Blockchain-Based Dynamic and Revocable Consent for Secondary Health Data Use: Systematic Review

The secondary use of health data holds substantial potential for advancing biomedical research, strengthening population health analytics, and enabling artificial intelligence-driven decision-making support. Yet, ensuring that such reuse respects patient autonomy, privacy, and regulatory obligations remains a major challenge. Conventional consent mechanisms are typically static, difficult to revoke, and offer limited transparency or accountability after data disclosure.

This review aimed to systematically examine blockchain-based frameworks that enable dynamic, auditable, and revocable consent for the secondary use of health data.

A structured literature search was conducted in PubMed, Scopus, and Web of Science covering the period 2020 to 2025. Following PRISMA (Preferred Reporting Items for Systematic Reviews and Meta-Analyses) guidelines, 55 peer-reviewed studies meeting predefined inclusion criteria were analyzed. Data extraction focused on four dimensions: (1) consent life cycle management, (2) auditability and traceability, (3) usability and patient empowerment, and (4) legal and ethical alignment.

Findings indicate that blockchain technologies provide a robust foundation for automating consent life cycles, ensuring immutable auditability, and enabling decentralized patient control. Most frameworks used smart contracts, decentralized identifiers, and verifiable credentials to implement programmable and verifiable consent processes. Nevertheless, key challenges persist, including limited usability testing, complexities in real-time revocation propagation, interoperability gaps with clinical systems, and tensions with regulatory requirements such as the General Data Protection Regulation right to erasure. Only a small subset of studies reported real-world deployments or user-centered evaluations.

Blockchain offers substantial promise for improving the trustworthiness, transparency, and accountability of consent management for secondary health data use. However, wider adoption requires human-centered design approaches, stronger interoperability through standards such as Fast Healthcare Interoperability Resources, verifiable credentials, and consent receipts, and clearer legal guidance for compliance. Future research should prioritize integrating blockchain-enabled consent infrastructures into national and cross-border digital health ecosystems such as the European Health Data Space to support secure, patient-controlled, and ethically governed secondary data use.