1. Introduction

Biomedical research governance in Australia is the legal, ethical, scientific and institutional framework governing research involving human participants, biological samples, genetic information, medicines, medical devices, vaccines, embryos and other biomedical technologies.

Its central purpose is to ensure that scientific progress does not override human dignity, informed consent, privacy, safety, scientific integrity and public accountability.

Australia does not rely on a single comprehensive biomedical research statute. Instead, governance operates through a combination of Commonwealth and state and territory legislation, national ethical guidelines, research-integrity codes, institutional policies, Human Research Ethics Committees (HRECs), and regulatory bodies such as the Therapeutic Goods Administration (TGA).

Important current-law update: As of 27 October 2026, the National Statement on Ethical Conduct in Human Research 2025 is the operative national ethical statement. It took effect on 23 June 2026, replacing the 2023 version.

NHMRC+1

The phrase Biomedical Research Governance Australia is a descriptive legal concept rather than the title of a single Australian Act. Its principles must therefore be examined across several interconnected legal regimes.

2. Principal legal and regulatory framework

National Health and Medical Research Council Act 1992 (Cth)

Establishes the statutory framework for the National Health and Medical Research Council (NHMRC) and the issuance of national research guidelines. The National Statement is developed jointly by the NHMRC, Australian Research Council and Universities Australia.

National Statement on Ethical Conduct in Human Research 2025

Provides the principal national ethical framework for human research, including research design, risk assessment, consent, vulnerable participants, ethics review and institutional responsibilities. Compliance is also linked to relevant research-funding and institutional arrangements.

NHMRC+1

Therapeutic Goods Act 1989 (Cth)

Regulates therapeutic goods, including medicines, biological products and medical devices. Clinical trials involving unapproved therapeutic goods commonly proceed through the TGA's Clinical Trial Notification (CTN) or Clinical Trial Approval (CTA) pathways, as applicable.

Privacy Act 1988 (Cth)

Regulates the handling of personal information by covered organisations and agencies, including sensitive health information and genetic information. State and territory privacy laws may also apply, particularly in public health services.

Specialist legislation

Depending on the research, additional regimes include the Gene Technology Act 2000 (Cth), Research Involving Human Embryos Act 2002 (Cth), Prohibition of Human Cloning for Reproduction Act 2002 (Cth), Patents Act 1990 (Cth) and applicable state and territory laws.

These frameworks overlap but perform different functions. Ethics approval does not automatically confer statutory permission to use a therapeutic product, conduct gene technology activities or perform embryo research.

3. The institutional structure of biomedical research governance

A. National Health and Medical Research Council

The NHMRC develops national ethical guidance, supports research integrity and administers relevant funding and certification arrangements.

Its principal functions include:

Developing the National Statement and specialist ethical guidelines.

Promoting responsible research conduct.

Supporting the HREC system.

Providing guidance on research involving Aboriginal and Torres Strait Islander peoples and communities.

Establishing requirements relevant to NHMRC-funded research.

The National Statement operates alongside legislation and institutional policies. It should not be treated as a substitute for statutory law or as creating an independent civil cause of action in every case.

NHMRC+1

B. Human Research Ethics Committees

HRECs review the ethical acceptability of proposed research involving humans. They examine matters such as:

Whether risks are justified by anticipated benefits.

Whether participants receive adequate information.

Whether consent is voluntary and informed.

Whether recruitment practices are fair.

Whether privacy, confidentiality and data security are adequately protected.

Whether appropriate safeguards exist for people who may face increased risk of harm.

Under the 2025 National Statement, research assessed as involving more than low risk must be reviewed by an HREC. Lower-risk research may qualify for an appropriate proportionate review pathway. Ethics approval must be obtained before research requiring that approval begins; retrospective approval is not supported.

NHMRC+1

An HREC's approval is not the same as an institution's authorisation to conduct a project. A hospital or university may separately examine staffing, insurance, contracts, financial arrangements, site capacity and compliance with local policies.

C. Therapeutic Goods Administration

The TGA regulates therapeutic goods under the applicable statutory framework.

For clinical trials involving unapproved therapeutic goods, the CTN scheme generally involves notification by the sponsor after the relevant HREC has approved the trial, while the CTA scheme requires TGA approval. Both pathways require the applicable institutional and ethics arrangements.

The distinction is fundamental: ethical acceptability and regulatory authorisation are separate questions.

NHMRC+1

D. Universities, hospitals and research sponsors

Research institutions must establish governance procedures, determine whether ethics review is required, authorise research at their sites and monitor compliance.

The 2025 National Statement expressly addresses institutional governance responsibilities and the allocation of responsibilities between institutions, researchers and ethics-review bodies.

