I. Introduction
In our twenty-first century globalised world, people can travel across borders faster than ever before, which significantly increases the speed and volume of transmission of infectious diseases around the globe.Footnote 1 An infectious disease pandemic has been called the “biggest threat to humanity” and more and more scientists are expressing concern about the world not being at all prepared to handle a major infectious disease pandemic.Footnote 2 Since infectious diseases do not respect borders, an outbreak can only efficiently be countered if countries join forces, both at the European Union (EU) and international level.Footnote 3 In order to regulate risks of such “serious cross-border threats to health” to ensure a high level of human health, an adequate level of preparedness and response is required.Footnote 4 In view thereof, the EU coordinates Member States to establish so-called “pandemic preparedness and response plans”.Footnote 5
In the past the EU has taken various “public health measures” to combat severe communicable disease outbreaks such as the 2005 bird flu outbreak (H5N1) and the outbreak of swine flu in 2009 (H1N1).Footnote 6 Although formally the EU’s powers are restricted to the coordination of public health threat surveillance and risk assessment,Footnote 7 the EU has assumed a more extensive role in the development of countermeasures.Footnote 8 In response to the 2013–2016 Ebola outbreak in West Africa, the EU took several countermeasures in the Member States to prevent the virus from spreading to the EU.Footnote 9 The development of a more “supranational” EU approach to tackle future pandemics could affect individual patients’ rights, because the rights of individual European citizens are balanced against the importance of protecting the European community as a whole.Footnote 10 This seems to constitute a tension between public health and individual rights in the EU. While public health laws and policies seek “to pursue the highest possible level of physical and mental health in the population”,Footnote 11 these laws and policies can constrain civil and social rights of individuals in the same population.Footnote 12 This conflict between individual fundamental rights and public health becomes even more evident in public health crises caused by global pandemics such as Ebola.Footnote 13
The right to informed consent is central to health law and policy, as it encompasses the fundamental rights to self-determination and human dignity.Footnote 14 The right to informed consent is unique in the way it is both linked to physical integrity and privacy issues. It relates to consent to medical treatment and participation in clinical trials as well as the sharing of personal (medical) data.Footnote 15 The increasing role of the EU in policies on public health crises brings into question the effect of the EU’s choices regarding the balance between public health and individual rights on the protection of the right to informed consent, which may well be impacted by the EU’s pandemic countermeasures.
Against this background, the purpose of this article is to examine whether the right to informed consent is adequately safeguarded in the context of EU policy on pandemic preparedness and response in Europe. In order to answer this question, section II introduces the problems that EU Ebola policies may cause for the protection of informed consent in the Member States. Section III provides a short overview of the protection of the right to informed consent in EU instruments. Subsequently, section IV conducts a legal case study on the national response of the Netherlands to the 2013–2016 Ebola outbreak in West Africa. The first part of this section examines both the EU’s and the Dutch government’s countermeasures in respectively the EU and the Netherlands during the 2013–2016 Ebola outbreak. The second part of this section then analyses the impact of EU coordination on the protection of the right to informed consent at the national level. In this analysis, a distinction is made between de jure and de facto impact, as the legislative competence of the EU is limited in the field of health, and EU health policy rarely articulates national obligations.Footnote 16 From this case study analysis is concluded that the actions taken at the EU level with regard to public health emergencies, even when only of advisory nature, affect national pandemic policies. Following on from this, it is concluded that EU pandemic policies also impact on the protection of fundamental rights in the Member States, informed consent in particular.
II. Informed consent in EU Ebola preparedness and response policies: impact of EU coordination on the protection of human rights?
