Who Has the Final Say When Several Organizations Share Responsibility for a Study?

When Everyone Shares Responsibility, Who Gets to Make the Final Decision?

A study can involve a principal investigator, university, sponsor, funder, ethics committee, hospital, collaborating institution, data custodian, and regulator. Each may have legitimate responsibilities. Eventually, those responsibilities can point in different directions.

The ethics committee considers a procedure ethically acceptable, but the hospital will not permit it. The sponsor wants the study to continue, but a regulator requires it to stop. A university approves a data-management arrangement, but the organization controlling the data refuses access.

Who has the final say?

Usually, the question is framed too broadly. Research governance rarely gives one organization universal authority over every aspect of a project. Final authority normally depends on the particular decision being made.

There Is Usually No Single Final Authority for the Entire Study

The “Final Say” Changes With the Decision

Research governance distributes authority rather than creating one chain of command

Complex research is not necessarily organized like a company in which every dispute can eventually be referred to one chief executive.

The current UK Policy Framework for Health and Social Care Research illustrates this clearly. It assigns distinct responsibilities to chief investigators, research teams, funders, sponsors, research sites, employers, regulators, and health and social care providers. It also requires clear designation of responsibility and accountability, documented roles, and clear communication among those involved.

That structure matters. If several parties have different legitimate responsibilities, asking which one outranks all the others can produce the wrong answer.

A better question is: who has authority over this particular decision?

Law and regulatory authority can place hard limits on everyone else

Some research decisions are constrained by law or legally empowered regulators.

An institution, sponsor, investigator, funder, or ethics committee cannot simply agree among themselves to disregard applicable legislation. Likewise, where a regulator has statutory authority to authorize, restrict, suspend, or prohibit a regulated research activity, another research stakeholder cannot make that regulatory requirement disappear.

The UK Policy Framework explicitly distinguishes legal requirements from expectations of good practice and assigns regulators responsibilities for compliance within their respective remits.

This does not mean that "the law has the final say" answers every governance question. Many research decisions are not legally prescribed. It means that where applicable law sets a boundary, governance arrangements must operate within that boundary.

The ethics committee has authority over its ethical decision

An ethics committee determines whether research is ethically acceptable within the scope of its review. WHO describes research ethics committees as bodies on which organizations rely to review and oversee the ethical aspects of research involving human participants.

If an ethics committee requires a particular consent process as a condition of its favorable decision, the sponsor or research institution cannot simply announce that a different process will be used while continuing to claim the benefit of the original ethical decision.

The appropriate response may be to seek clarification, submit an amendment, or obtain further ethics review.

But the ethics committee's authority also has limits. Ethical approval does not compel a hospital to host the study, require a data custodian to release records, execute a contract, provide funding, or replace a legally required regulatory authorization.

The sponsor has substantial authority, but not universal authority

Where a formal sponsor role applies, the sponsor can have broad project-level responsibility.

The current UK framework defines the sponsor as the organization, individual, or partnership taking overall responsibility for proportionate and effective arrangements to set up, run, and report the research. Sponsor responsibilities include ensuring that the project remains scientifically sound, safe, ethical, legal, and feasible, that investigators and sites are suitable, and that appropriate approvals and arrangements are in place.

This can give the sponsor considerable authority over whether the project should begin, continue, be modified, suspended, or terminated within the sponsor's remit.

Yet sponsor authority exists inside the larger governance system. The sponsor cannot make an unapproved procedure ethically approved, override applicable law, force an institution to participate, or consent on behalf of competent research participants.

The sponsor's responsibilities are extensive precisely because they are defined responsibilities, not unlimited power.

A host institution can refuse to participate even when the study is approved elsewhere

A hospital, school, company, university, or other organization may legitimately control whether research occurs through its premises, systems, resources, staff activities, records, or services.

An external ethics committee might find the research ethically acceptable. The sponsor might consider the project ready. The funder might strongly support it. None of those decisions necessarily requires an institution to provide resources or access that it legitimately controls.

Research sites in the UK framework, for example, remain responsible for demonstrating site suitability, understanding the research occurring through them, establishing local responsibilities, and satisfying themselves that relevant approvals are in place.

This means institutional authorization can remain necessary even when study-wide decisions have already been made.

The data custodian can control access without controlling the whole study

Authority can be even narrower.

An organization or individual responsible for a restricted dataset may have authority over whether and how researchers can access those data. That does not make the data custodian the final authority over the project's methodology, authorship, funding, or other unrelated matters.

This illustrates a useful governance principle: authority can be decisive without being comprehensive.

A party can have the final decision on one necessary component of the research without becoming the final decision-maker for the research as a whole.

The funder's financial power is not universal research authority

A funder can decide whether it will provide or continue funding under the conditions of its award. That can have enormous practical consequences. A study without funding may become impossible to continue.

But financial leverage should not be confused with authority over every research requirement.

Under the UK framework, funders and sponsors are distinct roles. Funders have responsibilities concerning scientific quality, feasibility, costs, conditions of funding, and appropriate approvals, while sponsors hold broader project-governance responsibilities.

This is why a research sponsor is not necessarily the same as the funder.

A funder can say, "We will not finance this." It cannot thereby make unlawful research lawful or ethically unapproved research approved.

The principal investigator leads the research without possessing every form of authority

The lead investigator has substantial responsibility for research conduct. The UK framework describes the chief investigator as the overall lead researcher, while principal investigators may take responsibility for conduct at particular sites.

Investigators make scientific and operational decisions within their remit and are responsible for ensuring that research is conducted according to the approved protocol and applicable requirements.

