Can a School, Hospital, Company, or Community Leader Give Permission on Behalf of Individual Participants?

If the Organization Says Yes, Have the People Inside It Also Said Yes?

A school principal agrees to a study involving teachers. A hospital administrator approves recruitment of nurses. A company permits researchers to approach employees. A community leader welcomes a research team into the community.

Can researchers now treat the people within those groups as participants?

Ordinarily, no. An organization or representative may have legitimate authority over institutional participation, access, premises, resources, or certain collective interests. That authority does not automatically extend to making a competent individual's personal decision to participate in research.

Organizational permission can open the door. It does not usually answer for the person who walks through it.

Permission for a Group and Consent From a Person Are Different Decisions

Three Different Permissions Can Exist in the Same Study

The organization decides about matters within its authority

An organization has legitimate interests and responsibilities of its own.

A school can control access to its premises and internal systems. A hospital can have responsibilities for clinical environments, patient records, staff resources, and institutional risk. A company can control internal communication channels and confidential corporate information. A community governance body may have recognized authority over certain collective resources or decisions.

Research that uses these settings or resources can therefore require institutional or site authorization.

That authorization concerns something the organization has authority to decide. It should not automatically be interpreted as a decision about everything involving every person associated with the organization.

Permission to approach people is another decision

Researchers may also need permission to gain access to potential participants.

A hospital might permit an approved invitation to be distributed to nurses. A school might allow researchers to advertise a study to teachers. A company might authorize use of an employee newsletter. A community organization might introduce researchers at a meeting.

This permission establishes an authorized recruitment route. It does not mean everyone receiving the invitation has agreed to participate.

Researchers should therefore distinguish permission to recruit members of an organization from the subsequent decisions made by those members.

The individual decides whether to participate

Informed consent concerns the individual's authorization of research participation.

International ethical guidance treats informed consent as a central protection for capable research participants. In cluster-randomized research, where organizational and individual decisions can become especially difficult to separate, the Ottawa Statement is explicit: gatekeepers should not provide proxy consent on behalf of individuals in their cluster, and gatekeeper permission to enroll an organization does not replace individual informed consent when consent is required.

These decisions may occur within the same project and sometimes on the same day. They remain conceptually different.

A principal cannot usually volunteer teachers simply because they work at the school

Suppose a principal signs a letter stating, "I approve the participation of our teachers in this study."

The wording can create confusion. If the principal means that the school authorizes researchers to approach eligible teachers, that may fall within legitimate institutional authority. If it means that the principal has already consented to research participation on behalf of competent teachers, the claim goes much further.

Employment does not ordinarily transfer an employee's personal research-consent decision to a supervisor. The same principle applies to many relationships involving students, professionals, patients, members, and service users.

A hospital can authorize the site without consenting for patients or staff

Hospitals provide a particularly clear example because institutional responsibilities and individual rights operate simultaneously.

A hospital may need to authorize research activity on its premises, determine whether adequate resources are available, control access to records, and ensure that applicable governance requirements are met.

Those institutional responsibilities do not ordinarily allow hospital administrators to consent to research participation for competent patients, nurses, physicians, or other staff.

One authority does not cancel the other. The hospital's authorization may be necessary, and the participant's consent may also be necessary.

Community permission deserves particular care

Community-based research can make the boundary less obvious because communities may have legitimate collective interests, established governance structures, or cultural decision-making practices that deserve respect.

Researchers should not respond by assuming either that community leaders have no meaningful authority or that they can automatically consent for everyone.

CIOMS guidance on cluster-randomized trials states that where research substantially affects organizational or cluster interests, permission should be obtained from a gatekeeper who possesses legitimate authority to make the relevant decision. It also makes clear that such permission does not replace individual informed consent where individual consent is required.

Consultation with communities may additionally be appropriate even where no single representative can make the individual participation decision. The Ottawa Statement specifically recognizes consultation as a means of protecting cluster interests and notes that gatekeepers can sometimes facilitate that process.

What if the research intervention applies to an entire organization or community?

This is where the issue becomes more difficult.

Some interventions cannot realistically be delivered one individual at a time. A hospital may adopt a new hand-hygiene system. A school may implement a new scheduling policy. A community may receive an environmental or public-health intervention. In cluster-randomized trials, entire groups can be allocated before individual members are identified.

In these situations, permission may legitimately be required from someone with authority to make the relevant organizational or cluster-level decision. The Ottawa Statement recommends gatekeeper permission when a cluster-randomized trial substantially affects organizational or cluster interests and the gatekeeper possesses legitimate authority.

But cluster-level authorization does not magically turn the gatekeeper into every individual's proxy. Researchers must separately determine who actually counts as a research participant and whether individual consent is required for interventions or data collection involving those participants.

A waiver of consent is not gatekeeper consent

Sometimes an ethics committee or other authorized ethics body may approve a waiver or alteration of individual informed consent when specified ethical and legal conditions are satisfied.

That is fundamentally different from saying, "The manager consented for everyone."

For cluster trials, the Ottawa Statement permits research ethics committees to approve waiver or alteration under specified conditions involving feasibility and minimal risk. Gatekeepers themselves do not acquire the authority to waive informed consent merely because obtaining it would be inconvenient.

Proxy consent for someone who lacks capacity is also a different issue

Another source of confusion is legally or ethically authorized surrogate decision-making for a person who cannot provide valid consent.

A parent or guardian consenting for a child, or an authorized representative making a decision for an adult who lacks decision-making capacity, operates under a specific legal and ethical framework. The representative's authority derives from that relationship and applicable law or policy, not from being the principal, employer, hospital director, community leader, or organizational gatekeeper.

The Ottawa Statement makes this distinction explicit in its reasoning: legitimate proxy consent concerns people who cannot make their own decisions and requires an appropriately situated decision-maker. Ordinary gatekeeper status does not satisfy that role.

One Study, Three Separate Decisions

The hospital's permission is real and important. Without it, the researcher may have no authority to use the hospital's internal communication system. But the hospital's decision and each nurse's decision accomplish different things.

Common Mistakes About Organizational Permission and Consent

Identify Whose Decision Is Needed for What

Instead of asking whether you have "permission," map each decision separately. This prevents a signature obtained for one purpose from being stretched into authority it was never meant to provide.

When a gatekeeper is involved, also define exactly how far the gatekeeper's authority extends. The cleanest research governance arrangements tend to make these boundaries explicit before recruitment begins.

Before Treating Someone's Permission as Consent

Questions About Organizational Permission and Individual Consent

An Organization Can Say Yes for Itself, Not Automatically for Everyone Inside It

How to Cite This Guide

This guide is intended to be read, shared, and used in research, teaching, and academic work. If you draw on its ideas, explanations, or other content, please acknowledge the source by citing the guide. Doing so gives appropriate credit and helps your readers locate the original resource.