The haemorrhagic fever Ebola virus disease (Ebola) is often referred to as “the killer virus” due to the average fatality rate of 50%. It spreads via direct contact with bodily fluids of infected persons and materials contaminated with infected fluids.Footnote 17 Unsurprisingly, the widespread outbreak of Ebola in West Africa in December 2013 caused worldwide concern. This resulted in the EU taking several preventive and responsive measures in order to prevent the virus from spreading to EU Member States and causing a large-scale outbreak there.Footnote 18 EU policy regarding communicable disease control is highly scattered through different institutions and actors in the EU, the most important being the European Centre for Disease Prevention and Control (ECDC) and the European Medicines Agency (EMA).Footnote 19 Formally, with regard to serious cross-border threats to health such as pandemics, EU action is limited to carrying out actions to support, coordinate or supplement action by the Member States, adopting incentive measures and issuing recommendations.Footnote 20 EU pandemic countermeasures taken by these institutions, however, consist of medical countermeasures, surveillance countermeasures and further “soft” countermeasures.Footnote 21 The EU legal framework for health emergency prevention and response is provided for in Decision 1082/2013 (EU Health Threats Decision).Footnote 22
While addressing health emergencies at the EU level may lead to stronger cooperation between Member States which will eventually contribute to a more effective response to pandemic threats,Footnote 23 pandemic preparedness and response policies may have far-reaching implications for the manner in which Member States handle specific health emergencies.Footnote 24 As a result, EU pandemic policies may also affect the protection of individual rights at the national level, specifically the right to informed consent.Footnote 25 In the case of the 2013–2016 Ebola outbreak in West Africa, the EU and Member States introduced multiple pandemic policies in the EU out of precaution. However, few pandemic measures actually had to be taken, since the impact of the Ebola outbreak on the EU territory was limited.Footnote 26 Therefore, the case study on the national response of the Netherlands to the 2013–2016 Ebola outbreak in West Africa focuses on the legal possibility for safeguarding informed consent if national pandemic response measures had been taken in light of the 2013–2016 Ebola outbreak. In spite of the lack of actual implementation of the measures, this case study provides important insights for the effects of EU pandemic policies on the national order, as it shows the willingness of Member States to take certain measures in case of a cross-border health emergency. In order to provide the normative framework to analyse the impact of EU pandemic policies on the protection of informed consent in the Member States, the subsequent sections will elaborate on the scope and extent of the right to informed consent and its protection in the EU.
III. The scope and the extent of the right to informed consent
The right to informed consent is a central patient right and is strongly protected in a majority of EU Member States.Footnote 27 It is rooted in the idea that sufficient information has to be provided for patients to make autonomous decisions about their bodies. The Greek physician Hippocrates first laid the foundation of the right to informed consent in the patient-doctor relationship around 400 BC, promoting the voluntary and informed relationship between doctors and patients.Footnote 28 The principle of informed consent was first legally recognised with regard to clinical research and bioethics after World War II in the Nuremberg Code and the Helsinki Declaration, to prevent the horrifying medical experiments performed by Nazi doctors like Josef Mengele from ever happening again.Footnote 29 The use of informed consent in relation to personal data arose later, in response to developing technology and the emergence of “big data”.Footnote 30
Del Carmen and Joffe have identified five conditions for valid informed consent to medical treatment: voluntarism; capacity; understanding; disclosure; and decision.Footnote 31Voluntarism assumes the patient to individually form his will, free from coercion or controlling influences. The element of capacity refers to the patient’s competence to make a decision. A patient is only said to be capable of making a specific decision if he is capable of making choices, understanding critical information and have sufficient “rational” capacity to comprehend the implications of choices. This also implies legal capability to make decisions. Understanding involves the patient’s full comprehension of the provided information and its implications for his personal situation. Disclosure refers to providing the patient with the relevant information in order to fully understand the action, including the character, objective, risks, benefits and alternative options. Decision means the patient has to actively consent to the proposed action.Footnote 32 These five elements can well be used in ascertaining valid informed consent to participate in research, with the additional requirement that the patient’s decision is “written, dated and signed”.Footnote 33 Furthermore, this interpretation is in accordance with the General Data Protection Regulation’s (GDPR) definition of informed consent to the processing of personal (medical) data.Footnote 34
1. The level of protection of the right to informed consent in the EU
The right to informed consent with regard to medical treatment, clinical trials and personal medical data is protected in several EU provisions.Footnote 35 In the context of the EU, Article 3 of the Charter of Fundamental Rights of the European Union (CFR), the right to the integrity of the person, protects informed consent most directly, as it specifically refers to the right to “free and informed consent” in the fields of medicine and biology.Footnote 36 Articles 7 and 8 CFR state that personal data must be processed on the basis of “consent”. Furthermore, the right to informed consent of subjects in clinical trials is protected in the EU Clinical Trials Regulation,Footnote 37 and the GDPR requires explicit and informed consent to the processing of personal health data.Footnote 38 Last, the right to informed consent in relation to cross-border health care is protected in Directive 2011/24/EU.Footnote 39 Nonetheless, jurisprudence of the Court of Justice of the European Union (CJEU) contains few cases concerning the right to informed consent in relation to medical contexts.Footnote 40 Therefore, the EU offers limited protection to the right to informed consent.
