Texting Trial Participants Without Creating a Finding

Texting is the fastest way to reach a trial lead and the easiest way to create a compliance problem. The rules that govern it come from three different places — telecom law, human subjects protection, and privacy regulation — and each one cares about something different. Here's what matters in practice.

Consent to be texted is not consent to participate

Telecom rules in the US (the TCPA framework) require prior express written consent before you send marketing or promotional texts to a mobile number, including automated ones. Research recruitment messages are generally treated as promotional when they're inviting someone to screen for a study.

Practically, that means:

• Your web form, phone script, and referral intake all need a clear line stating the person agrees to receive text messages about research studies, including automated messages, and that consent isn't a condition of care or participation.
• Capture the timestamp, the IP or call record, and the exact wording the person saw. If someone complains two years later, the only defense is a record of what they agreed to.
• A verbal yes on a call counts only if you document it and the person heard the disclosure. Train coordinators to read it, not paraphrase it.

Separately, every recruitment text an IRB sees should be an approved recruitment material. If the text says something the approved ad doesn't say, you've got a protocol deviation waiting to be found at monitoring.

Build opt-out into the workflow, not just the footer

Include STOP language in your first message of any outreach sequence and honor opt-outs immediately and permanently. The failure mode sites hit most often isn't ignoring a STOP — it's honoring it in the texting tool while the person stays active in the CRM, then re-adding them from a new list six months later. Opt-out status has to live on the patient record, not the message channel.

Also respect quiet hours. Texting outside roughly 8am to 9pm local time is a straightforward violation, and it's easy to trip when your site serves multiple time zones or when someone schedules a batch send after hours.

Treat message content as PHI exposure

SMS is unencrypted and lands on a device other people may see. Keep pre-consent messages thin:

1. Identify your site by name, not by condition. "City Research" rather than "the hepatitis study team."
2. Don't name the indication, drug, or diagnosis in outreach to someone who hasn't enrolled.
3. Don't ask for clinical details over text. Move to a call.
4. After enrollment, confirm in writing that the participant accepts text as a communication method and note the privacy limitations — many consent forms now have a line for this.

What auditors will ask for

Be ready to produce, per participant: the consent language captured, the date and source of that consent, the full message history, opt-out status and date, and IRB approval covering the message templates used. If your texting lives in a personal phone or an unlogged app, none of that exists.

A few habits that prevent most problems

• Use templates only; no free-texting from approved campaigns without a logged record.
• Never text from a coordinator's personal number.
• Re-submit templates to the IRB when you edit them, even slightly.
• Audit your opt-out list against your outreach list monthly.
• Set a staleness rule — if consent to contact is older than a year with no response, confirm before resuming.

None of this slows down outreach. It just means the speed you gain from texting doesn't come back as a finding.