NHMRC+1

Sponsors may also have contractual, insurance, safety-reporting and regulatory obligations. A researcher cannot avoid responsibility simply because an external sponsor supplied the protocol or funding.

4. Fundamental principles of biomedical research governance

A. Informed consent and bodily autonomy

Informed consent is a central principle of biomedical research. Participants should receive information about the purpose of the study, procedures, foreseeable risks, potential benefits, alternatives, confidentiality, and their right to withdraw where applicable.

Consent must be voluntary and appropriate to the participant's decision-making capacity. Researchers should not imply that participation is compulsory or that refusing research will automatically affect ordinary clinical care.

Consent to medical treatment and consent to research are not interchangeable. A person may agree to receive treatment without agreeing to have their tissue, genetic data or medical records used for an unrelated research project.

B. Risk-benefit assessment

Researchers and ethics committees must assess whether the expected scientific or social value justifies the foreseeable risks and burdens.

Relevant risks include:

Physical injury or adverse drug reactions.

Psychological distress and stigma.

Re-identification of supposedly anonymous genetic data.

Discrimination arising from genetic or health information.

Community-level harms, including misuse of Indigenous biological materials.

Long-term or uncertain consequences of emerging technologies.

Risk assessment must be proportionate to the nature of the research, the participants involved and the available safeguards.

C. Scientific validity and research integrity

Ethical approval does not make scientifically defective research ethically acceptable. A study incapable of producing meaningful results may expose participants to risk without adequate scientific justification.

The Australian research-integrity framework addresses fabrication, falsification, plagiarism, questionable research practices, conflicts of interest and institutional investigation procedures.

The Australian Code for the Responsible Conduct of Research is particularly important in establishing responsibilities for researchers and institutions. Its requirements operate alongside applicable employment arrangements, funding conditions, contracts and legislation.

D. Privacy and genetic confidentiality

Biomedical research frequently involves sensitive personal information, including genomic sequences, disease histories, reproductive information and clinical records.

Researchers should establish appropriate controls for:

Data collection and permitted uses.

Access permissions and cybersecurity.

Data sharing and overseas transfers.

Retention, destruction and withdrawal requests.

Secondary research and future commercial use.

Re-identification risks and incidental findings.

Removing a participant's name does not necessarily anonymise genomic information. A genetic dataset may be linkable to external datasets or relatives. Consequently, privacy protection requires more than simply removing direct identifiers.

E. Justice and protection of participants

Research recruitment should be fair and should not systematically place the burdens of research on disadvantaged groups while directing its benefits elsewhere.

Additional safeguards may be needed for children, people with impaired decision-making capacity, pregnant participants, prisoners, people experiencing serious illness and communities exposed to historical research exploitation.

The applicable requirements depend on the study, the participants and the relevant provisions of the National Statement and other law.

5. Important Australian case laws

Australian courts have not developed one comprehensive doctrine called biomedical research governance. Instead, relevant principles emerge from decisions on informed consent, negligence, bodily integrity, privacy, professional duties and statutory powers.

The following cases are especially useful for understanding the legal boundaries of biomedical research.

Case 1: Rogers v Whitaker (1992) 175 CLR 479

High Court of Australia · [1992] HCA 58

Facts: A patient underwent eye surgery. The surgeon failed to warn her of a rare risk of sympathetic ophthalmia that could damage the other eye. The surgery itself was performed with appropriate skill, but the complication resulted in severe harm.

Legal principle: The High Court established that a medical practitioner must warn patients of material risks. A risk may be material where a reasonable person in the patient's position would attach significance to it, or where the practitioner knows or ought to know that the particular patient would do so.

PubMed+1

Application to biomedical research: Although the case concerned treatment rather than a research trial, its informed-choice reasoning is relevant to research consent. A researcher should not omit a material risk merely because the risk is uncommon or because other researchers ordinarily do not discuss it.

For example, if a gene-therapy study carries a rare but serious risk of irreversible harm, the consent process should address that risk in a manner appropriate to the evidence and the participant's circumstances.

Significance: The case reinforces individual autonomy and rejects the proposition that customary professional practice alone determines what information a person should receive.

Case 2: Chappel v Hart (1998) 195 CLR 232

High Court of Australia · [1998] HCA 55

Facts: A patient suffered serious injury following an operation. She had specifically asked about the risk of damage to her voice, and the case concerned the consequences of inadequate warning about risks associated with the procedure.

Legal principle: The High Court considered the relationship between failure to warn, causation and the injury that followed. The case illustrates that a failure to disclose relevant information may be legally significant even when the procedure was performed with appropriate technical care.