At the level of the Council of Europe, however, the right to informed consent is more extensively protected, in particular in the European Convention on Human Rights (ECHR),Footnote 41 the European Convention on Human Rights and Biomedicine (Oviedo Convention)Footnote 42 and the jurisprudence of the European Court of Human Rights (ECtHR). This has important implications for the level of protection of informed consent in the EU. While the EU is not directly bound by the ECHR and the ECtHR’s case law, the EU acknowledges that many of the rights enshrined in the CFR correspond to those in the ECHR and shall have the same meaning and scope.Footnote 43 Furthermore, the ECHR is part of the general principles of EU law and can therefore be applied indirectly by the CJEU.Footnote 44 On top of that, while the Oviedo Convention cannot be enforced by the ECtHR, it is frequently referred to by the ECtHR and used as an interpretation tool to the ECHR and national legislation.Footnote 45 As a result, the ECtHR’s case law on the right to informed consent can be applied to both Member States and EU institutions.Footnote 46
The ECHR does not directly refer to the right to informed consent, but Article 8 protects the right to respect for private life and Article 10 protects the right to receive and impart information. The Oviedo Convention also incorporates the right to informed consent.Footnote 47 The ECtHR has repeatedly ruled on the right to informed consent, mostly in relation to Article 8 ECHR. In Lambert and others v France, the ECtHR stated that the principle of consent to medical care is one of the aspects of the right to respect for private life.Footnote 48 In Pretty v the United Kingdom, the ECtHR considered that “the imposition of medical treatment, without the consent of a mentally competent adult patient, would interfere with a person’s physical integrity”.Footnote 49 In Trocellier v France, the ECtHR observed that Contracting States have the positive obligation under Article 8 ECHR to take appropriate measures to ensure respect for patients’ physical integrity, and emphasised the importance for individuals facing health risks of having access to information enabling them to assess those risks in order to give informed consent.Footnote 50 In Z v Finland, the ECtHR stated, with respect to the disclosure of a patient’s personal health data, that “the disclosure of such data may dramatically affect his or her private and family life (…)”.Footnote 51 In exceptional cases, denial of the right to informed consent can result in a breach of Article 3 ECHR, the absolute right to protection from degrading or inhuman treatment.Footnote 52
Although aforementioned legislation and jurisprudence shows the importance of the right to informed consent in a medical context in the EU legal order, the right is not absolute. Interferences with the right to informed consent based on Article 8 ECHR can be justified when “in accordance with the law”, “necessary in a democratic society” and in the interests of the objectives as set out in the article, such as public safety and the protection of health. Furthermore, the interference must be “proportionate to the legitimate aim pursued”.Footnote 53 While the outbreak of an infectious disease may legitimise restriction of a patient’s right to informed consent, the ECtHR has not (yet) ruled on legitimate interference with the right to respect for private life on grounds of the protection of public health emergencies.Footnote 54
In conclusion, with regard to pandemic preparedness and response policy, this means both EU institutions and individual Member States must integrate human rights considerations in their policies when these policies may restrict the right to informed consent, such as in case of EU policies constituting the obligation upon Member States to report cross-border threats to health or perform compulsory medical examination. While the right to informed consent is not absolute, and serious cross-border threats to health can be a valid reason to derogate from the right, interference must be legitimate. As a result, both at the EU and national level, the individual right to informed consent should be taken into account in the shaping of pandemic preparedness and response policies, which could often result in the balancing of informed consent against the common good of public health.
