Chapter 5

Informed Consent and Patient Autonomy

Patient autonomy—the right to make informed decisions about one's own healthcare—is a cornerstone of modern medical ethics. When AI systems influence clinical decisions, informed consent takes on new dimensions. Patients must understand not only the proposed treatment but also the role algorithms play in their care, what data is used, and what the implications of AI involvement mean for their health outcomes and personal information.

The Foundation of Informed Consent

Informed consent emerged from recognition that patients have the right to determine what happens to their own bodies. This principle, enshrined in law and medical ethics, requires that before any medical intervention, patients receive adequate information to make a voluntary and intelligent choice. The elements of informed consent—disclosure, comprehension, voluntariness, competence, and consent—were developed for human-delivered care. AI challenges each of these elements in new ways.

Traditional informed consent focuses on disclosing the nature of the proposed treatment, its risks and benefits, alternatives, and the consequences of refusing treatment. When AI is involved, the scope of disclosure expands: What role does AI play? How was it trained? What are its limitations? Can the patient opt out? How is their data used? The challenge is providing sufficient information without overwhelming patients or undermining their trust in the care they receive.

78%
Patients Want to Know About AI Use
45%
Express Concern About AI in Care
62%
Would Accept AI with Human Oversight
34%
Currently Informed of AI Involvement

AI-Specific Disclosure Requirements

When AI participates in clinical care, patients may need information beyond traditional consent disclosures. The challenge is determining what must be disclosed, how to present complex technical concepts accessibly, and how to integrate AI disclosure into clinical workflows without creating consent fatigue or undermining trust.

Disclosure Element Traditional Consent AI-Enhanced Consent Rationale
Nature of Intervention What procedure will be performed AI is involved in diagnosis/treatment decision Patient right to know who/what influences care
Risks Medical complications, side effects AI error rates, performance limitations AI-specific risks may affect patient decisions
Benefits Expected health improvements AI accuracy advantages, consistency Patients deserve to know potential AI benefits
Alternatives Other treatment options Human-only assessment available Autonomy requires option to decline AI
Data Use Limited data disclosure How patient data is processed by AI; storage; sharing Privacy rights; secondary use implications

What Must Be Disclosed?

There is no consensus on exactly what AI-related information must be disclosed for consent to be valid. Different stakeholders propose varying standards, from minimal disclosure (AI is used) to extensive disclosure (algorithm specifics, training data sources, performance metrics). The appropriate level likely depends on the AI's role, the stakes of the decision, and the patient's preferences.

Proposed Disclosure Standards

Standard Required Disclosure Proponents
Minimal AI is used in care; general purpose Efficiency advocates; some institutions
Material Risk AI involvement when it materially affects outcomes Traditional malpractice standard applied to AI
Reasonable Patient What a reasonable patient would want to know about AI Patient advocacy groups
Full Transparency Comprehensive AI details including training, performance, limitations AI ethics scholars; some regulators

The Right to Know About AI

A fundamental question in AI ethics is whether patients have a right to know when AI influences their care—even if that knowledge might cause anxiety or change their behavior in ways that affect outcomes. This tension between transparency and potential psychological impact mirrors debates in other disclosure contexts, such as informing patients of incidental findings.

Arguments for Disclosure

Concerns About Disclosure

Balancing Transparency and Burden

Healthcare systems must find approaches that respect patient autonomy while avoiding consent overload. Potential strategies include:

Opt-Out Rights and Alternatives

If AI disclosure is required, should patients have the right to refuse AI-assisted care? The right to opt out raises practical and ethical questions: Is human-only assessment always available? What if AI-assisted care is demonstrably better? How do opt-out requests affect the patient-physician relationship?

Opt-Out Consideration Patient Perspective Institution Perspective Ethical Analysis
Availability Want meaningful alternative May be impractical for integrated AI Autonomy requires genuine choice
Quality Differential Concern about inferior non-AI care Liability for worse outcomes without AI Informed choice includes quality information
Cost Implications May face higher costs for human-only Human-only assessment more expensive Equity concerns if opt-out is costly
Documentation Want opt-out respected and recorded Need clear documentation for liability Process must ensure genuine voluntariness
Workflow Impact Expect opt-out to be honored smoothly Disrupts standardized AI workflows Systems must accommodate patient choice

When Opt-Out May Be Limited

There may be situations where opt-out rights are constrained. If AI is deeply integrated into standard diagnostic equipment, opting out may be impractical. In emergencies, obtaining specific AI consent may be impossible. Resource constraints may limit availability of human-only alternatives. These limitations should be disclosed and justified.