High Court of Australia+1

Application to biomedical research: If a participant was not adequately informed about a material risk and subsequently suffered that harm, the legal analysis may consider whether proper disclosure would have changed the decision to participate and whether the breach caused the injury.

For instance, a participant in an experimental drug trial may argue that adequate disclosure would have led them to decline enrolment.

However, liability is not automatic. The claimant must establish the relevant elements of the cause of action, including breach, causation and legally recognised damage where required.

Significance: Research institutions should maintain clear consent documentation, disclose relevant risks and avoid treating a signed consent form as a complete defence to every claim.

Case 3: Reeves v The Queen [2013] HCA 57

High Court of Australia · [2013] HCA 57

Legal issue: The case concerned criminal law, consent to a surgical procedure and the distinction between consent to the nature of an intervention and the separate obligation to disclose material risks.

Legal principle: The decision considered the application of the informed-consent principles developed in Rogers v Whitaker, including the distinction between consent relevant to battery and disclosure relevant to negligence.

High Court of Australia+1

Application to biomedical research: Researchers and institutions must distinguish between two questions:

Did the participant consent to the nature of the procedure or intervention?

Was the participant adequately informed about material risks and relevant choices?

A research consent form must therefore reflect the actual intervention, not merely the fact that a participant signed a document.

Significance: Consent is a substantive legal and ethical process rather than a purely administrative formality.

Case 4: Hassan v Sydney Local Health District [2021] NSWCA 97

New South Wales Court of Appeal

Facts: The litigation concerned allegations relating to medical procedures, the scope and validity of consent, and an allegation that tissue had been used for research without consent. The proceedings involved disputes about whether the necessary consent had been given for a muscle biopsy.

Legal significance: The dispute demonstrates the importance of determining exactly what a patient authorised and of distinguishing a claim about consent from claims requiring proof of professional negligence. The litigation also illustrates the evidentiary importance of medical records, consent documents and expert evidence.

CaseChat AU+1

Application to biomedical research: If a hospital obtains tissue during clinical care and subsequently proposes to use it for research, the institution must examine the applicable consent, ethics-review and legal requirements. Consent to a clinical procedure should not automatically be interpreted as unrestricted consent to every subsequent research use.

The case must be read in the context of its particular procedural history; it does not establish a universal rule that every use of retained tissue requires a new signature in every circumstance.

Significance: Research institutions should document the purpose and scope of tissue collection, the basis for secondary use, any applicable ethics approval and the safeguards governing access to specimens.

Case 5: Dean v Phung [2012] NSWCA 223

New South Wales Court of Appeal

Legal issue: The case concerned treatment allegedly provided without proper justification and the limits of consent to medical intervention.

Legal principle: The litigation illustrates that the existence of consent does not necessarily resolve every question about the lawfulness of a procedure. The nature of the intervention, its justification and the surrounding circumstances remain relevant.

AustLII Communities+1

Application to biomedical research: A participant's signature does not authorise researchers to disregard the approved protocol, perform unrelated procedures or depart from legal requirements. Consent must be assessed together with the study's purpose, its ethical approval and the actual conduct of the researchers.

Significance: Biomedical research requires both valid consent and compliance with independent ethical, professional and statutory obligations.

Summary of the case-law principles

These are related medical-law authorities, not all direct rulings on clinical-trial governance. Their relevance lies in the legal principles that can inform disputes arising from biomedical research.

6. Clinical trials and biomedical research accountability

Clinical trials are among the most closely governed forms of biomedical research because they may expose participants to experimental medicines, vaccines, biological products or medical devices.

The approval process

Step 1: Research protocol

Define objectives, methodology, eligibility criteria and safety measures.

Step 2: Ethics review

HREC or another appropriate review pathway assesses ethics and risk.

Step 3: Regulatory and institutional authorisation

Obtain applicable TGA pathway compliance and site authorisation.

Step 4: Registration and recruitment

Complete required trial registration before participant recruitment and satisfy applicable consent requirements.

Step 5: Monitoring and reporting

Monitor safety, report relevant events, manage protocol changes and close or suspend the study when required.

The sequence is a general illustration rather than a universal statutory checklist. The applicable requirements depend on the type of trial and therapeutic product.

The NHMRC identifies HREC review, privacy compliance and registration of applicable clinical trials as important elements of Australian research governance. Australian-based trials involving therapeutic goods may be subject to the TGA's CTN or CTA arrangements.

NHMRC+1

What happens when a trial causes injury?

Potential legal consequences may include:

Negligence: failure to exercise reasonable care in study design, participant selection, monitoring or treatment.

Breach of statutory obligations: failure to comply with applicable legislation or regulatory conditions.