IV. Legal case study on the 2013–2016 Ebola outbreak: the right to informed consent in EU pandemic policies in the Netherlands
This section will review national pandemic policies and laws in the Netherlands, with specific regard to the 2013–2016 Ebola outbreak. The aim of this case study is to establish how EU supranational pandemic policies, aimed at preparedness and response to pandemic outbreaks on the EU territory, have impacted Dutch national pandemic policies. The findings will be used to explore the legal possibility for safeguarding informed consent if case pandemic response measures had been taken in light of the 2013–2016 Ebola outbreak.
1. EU Countermeasures during the 2013–2016 outbreak of Ebola
In reaction to the 2013–2016 Ebola outbreak in West Africa, the EU took action at several levels. First, a EU Ebola Coordinator was appointed and an EU Ebola Task Force was established under the Emergency Response Coordination Centre (ERCC) in order to strengthen coordination between the EU institutions and Member States.Footnote 55 The EMA set up an ad hoc Ebola task force and designed mechanisms to speed up development of Ebola treatment and vaccines such as rapid scientific advice and fast track approval.Footnote 56 Furthermore, the ECDC performed rapid risk assessments and communicated epidemiological updates and other information.Footnote 57 Moreover, the ECDC published, inter alia, guidelines on medical evacuation flights to Europe for patients with Ebola virus disease, recommendations on entry and exit screening measures, and guidelines on public health management of persons that had been in direct contact with Ebola in the EU.Footnote 58 These guidelines include recommendations on the isolation of infected persons, temperature screening in airports, contact listing, contact tracing and monitoring of possibly exposed persons (contact persons). Contact tracing is not restricted to persons who have had direct contact with (bodily fluids of) an Ebola patient, but includes persons who have shared a seating area in public transportation or aeroplane or had classroom or office contact with an Ebola patient. For contacts with “high risk exposure”, the ECDC recommended active monitoring (monitoring of temperature and symptoms twice a day) by public health authorities for 21 days after last exposure, a travel ban and laboratory testing.Footnote 59
All EU Member States have an obligation under EU and international law to develop procedures with regard to preparing and responding to future “serious cross-border threats to health” such as pandemics.Footnote 60 Furthermore, in practice, they will often implement EU policies at the national level.Footnote 61 Therefore, the aforementioned countermeasures could impact on individual fundamental rights, the right to informed consent in particular, in EU Member States. Medical countermeasures such as fast track approval may impact on informed consent when antivirals and vaccines are prescribed based on limited information.Footnote 62 Soft countermeasures, such as recommendations on entry screening, can interfere with both the right to integrity of the person and the right to respect for private life.Footnote 63 Surveillance countermeasures, like exchanging contact tracing data between Member States, can interfere with the right to respect for private life and, if it is unclear who receives the information or explicit consent is not given, with the right to informed consent.Footnote 64 EU law and policy does not seem to contain specific safeguards on how to properly balance the protection of individual fundamental rights such as the right to informed consent with the protection of public health, therefore leaving it up to the Member States to determine a proportional balance.
2. National pandemic policies in the Netherlands
In the Netherlands, the most important public law powers with regard to the control of infectious diseases are laid down in the Public Health Act (Wpg), which has incorporated the International Health Regulations.Footnote 65 The Wpg distinguishes four categories of infectious diseases. Depending on the category, the Wpg empowers public authorities to adopt different types of measures to respond to infectious disease outbreaks.Footnote 66 Furthermore, the National Institute for Public Health and the Environment (RIVM) has adopted a general national action plan on infectious disease emergencies.Footnote 67 The Centre for Infectious Disease Control (CIb) of the RIVM coordinates national responses to infectious diseases and serves as National Focal Point to the ECDC.