Data Consent for AI Training

Beyond consent for AI-assisted care, patients may need to consent to the use of their data for AI training and development. This secondary use of health data raises distinct ethical considerations about privacy, benefit-sharing, and control over personal information.

Data Use Consent Considerations

Dynamic Consent Models

Traditional one-time consent may be inadequate for ongoing AI development. Dynamic consent models allow patients to make ongoing choices about how their data is used, updated as new AI applications emerge. While more respectful of autonomy, these models are more complex to implement and may create data availability challenges for researchers.

Consent Model Approach Advantages Challenges
Broad Consent General permission for future research Simple; enables research Limited patient control; may not cover novel uses
Specific Consent Separate consent for each AI project Precise patient control Impractical for large datasets; slows research
Tiered Consent Categories of uses with patient choices Balances control and practicality Categories may not match actual uses
Dynamic Consent Ongoing patient engagement and choices Continuous autonomy; updated preferences Technology requirements; engagement burden
Meta-Consent Consent to governance process rather than specific uses Scalable; trusts oversight bodies Indirect patient control; governance quality critical

Vulnerable Populations

Special considerations apply to obtaining consent from vulnerable populations who may face barriers to understanding AI or expressing preferences. Children, elderly patients, those with cognitive impairment, and individuals with limited health literacy require adapted consent approaches.

Considerations for Vulnerable Groups

Implementation Approaches

Integrating AI Consent into Clinical Workflows

Healthcare institutions must develop practical approaches to obtaining AI-related consent that respect patient autonomy while remaining feasible within clinical operations. This requires balancing thoroughness with efficiency.

Implementation Best Practices

Consent Documentation

Clear documentation of AI-related consent protects both patients and institutions. Documentation should record what information was provided, patient questions and concerns, the consent decision, and any opt-out requests.

Summary

Key Takeaways

Review Questions

  1. What are the traditional elements of informed consent? How does AI challenge each of these elements?
  2. What AI-specific information should be disclosed to patients? Compare minimal, material risk, reasonable patient, and full transparency standards.
  3. What arguments support patients' right to know about AI involvement? What concerns might limit or modify this right?
  4. Should patients have the right to opt out of AI-assisted care? What limitations on opt-out rights might be justified?
  5. How does consent for AI-assisted care differ from consent for data use in AI training?
  6. Compare broad consent, specific consent, tiered consent, and dynamic consent models for AI data use. What are the advantages and challenges of each?
  7. What special consent considerations apply to vulnerable populations such as children, elderly, and cognitively impaired patients?
  8. What practical steps should healthcare institutions take to integrate AI consent into clinical workflows?

