Importance of Secure eConsent Implementation
eConsent forms must be implemented in a way that meets applicable regulatory requirements for the study. This page focuses on the requirements outlined in the Personal Information Protection and Electronic Documents Act (PIPEDA).
Privacy Regulations and REDCap eConsent
Meeting the requirements of a secure electronic signature
Essential components for eConsent include: |
---|
An eConsent form must meet the following requirements:
|
What strategies can be implemented in REDCap to meet these requirements? |
---|
To meet these requirements in REDCap, the following strategies can be implemented:
By implementing these strategies in REDCap, you can meet the requirements for an eConsent process that includes a unique signature, maintains participant control over the signature attachment, accurately identifies the person, and allows for detection of any modifications made to the form after obtaining the signature. |
Sending completed eConsent forms to participants
Email is not considered a secure means of communication and should not be used when sending identifying information.
If your eConsent form has a blank copy available for download (a good practice for allowing the use of accessibility or other tools), include a reminder that the participant should not email the form.
To send a participant a copy of their completed form, use one of the following methods:
|
---|
Checklist: Does my eConsent form meet the requirements?
- 1 Surveys are enabled in my project. The eConsent form is enabled as a survey
- 2 In the ‘Survey Settings’ for the eConsent form, under ‘Survey Termination Options’ the Auto-Archiver + e-Consent Framework is enabled
- 3 The contents of my eConsent form are accurate to the consent form approved for use in my study
- 4 A signature or other field has been added to my eConsent form, and only the appropriate person uses this field
- 5 The eConsent form is only being filled out as a survey, not within REDCap
- 6 The completed consent forms are obtained from the PDF Survey Archive in the File Repository
- 7 If the Survey Setting option to ‘Send confirmation email’ is being used, the option to Include PDF of completed survey as attachment is not enabled
- 8 Consent forms are not being emailed
Surveys are enabled in my project. The eConsent form is enabled as a survey
This means that the contents are displayed as images of the ‘paper copy’, or the contents of the form have been carefully copied over into the instrument as text.
To help ensure that only the participant is using the signature (or other) fields, they can be marked with the action tag @READONLY-FORM. This will make the field ‘greyed-out’ in REDCap while still being accessible in the survey view.
REDCap’s Auto-Archiver creates a PDF copy of the eConsent form when it us submitted. This is important for versioning purposes, as the consent form instrument may be modified in REDCap after the participant submits the form. This is also important in case the form is edited by a member of the study team after it is submitted.
REDCap’s Auto-Archiver only captures the form when it is submitted as a survey. Thus, eConsent forms must be completed as surveys. Using the @READONLY-FORM action tag helps enforce this by making it impossible to complete an eConsent form in REDCap.
As it is possible for the version of the consent form to change after the participant submits it (using the Online Designer), or for the information within in the form to be changed (if survey responses are allowed to be edited by users), it is critical that the static copy captured by the Auto-Archiver is used. This ensures that the form is accurate in version and information to what the participant signed.
Email is not considered a secure means of communication and should not be used when sending identifying information.