: “a patient has the right to know if medical treatment is for purposes of experimental research and to consent prior to participation in such experimental research.”⁴⁰

The Florida law, however, only applies to patients of health care providers and health care facilities.⁴¹ The Florida law thus would not apply to mobile app-mediated research studies conducted by non-health care providers who work outside traditional, bricks-and-mortar health care facilities.

Wisconsin

A final, illustrative state research law, enacted in Wisconsin in 1976, establishes a right of patients not to be subjected to experimental research without informed consent and the duty of researchers to conduct research in accordance with the Common Rule.⁴² However, the Wisconsin law only protects “patients,” defined as certain individuals with mental illness, developmental disabilities, alcoholism, or drug dependency who receive treatment for such conditions in certain licensed health care facilities.⁴³ Because mobile app-mediated research can involve participants who do not have mental illness and/or who do not receive mental health care in a licensed health care facility, the Wisconsin law does not adequately respond to the ethical and legal concerns associated with mobile app-mediated health research.