Korea Standardization Infrastructure Mapping

Korea operates a comprehensive standards governance system through inter-ministerial cooperation. National Standards Council (under Prime Minister's Office, per Framework Act on National Standards Article 5) coordinates KATS (Korean Agency for Technology and Standards), MFDS (Ministry of Food and Drug Safety), MOTIE (Ministry of Trade, Industry and Energy), MSIT (Ministry of Science and ICT), MOIS (Ministry of the Interior and Safety), MOE (Ministry of Environment), MOHW (Ministry of Health and Welfare), MND (Ministry of National Defense), MCST (Ministry of Culture, Sports and Tourism), MOFA (Ministry of Foreign Affairs), MOJ (Ministry of Justice), and FSC (Financial Services Commission). Accreditation and Testing: KOLAS (Korea Laboratory Accreditation Scheme) accredits 800+ testing laboratories. KAS (Korea Accreditation System) accredits 50+ certification bodies. KTC (Korea Testing Certification), KTR (Korea Testing & Research Institute), KTL (Korea Testing Laboratory), and KCL (Korea Conformity Laboratories) provide conformance testing. Telecom and Cyber: KCC (Korea Communications Commission), KCA (Korea Communications Agency), TTA (Telecommunications Technology Association), IITP (Institute for Information & Communications Technology Planning & Evaluation), NIPA (National IT Industry Promotion Agency), KISA (Korea Internet & Security Agency), KCMVP (Korea Cryptographic Module Validation Program), NIS (National Intelligence Service), NSR (National Security Research Institute), and NCSC (National Cyber Security Center). National R&D Centers: KIST, ETRI, KAIST, Seoul National University, Yonsei University, Korea University, POSTECH, UNIST, GIST, DGIST, KISTI, KIER, KIMM, KRICT, KFRI, KRIBB. International Standards Cooperation: ISO TC/SC Korean secretariats, IEC TC/SC Korean secretariats, ITU-T Study Group Korean chairs, 3GPP RAN/SA Korean chairs, IEEE 802 Korean chairs, W3C Korea office, OASIS Korea office, IETF Korea cooperation, OECD CSTP, UN ESCAP, APEC SCSC Korean cooperation. Korean Industrial Standards (KS) Catalog: KS X (Information) 25,000+, KS A (Basic) 15,000+, KS B (Machinery) 25,000+, KS C (Electrical) 18,000+, KS D (Metallurgy) 12,000+, KS E (Mining) 5,000+, KS F (Construction) 18,000+, KS H (Food) 8,000+, KS I (Environment) 5,000+, KS J (Biology) 3,000+, KS K (Textile) 15,000+, KS L (Ceramics) 7,000+, KS M (Chemistry) 12,000+, KS P (Medical) 5,000+, KS Q (Quality Mgmt) 4,000+, KS R (Transport) 12,000+, KS S (Service) 3,000+, KS T (Packaging) 4,000+, KS V (Shipbuilding) 5,000+, KS W (Aerospace) 3,000+ — totaling 220,000+ Korean Industrial Standards. Key Acts: Personal Information Protection Act (Act 19234, effective Sept 15, 2024), Electronic Government Act, Electronic Signature Act, Act on Promotion of Information and Communications Network Utilization and Information Protection, Information and Communications Infrastructure Protection Act, Data Industry Act, Public Data Act, AI Framework Act (Act 20212, effective July 2026), Industrial Technology Innovation Promotion Act, Framework Act on Science and Technology — 70+ Korean standardization-related laws.

Korea Digital Transformation Detailed Mapping

Korea operates digital transformation through a comprehensive governance system. Digital Government: Digital Platform Government Committee (established September 2022, under the President)·Ministry of the Interior and Safety Digital Government Bureau·e-Government Support Center·Gov.kr·National Citizen Service·KDIS (Korea Digital Information Society)·NIA (National Information Society Agency)·MOIS (Ministry of the Interior and Safety). K-DNS Infrastructure: Korea Internet & Security Agency (KISA) Korea Internet Center·KISA DNS Root Server·KRNIC (Korea Network Information Center)·BGP Korea·National Cyber Security Center (NCSC)·KCC (Korea Communications Commission)·MSIT (Ministry of Science and ICT)·NIA·NIPA. Korean Cloud Infrastructure: KT Cloud·NAVER Cloud (NCloud)·Samsung SDS Cloud·LG U+ Cloud·NHN Cloud·Kakao Enterprise Cloud·SK Telecom Cloud·KISA Cloud Security Assurance Program (CSAP)·KCMVP-validated cloud·ISMS-P (Information Security & Personal Information Management System). Korean Security Certifications: KISA ISMS-P certification·KCMVP (Korean Cryptographic Module Validation Program)·NIS (National Intelligence Service) "National Cryptographic Technology Operation Standards"·NCSC "National Cyber Security Strategy 2024-2028"·CC (Common Criteria) Korean evaluation bodies·EAL4·EAL5·KS X ISO/IEC 15408·19790·24759 Korean Profile. Korean Data Standards: NIA AI Hub·National Data Standardization Committee·Statistics Korea (KOSTAT)·MyData 4 Designated Combination Specialists (Samsung SDS, KICI, KOSTAT, KFTC)·National Institute of Korean Language·National Law Information Center·National Spatial Information Platform·National Spatial Data Center·Korean Spatial Information Standards. Finance and Fintech Standards: FSC (Financial Services Commission)·FSS (Financial Supervisory Service)·FIU (Financial Intelligence Unit)·BOK (Bank of Korea)·FSEC (Financial Security Institute)·KFTC (Korea Financial Telecommunications)·KSD (Korea Securities Depository)·KRX (Korea Exchange) 8-agency cooperation. 5G/6G Communications Infrastructure: 5G subscribers 35 million (2024)·5G base stations 350,000·6G commercialization target 2028·5G dedicated networks 16 operators·6G Acceleration Council (MSIT, 2024). K-Content: KOCCA (Korea Creative Content Agency)·MCST (Ministry of Culture, Sports and Tourism)·KCA (Korea Communications Agency)·Korea Culture Information Service Agency·Korean Film Archive·Korea Publishing Industry Promotion Agency. Data 3 Acts (Personal Information Protection Act·Credit Information Act·Telecommunications Network Act, 2020 enforcement)·Data Industry Act (2021)·Public Data Act (2013)·AI Framework Act (2026)·Digital Platform Government Framework Act (2024 proposed) — Korea digital transformation core legislation.