In reaction to the Ebola outbreak in West Africa, the CIb put an extensive action plan in place to prevent and prepare for a national Ebola outbreak in October 2014, consisting of “soft”, “medical” and “surveillance” countermeasures. Measures included the establishment of an Ebola Information Point, the providing of training to hospital and ambulance personnel, the implementation of new legislation in order to make it possible to use unregistered experimental medicines and vaccines in the treatment of Ebola and guidelines on isolation of probable Ebola patients and contact tracing of probable contact persons.Footnote 68
3. Impact of EU coordination on the right to informed consent
As outlined previously, the right to informed consent is protected at the EU level. The right to informed consent is furthermore protected at the national level in the Dutch Civil Code, the Medical Research Involving Subjects Act and several protocols and guidelines issued by medical associations and health care institutions.Footnote 69
a. De jure and de facto impact on Dutch pandemic policies
Dutch policies on pandemic preparedness and response, Ebola policies specifically, are substantially shaped by EU and international laws and policies, both de jure and de facto. In this context, de jure impact means that EU policies have a direct or explicit effect on national policies and laws, arising from legal obligations. In contrast, de facto impact means that EU policies have an indirect or implicit effect on national policies and laws, not being the direct effect of legal obligations. This distinction is made because the legislative competence of the EU is limited in the field of health, and EU health policy rarely imposes obligations on national governments.Footnote 70
Dutch pandemic policies are to some extent de jure shaped by EU policies. First, Decision 1082/2013/EU is binding upon the Netherlands.Footnote 71 As a result, the CIb is obliged to notify an alert in the Early Warning and Response System (EWRS) in the case of potential serious cross-border threats to health such as the occurrence of Ebola.Footnote 72 The EWRS is a tool for monitoring public health threats in the EU.Footnote 73 Under the EWRS, the exchange of information on the occurrence of and response to communicable diseases between the Member States and the European Commission is regulated. To determine whether notification is necessary, the CIb has adopted the procedure prescribed by the European Commission.Footnote 74 Additionally, the Dutch government is obliged to send out an alert to the EWRS with “any available relevant information in their possession” and “personal data necessary for the purpose of contact tracing”.Footnote 75 “Contact tracing” is the tracing of persons who have been infected or who are in danger of being infected and the exchange of “any available relevant information in their possession that may be useful for coordinating the response”,Footnote 76 including the exchange of personal health data and other personal information via the electronic platform of the EWRS.Footnote 77
Furthermore, Dutch policy on medical research is de jure impacted by the directly applicable EU Clinical Trial Regulation.Footnote 78 The Regulation governs the conducting of clinical trials in the EU. Clinical trials generally play a large role in pandemic policies with relation to the (emergency) development and authorisation of vaccines and antivirals, especially in case of outbreaks of diseases such as Ebola, for which no effective treatments are yet approved. Furthermore, the Regulation contains specific provisions for clinical trials in emergency situations.Footnote 79
More importantly, Dutch pandemic policies are de facto influenced by EU policies such as recommendations and guidelines. The EU takes “soft” countermeasures in the form of general recommendations and guidelines in order to “help Member States and Institutions decide which measures they will apply”, such as providing examples of communication strategies and models of pandemic planning and public health measures.Footnote 80 While pointing out the autonomy of Member States, the ECDC emphasises that “some measures are either so self-evident or so ineffective that simply laying out the evidence should make for easy policy decisions”.Footnote 81 Although these EU countermeasures are non-binding, the Dutch government tends to implement these recommendations, also in the case of Ebola policies.Footnote 82
In the context of medical treatment, The Netherlands’ Ebola action plan is grounded in the ECDC’s guidelines on “Public health management of persons having had contact with Ebola virus disease cases in the EU”,Footnote 83 implementing recommendations on isolation and laboratory testing of infected persons, health monitoring and contact listing and tracing.Footnote 84 The action plan contains an “Ebola response roadmap” that directly links to the ECDC’s website.Footnote 85 In addition, the Dutch Ebola case definition is a literal translation of the Ebola case definition issued by the ECDC: the “Ebola virus disease ad hoc case definition for reporting in the EU”, stating the clinical criteria (fever and additional symptoms such as severe headache or multi-organ failure), the laboratory criteria and the epidemiological criteria.Footnote 86 Furthermore, if the 2013–2016 Ebola outbreak had infected more people in Europe, it is likely that the EMA and the ECDC would have issued recommendations on the use of specific vaccines and “at-risk” groups and “target groups” for vaccination.Footnote 87 It is probable that the Netherlands would have implemented these recommendations, considering that during the outbreak of A(H1N1) Influenza, the Netherlands implemented the EMA’s recommendation to use the vaccine “Pandemrix”.Footnote 88 In addition, the ECDC’s recommendation on “at-risk” groups and “target groups” for vaccination with regard to Pandemic A(H1N1) 2009 Influenza was integrally implemented.Footnote 89