But the principal investigator's governance role does not allow the investigator to waive another institution's requirements, overrule an ethics committee, ignore a regulator, or appropriate resources controlled by another organization.

Leadership and authority are related, but they are not interchangeable.

The participant has the final decision about their own participation when consent is required

There is one particularly important form of authority that organizational governance should not obscure.

If a competent individual is being invited to participate in research and valid informed consent is required, the individual's decision belongs to that individual.

The sponsor may approve the project. The ethics committee may consider it acceptable. The hospital may authorize recruitment. The funder may pay for it. None of those decisions means the person must participate.

WHO identifies respect for autonomy, alongside beneficence and justice, as central to ethical review of research involving humans. Individual participation therefore remains distinct from institutional authorization.

This is the same boundary that prevents organizational permission from automatically becoming individual consent.

Several parties can each possess an effective veto over different requirements

This produces an important feature of shared research governance.

A study may need several independent conditions to be satisfied before a particular activity can occur. If any necessary condition is absent, the activity may be unable to proceed.

The table is illustrative. Actual authority depends on jurisdiction, research type, institutional arrangements, and applicable law.

One approval cannot necessarily cure another party's valid refusal

Suppose a hospital refuses to host a study because it lacks the staff required to conduct it safely.

Obtaining ethics approval does not cure the staffing problem. Additional funding might help solve it, but the funder's enthusiasm does not itself authorize the site. The sponsor could work with the hospital to establish a feasible arrangement, but cannot simply declare the hospital ready.

Likewise, if an ethics committee rejects a proposed consent procedure, a letter from the institution supporting the procedure does not convert it into an ethically approved one.

Each necessary authorization has to be addressed within the process that governs it.

Shared responsibility therefore does not require a universal tie-breaker

Researchers sometimes assume that a governance system is incomplete unless it identifies one person or organization that can settle every disagreement.

That is not necessarily desirable.

Independent ethics review would lose much of its purpose if a sponsor could simply overrule it. Institutional authorization would be hollow if another organization could compel a site to participate. Participant consent would cease to mean much if an employer or community leader could override refusal.

Distributed authority can therefore be a safeguard rather than a design flaw.

The challenge is making the boundaries sufficiently clear that legitimate independence does not become administrative confusion.

When requirements conflict, identify authority before looking for a winner

A genuine dispute should be analyzed by issue.

If two institutions disagree about data retention, identify which policies, agreements, laws, and custodial responsibilities govern the data. If a sponsor and site disagree about whether recruitment can begin, identify the outstanding site and sponsor requirements. If an ethics condition conflicts with a funder's data-sharing expectation, determine what each actually requires and whether either can formally be modified.

The process for resolving conflicting legal, institutional, funder, sponsor, and ethics requirements therefore begins with authority mapping rather than organizational ranking.

Participant safety can require immediate action

Some decisions cannot wait for a committee hierarchy to be reconstructed.

The current UK Policy Framework states that the safety and well-being of individuals prevail over the interests of science and society. It also provides that where an unmanageable conflict arises between research and a patient's interests, the duty to the participant as a patient prevails.

This means an appropriate health professional may need to act immediately to protect a patient even when a research protocol points elsewhere. The required sponsor, ethics, regulatory, or institutional notifications can then follow according to the applicable framework.

This is a specific participant-protection principle, not a general license for researchers to disregard governance whenever they believe their preferred approach is better.

Written agreements should specify decision authority before disputes arise

Multi-institution research should define who makes which decisions.

Agreements can identify responsibility for protocol amendments, data access, participant safety, site activation, monitoring, publication, intellectual property, incidents, complaints, research-integrity concerns, financial decisions, and study termination.

Where sponsorship is shared, this becomes particularly important. Current HRA guidance allows co-sponsors to allocate sponsor responsibilities and joint sponsors to share them, with the arrangement formally documented.

Likewise, the Australian Code for the Responsible Conduct of Research assigns responsibilities to both institutions and researchers and is supported by guidance addressing collaborative research. Shared research should therefore be governed through explicit allocation rather than institutional guesswork.

Sometimes the final answer is that the study cannot proceed as planned

Distributed authority means that a study may satisfy most requirements and still fail one necessary condition.

A regulator may decline authorization. A site may lack capacity. An ethics committee may find a procedure unacceptable. Participants may decline. A sponsor may determine that the remaining risks cannot be appropriately managed.

If the relevant authority legitimately controls a necessary condition and no acceptable modification resolves the issue, the research may need to change, move to another site, delay, or stop.

Research governance does not guarantee that every disagreement ends with permission to proceed.

When Several Organizations Disagree About Starting Recruitment

No organization needed universal authority to resolve the problem. Each made the decision that belonged to its remit, and the study had to operate within all of those legitimate decisions.

Common Misunderstandings About Final Authority in Research

Ask “Final Say About What?”

Whenever a research disagreement is framed as "Who has the final say?", add the missing object to the sentence.

Who has the final say about ethical acceptability? About whether a hospital participates? About whether restricted data are released? About whether funding continues? About whether a regulated activity is legally authorized? About whether an individual consents?

The answer can change every time.

A useful governance plan should therefore identify not only responsibilities but also decision rights: who can approve, refuse, require modification, suspend, escalate, and authorize resumption for each major part of the research.

Before Asking Who Has the Final Say

Questions About Final Authority in Shared Research

The Final Say Belongs to the Authority Responsible for the Decision

How to Cite This Guide

This guide is intended to be read, shared, and used in research, teaching, and academic work. If you draw on its ideas, explanations, or other content, please acknowledge the source by citing the guide. Doing so gives appropriate credit and helps your readers locate the original resource.