Korea Industrial, Research, Education Infrastructure Mapping

Korea operates its industrial ecosystem and standardization system through the following core infrastructure. Korea Top 5 Groups: Samsung, Hyundai Motor, LG, SK, Lotte. Each group operates standardization committees and ISO/IEC TC Korean secretariats. Samsung Electronics (semiconductors, displays, home appliances, telecom)·Hyundai Motor (automobiles, mobility)·LG Electronics (home appliances, displays, OLED)·SK hynix (memory)·LG Energy Solution·Samsung SDI (batteries)·POSCO Future M (materials)·Hyundai Mobis (parts). Korean IT Big Tech: NAVER (search, cloud, AI HyperCLOVA)·Kakao (messenger, payment, mobility, banking)·Coupang (e-commerce, logistics)·Karrot Market·Toss·Woowa Brothers. Korea Telcos: SK Telecom·KT·LG U+. 5G·5G dedicated networks·B2B cloud·AI businesses operating. Korea Top 7 Research Universities: Seoul National University·KAIST·POSTECH·Yonsei University·Korea University·UNIST·DGIST·GIST. All serve as standardization R&D bases and ISO/IEC/IEEE Korean chairs. Korea Government-affiliated National Research Institutes (26): KIST, KAERI, KIMM, KIER, KFRI, KRICT, KRIBB, KARI, KASI, KIGAM, KICT, KISTI, KETI, ETRI, NIMS, KIMS, KISDI, KOTRA, STEPI, KOEN, KICCE, KIET, KIPF, KIHASA, KICJ, KLRI. Korea Industrial Complexes / Tech Valleys: Pangyo Techno Valley·Dongtan·Gwanggyo·Songdo IBD·Yeouido·Gangnam·Sihwa·Banwol·Gumi·Ulsan·Changwon·Geoje·Yeosu·Onsan·Cheongju·Iksan·Gwangyang·POSCO Gwangyang Steel Mill·Asan Bay·Seosan·Songdo·Incheon Airport·Sejong·Cheongna·Geomdan. Korea Trade and Finance Infrastructure: Korea International Trade Association (KITA)·Korea Trade-Investment Promotion Agency (KOTRA)·Export-Import Bank of Korea (KEXIM)·Bank of Korea·Kookmin Bank·Shinhan·Hana·Woori·NH Nonghyup·IBK Industrial Bank·SC First Bank·Citi Bank Korea·HSBC Korea·DBS Korea — 14 Korean major banks and foreign banks. Korea K-POP / K-Content: HYBE·SM·YG·JYP 4 major entertainment companies·CJ ENM·tvN·MBC·KBS·SBS·EBS·YTN·Yonhap News TV·JTBC Korean broadcasting·NETFLIX Korea·Disney Plus·TVING·Wavve·Watcha·Coupang Play. Korea Gaming Industry: Nexon·NCsoft·Krafton·Netmarble·Kakao Games·Pearl Abyss·Com2uS·Gamevil·NHN·Smilegate·Webzen. Korea Automotive / Battery: Hyundai Motor·Kia·Genesis·LG Energy Solution·Samsung SDI·SK On·POSCO Future M·EcoPro·L&F battery cathode material suppliers. Korea Semiconductor: Samsung Electronics (HBM3E·HBM4)·SK hynix (HBM3E 12-Hi)·DB HiTek·SK siltron·SK Enpulse·Dongjin Semichem·Seoul Semiconductor·Simmtech·Samsung Display·LG Display.