In the context of personal (medical) data processing, the ECDC issued non-binding opinions on how to use contact tracing.Footnote 90 Additionally, the European Commission has adopted a recommendation with an indicative list of personal data that may be exchanged for the purpose of coordination of contact tracing measures under the EWRS. This includes personal information (name, nationality, date of birth, sex, ID specifications, current home address, phone numbers and e-mail address), travel specifications, contact information, information on accompanying persons and emergency contact details.Footnote 91 These soft countermeasures were directly implemented in national strategies.Footnote 92 For instance, the CIb directly implemented the ECDC’s guideline on “Risk assessment for disease transmitted on aircraft”: the CIb’s Ebola guidelines state that “the ECDC guideline (…) describes the risk stratification of aircraft contacts”.Footnote 93
In the context of medical research, Dutch policy may be de facto impacted by the EMA’s recommendations on compassionate use of unauthorised medicines. Although no recommendations were issued with regard to Ebola medicines, during the outbreak of Influenza A (H1N1), the EMA issued an opinion on the use of unregistered antiviral “Tamiflu i.v.”, following which the Dutch Medicines Evaluation Board decided to allow the antiviral for compassionate use as well.Footnote 94 In light of the influential role of the EMA and the severity of Ebola it is probable that the Netherlands would have done the same if a recommendation on an unauthorised Ebola medicine had been issued.
b. De jure and de facto impact on the right to informed consent in the Netherlands
Public health and individual rights are often in conflict and need to be appropriately balanced. Countermeasures taken by the EU to prevent and combat infectious disease can deeply impact the day-to-day lives of EU citizens and potentially interfere with their individual rights. EU countermeasures are grounded in the notion that serious cross-border threats to health legitimise the restriction of individual freedoms in order to serve the common good – public health. One of the individual rights that potentially conflicts with the interest of public health is the individual’s right to informed consent, which requires five conditions: voluntarism, capacity, understanding, disclosure and decision.
In the context of medical treatment, de facto impact on the right to informed consent can be determined in relation to a possible ECDC recommendation on the implementation of exit screening.Footnote 95 Exit screening can be undertaken through questionnaires or the use of thermal image scanners.Footnote 96 Exit screening may impact the right to informed consent in the Netherlands in two ways. First, the use of questionnaires may impact the right to informed consent in relation to the sharing of personal (medical) data, because the passenger may not have had full disclosure on the objectives or did not understand the implications for his personal situation. Second, the scanners used for exit passenger screening may have implications for the passenger’s health due to radiation effects. The EU regulates the safety of screening devices.Footnote 97 The ECDC’s recommendation remains silent about informed consent: it does not state whether and under what circumstances passengers may refuse the exit screening. Thus, an EU recommendation to implement exit screening may have implications for the right to informed consent, since passengers may not have had full disclosure on the health risks, did not completely understand the implications for their personal situations, did not actively make a decision on whether to undergo exit screening or did not voluntarily consent to the procedure, but rather were coerced or pressured by the airport personnel to undergo the procedure.Footnote 98
Furthermore, the implementation of the EMA’s recommendations to use specific pandemic vaccines can de facto impact the right to informed consent in the medical treatment context. To illustrate, research on the use of the “Pandemrix” vaccine during the A(H1N1) pandemic, as recommended by the EMA, suggests an increased risk of narcolepsy.Footnote 99 Parents of children that had used this were not informed about this risk.Footnote 100 It can be said that if the side-effects of a pandemic vaccine were known or it has not been sufficiently tested, this may have implications for the right to informed consent, because the patients may not have had full disclosure on the health risks or may not have had complete understanding of the implications for their personal situation. This risk is common to pandemic vaccines because generally clinical data is limited due to time constraints.Footnote 101 However, the EMA does not provide guidance in how to handle this risk in its recommendations.
