Withdrawal (of consent and from a clinical trial)
Withdrawal, in clinical research, refers to two related but legally distinct acts. Withdrawal from a clinical trial is the participant's decision to stop taking part, which Art. 28(3) CTR 536/2014 guarantees may be exercised at any time, without any resulting detriment and without having to provide justification, by revoking informed consent. Withdrawal of consent in the GDPR sense is the data subject's revocation of consent given as a legal basis for processing, which Art. 7(3) states must be as easy as giving consent and takes effect for the future without affecting the lawfulness of processing before withdrawal.
The distinction matters because, in most EU trials, consent is not the legal basis for processing trial data. Following the EDPB Opinion 3/2019, sponsors rely on legal obligation and public health for safety and regulatory purposes and on public interest or legitimate interest with Art. 9(2)(j) for research. Art. 28(3) CTR itself provides that withdrawal shall not affect activities already carried out and the use of data obtained before withdrawal. A participant who withdraws therefore stops further data collection and, at their request, further contact, but data already collected is retained under the 25-year archiving rule of Art. 58 CTR and GCP integrity requirements, safety follow-up may continue where legally required, and the right to erasure does not apply (Art. 17(3)(b), (c) and (d)). Where the sponsor did rely on consent for optional elements such as biobanking, future research or genomic sub-studies, withdrawal of that consent stops those uses and may require destruction of unused samples.
Drafting the withdrawal section of the informed consent form honestly is one of the most frequent corrections in iliomad's ICF reviews: forms that promise "all your data will be deleted if you withdraw" create an obligation the sponsor cannot lawfully meet. Good practice is to distinguish withdrawal from treatment, from follow-up and from data use; to explain what is retained and why; to offer restriction and the exclusion of the participant's data from future analyses where feasible; and to align the wording with the protocol, the DPIA and the rights-handling procedure agreed with sites.