Breach of contract: failure to comply with enforceable obligations in trial or funding agreements.

Consent-related claims: intervention outside the scope of valid consent, or failure to disclose material risks.

Research misconduct: fabrication, falsification or other breaches of research-integrity requirements.

Privacy liability: unlawful disclosure, misuse or inadequate protection of personal information.

The available remedy depends on the facts and the relevant jurisdiction. Compensation for injury is not automatic merely because an adverse event occurred during a trial.

7. Governance of specialised biomedical research

A. Genetic engineering and gene technology

The Gene Technology Act 2000 (Cth) and the associated regulatory framework govern specified dealings with genetically modified organisms. The Office of the Gene Technology Regulator (OGTR) oversees the relevant licensing and regulatory system.

Researchers must determine whether their activities fall within the statutory scheme and whether a licence, institutional biosafety assessment or other approval is required.

Human gene therapy may additionally involve therapeutic-goods regulation, clinical-trial ethics review, privacy obligations and specialist safety considerations.

B. Embryo research and reproductive biotechnology

Australian embryo research is subject to specialised legislation, including the Research Involving Human Embryos Act 2002 (Cth) and the Prohibition of Human Cloning for Reproduction Act 2002 (Cth).

Depending on the activity, researchers may need specific licences and must comply with statutory restrictions. General HREC approval cannot override a legislative prohibition or replace a required statutory licence.

C. Research involving Aboriginal and Torres Strait Islander peoples

Research involving Aboriginal and Torres Strait Islander peoples and communities raises additional questions concerning collective interests, cultural safety, community participation, data governance and the handling of biological materials.

The NHMRC publishes specialist ethical guidance for research involving these communities. Researchers should engage relevant communities in research design and governance where appropriate, respect cultural protocols and establish clear arrangements for data access, benefit-sharing and publication.

Australian Research Council+1

D. Artificial intelligence and genomic research

AI-assisted diagnosis, genomic prediction and algorithmic drug discovery introduce additional governance issues:

Whether training data were lawfully obtained and used.

Whether participants were adequately informed about secondary data uses.

Whether algorithmic results are scientifically validated.

Whether models produce discriminatory or unreliable results.

Who is responsible for erroneous research conclusions or clinical decisions.

How researchers document, explain and independently assess automated outputs.

AI does not displace existing obligations under privacy law, research ethics, professional negligence principles or therapeutic-goods regulation. The applicable legal requirements depend on how the technology is used.

8. Institutional accountability and judicial review

Biomedical research governance also requires mechanisms for challenging defective decisions and investigating misconduct.

A research institution should have documented procedures for:

Investigating complaints about consent, safety or misconduct.

Reviewing protocol deviations and adverse events.

Managing conflicts of interest.

Protecting complainants and research participants.

Suspending or terminating unsafe research.

Maintaining records of decisions and corrective actions.

Where a decision is made by a public authority, judicial review may be available if the legal requirements for review are met. The availability and scope of review depend on the decision-maker, the source of the power, the governing statute and the nature of the alleged legal error.

Not every HREC decision is automatically subject to judicial review, and disagreement with an ethical assessment does not itself establish legal invalidity.

9. Critical legal challenges

A recurring problem is the difference between formal approval and effective oversight. An approved protocol cannot guarantee safe conduct if institutions fail to monitor implementation, investigate complaints or act on new evidence.

10. Conclusion

Biomedical research governance in Australia is a layered system integrating legislation, ethical standards, institutional responsibility and judicially enforceable legal duties.

The National Statement on Ethical Conduct in Human Research 2025 provides the current national ethical framework. The NHMRC, HRECs, TGA, OGTR, universities, hospitals and research sponsors perform different but interconnected functions.

The leading medical-law decisions, particularly Rogers v Whitaker and Chappel v Hart, demonstrate why disclosure, individual choice, reasonable care and causation matter when research or medical interventions cause harm. Cases involving tissue use and the scope of consent further illustrate the importance of documenting what a participant has actually authorised.

The central legal proposition is that scientific permission, ethical acceptability and legal accountability are distinct requirements. Responsible biomedical research must satisfy all applicable requirements rather than treating ethics approval or a signed consent form as a complete defence against liability.

Primary sources for further study

National Health and Medical Research Council — National Statement on Ethical Conduct in Human Research.

Therapeutic Goods Administration — Official website and clinical-trial regulatory information.

Office of the Gene Technology Regulator — Official website.

High Court of Australia — Judgments and case law.

Academic note: For a formal research paper or dissertation, verify the full judgments and the current consolidated legislation. The cases discussed above establish relevant medical-law principles, but they should not be cited as though each directly determined the entire Australian biomedical research governance framework.