In addition, the right to informed consent in the context of medical treatment could possibly be affected by the implementation of the ECDC’s recommendations on “at-risk” and “target” groups for pandemic vaccination. Although the effects of this type of recommendation are generally limited because the Dutch government has never implemented compulsory vaccination, the recommendation of vaccination to specific groups can still lead to decisions without informed consent, because the identification as “at-risk” or “target” may scare patients into undergoing the vaccination and refrain them from voluntarily making a decision.Footnote 102 The ECDC’s recommendation does not acknowledge this effect and the implications for informed consent.
In the context of participation in medical research, the right to informed consent is de jure impacted by the EU Clinical Trial Regulation. The Regulation puts informed consent of the research subject at the basis of every clinical trial but provides for an exception with regard to emergency situations. In emergency situations, caused by a sudden serious medical condition, informed consent may be obtained after the inclusion of the patient in the clinical trial, when prior informed consent is impossible.Footnote 103 This means that in case of a critically ill patient suffering from Ebola, the patient can be included in emergency medical research without exercising his right to informed consent. However, it can be said that the EU Regulation provides for sufficient safeguards to protect the right to informed consent, as it requires inter alia the impossibility of prior informed consent or informed consent by proxy, a severe medical condition and minimal risks, making clinical research without informed consent into a last resort option.Footnote 104 Moreover, informed consent plays an important role throughout the whole EU Clinical Trials Regulation: it contains an extensive set of rules for the protection of subjects, with special regard to incapacitated persons and minors.Footnote 105 Additionally, it specifically refers to the importance of human dignity, the integrity of the person and respect for private life.Footnote 106
Furthermore, informed consent may be de facto impacted by the EMA’s recommendations on compassionate use. The EMA can issue recommendations on compassionate use of unauthorised medicines, making medicines in development available to patients who have a severe disease with no satisfactory authorised therapies and who cannot enter clinical trials.Footnote 107 Neither the legal basis for compassionate use nor the EMA’s website mention the importance of informed consent of the patients involved.Footnote 108 The European Commission does, however, acknowledge the need to increase transparency on compassionate use on the EU level by supporting the availability of key information on informed consent requirements on the EMA website.Footnote 109 It is questionable whether the conditions of voluntarism and capacity are met when the patient is in a desperate medical emergency.Footnote 110 Furthermore, the patient may not have had full disclosure on the health risks, because data on efficacy and safety are limited, and he may not have had complete understanding of the implications for his personal situation, because he did not have the knowledge necessary to evaluate the scarce data.Footnote 111
The impact of EU pandemic policies on the right to informed consent is the most significant in the field of processing of personal (medical) data. The Dutch Government is required to share (medical) information on confirmed cases of listed infectious diseases and personal information needed for the tracing of contacts through the EWRS with public authorities throughout the whole EU and personal data may even be transferred to the WHO and third countries party to the International Health Regulations.Footnote 112 The EU Health Threats Decision does not clarify whether patients and contacts should be asked for permission to share personal data. The GDPR, however, provides for a public health exception to the authority to process personal data concerning health. In such a case, informed consent by the data subject to the exchange of their personal (health) data with one or more Member States is not necessary. Informing the patient of the processing activities must take place, unless this is impossible or involves disproportionate effort.Footnote 113 Furthermore, the patient does not have the right to erasure of personal data when the processing is necessary for public health purposes.Footnote 114 The European Commission has emphasised that processing through the EWRS is authorised in case of pandemic threats, for reasons of substantial public interest.Footnote 115 As a result, the right to informed consent may be limited due to not meeting the conditions of decision, understanding and disclosure when the patient may not have been at all informed about the processing of personal (health) data. Additionally, the patient may not have consented to the sharing of information through the EWRS or may not have understood the implications for his personal situation and the scope of the data processed. For example, the patient or contact of the patient may not be aware of the fact that his personal data was shared with public health authorities in other Member States. Even if he is informed of the identity of the receiving parties, he may not know the scope of personal data processed or know how to exercise his right to rectification in case of incorrect information.Footnote 116
In conclusion, Dutch laws and policies on pandemic preparedness and response, Ebola policies specifically, are shaped by EU forces, both de jure and de facto. More importantly, it can be concluded that EU pandemic policies may have implications for the right to informed consent in the Netherlands. While these interferences with the right to informed consent may be legitimate in light of the protection of public health, this case study does show that public health interests and individual rights are in fact balanced at the EU level, which has consequences for the protection of the individual’s right to informed consent.
V. Conclusion
The development of EU policies and laws on pandemics is grounded in the notion that communicable diseases do not respect borders, and outbreaks can only efficiently be combatted if countries cooperate. The main responsibility for the drafting of national public health policies lies with the individual Member States. In the fight against serious cross-border threats to health such as pandemics, the possibility for the EU to take formal action is limited. Nevertheless, it can be concluded from the case study on the Netherlands that Member States’ national pandemic preparedness and response strategies are substantially shaped by EU actions, both de jure and de facto. On top of that, it can be said that this EU influence has implications for individual rights in the Member States, in particular the right to informed consent. Consequently, the first important conclusion is that EU policies have implications for a crucial part of individual EU citizens’ lives, namely decision-making autonomy over their own bodies, and, more generally, their own health.
This conclusion places the long-running debate on the balance between public health and individual fundamental rights in a different perspective: it is generally accepted that a national government can restrict its citizens’ rights to a certain degree in order to protect the health of the public, but what if these restrictions are the effect of EU forces? Therefore, an important question is how the right to informed consent is safeguarded in the context of EU and international policy on pandemic preparedness and response in the EU.
Countermeasures issued by the EU, such as recommendations on contact tracing, may limit the right to informed consent. While limitation of individuals’ right to informed consent may be legitimate in the event of pandemic outbreaks, interferences do nevertheless have to be necessary, proportionate, in the interest of the protection of public health and in accordance with the law. This complex decision on balancing public health and individual rights with respect to these measures is not mentioned at all by the EU in its countermeasures. From its recommendations, it seems that the protection of public health is given priority over the protection of individual rights, but the underlying principles and choices are not made explicit. In other pandemic countermeasures, such as the EU Clinical Trial Regulation’s emergency exception and the GDPR’s requirement to inform the data subject in cases of contact tracing, the EU leaves the balancing of interests up to the Member States, providing guidelines by describing the circumstances in which derogation from the right to informed consent is allowed. However, the extent of the exceptions remains unclear, allowing the Member States a wide margin of appreciation in deciding to what extent the individual’s right to informed consent must be protected.
In the end, the ultimate decision on how to comply with EU pandemic policies in order to adequately balance the right to informed consent and the protection of public health remains with the Member States. It is up to the individual Member States to carefully review the extent to which the protection of individual rights is outweighed by the necessity to protect the common good. However, in order to safeguard the right to informed consent in pandemic preparedness and response policies throughout the EU, it would be beneficial to all EU citizens if the EU integrated fundamental rights considerations in its pandemic policies to provide insight into the underlying principles and choices. This would provide the Member States with some guidance on how to balance the various interests at stake in public health emergencies and would, in all likelihood, lead to a more exhaustive inclusion of fundamental rights considerations in national pandemic preparedness and response policies.