Human testing is legal in most countries, but only under strict conditions. Medical research, drug trials, cosmetic safety testing, and other experiments involving human participants are all permitted by law, provided researchers follow a layered system of protections designed to prevent abuse. The rules vary depending on the type of testing, the country, and who is being tested, but certain core principles apply almost everywhere: participants must give informed consent, an independent review board must approve the study, and the potential benefits must justify the risks.
What Counts as Human Testing
The term “human testing” covers a broad range of activities. Clinical trials for new drugs or medical devices are the most heavily regulated form. But human testing also includes psychological experiments, nutritional studies, cosmetic safety assessments, and even surveys or behavioral research that collect data from people. Each category faces different levels of oversight.
In the United States, the FDA draws a sharp line between drugs and cosmetics. Drug trials require premarket approval and must follow detailed federal regulations. Cosmetics, by contrast, do not need FDA premarket approval, and neither the law nor FDA regulations require specific tests to demonstrate the safety of individual cosmetic products or ingredients. If a cosmetic product claims to treat or prevent disease, or to change how the body functions, it legally becomes a drug and falls under the stricter rules.
The Legal Framework in the U.S.
Federal law governs human research in the United States through two main channels. For any research involving FDA-regulated products (drugs, biologics, medical devices), the rules are found in Title 21 of the Code of Federal Regulations. For federally funded research of any kind, the governing law is known as the Common Rule, formally codified as 45 CFR 46. The Common Rule was most recently revised in 2018 and applies to research initiated after January 2019.
Both frameworks require that an Institutional Review Board, or IRB, approve any study before it begins. An IRB is an independent committee with the legal authority to approve, require changes to, or reject a research protocol. Federal regulations require at least one member with a scientific background and at least one whose primary concerns are non-scientific. Members with a conflicting interest in a particular study are prohibited from voting on it, though they can provide information if the board requests it. The IRB must also conduct continuing reviews at least once a year and can observe the consent process or the research itself at any time.
If an IRB disapproves a study, it must provide the investigator with a written explanation. No researcher can legally bypass this step for regulated research. The system is designed so that no single person decides whether a study is ethical enough to proceed.
Informed Consent Requirements
The legal backbone of human testing is informed consent. Under federal law, a valid consent form must include eight specific elements before a person can enroll in a study:
- Purpose and duration: A clear statement that the study involves research, what it aims to learn, how long participation lasts, and which procedures are experimental.
- Risks: A description of any reasonably foreseeable risks or discomforts.
- Benefits: A description of any expected benefits to the participant or to others.
- Alternatives: Disclosure of other treatments or procedures that might help the participant.
- Confidentiality: How records will be protected, along with a note that the FDA may inspect them.
- Compensation for injury: For studies involving more than minimal risk, an explanation of whether compensation or medical treatment is available if something goes wrong.
- Contact information: Who to reach with questions about the research, participants’ rights, or a research-related injury.
- Voluntary participation: A statement that participation is voluntary, that refusing carries no penalty, and that the participant can quit at any time without losing any benefits they’re otherwise entitled to.
Skipping any of these elements can make a study legally noncompliant. Consent must also be genuinely voluntary. Pressuring someone, offering excessive financial incentives to people in desperate situations, or failing to explain risks in understandable language can all invalidate consent even if a form was signed.
When Consent Can Be Waived
There is one narrow exception. In emergency medical research, federal regulations allow studies to proceed without prior informed consent, but only when every one of several conditions is met. The participants must be in a life-threatening situation where available treatments are unproven or inadequate. Obtaining consent must be genuinely impossible because the person’s medical condition prevents it, the treatment must be given before a legal representative can be reached, and there is no practical way to identify eligible participants in advance.
Even then, the research must offer a realistic prospect of direct benefit to the participant, the risks must be reasonable compared to the severity of their condition, and the investigator must commit to attempting contact with a legal representative within the treatment window. This exception exists primarily for research on cardiac arrest, severe trauma, and stroke, where minutes matter and patients are unconscious.
Extra Protections for Vulnerable Groups
Federal regulations add additional layers of protection for populations considered especially vulnerable to coercion or harm. Separate subparts of 45 CFR 46 address research involving pregnant women, prisoners, and children. These rules impose extra requirements, such as limiting the level of risk that’s acceptable, requiring parental permission alongside a child’s own agreement (called assent), and restricting the types of research that can be conducted on prisoners. The general principle is that the less autonomy a person has, the more safeguards the law demands.
How the Rules Are Enforced
Violating human testing laws carries real consequences. The FDA can issue notices of noncompliance for failures such as not registering a clinical trial, not submitting required data, or knowingly submitting false or misleading information. Researchers who receive a notice have 30 calendar days to take corrective action. If they don’t, the FDA can impose civil money penalties. In more serious cases, violations can lead to injunctions or criminal prosecution.
Beyond the FDA, institutions that receive federal funding risk losing that funding entirely if they fail to comply with the Common Rule. For a university or hospital, that can mean tens or hundreds of millions of dollars. Researchers who violate the rules can be barred from conducting future studies, lose their professional licenses, or face lawsuits from harmed participants.
How It Works Outside the U.S.
Most countries have their own legal frameworks for human testing, but they share a common foundation. The Declaration of Helsinki, issued by the World Medical Association, sets ethical principles that have shaped laws worldwide. It requires that researchers follow the ethical, legal, and regulatory standards of the country where the research takes place, along with applicable international standards. Critically, the Declaration states that no national or international requirement should reduce the protections it guarantees to research participants.
In the European Union, human testing is governed by Clinical Trials Regulation 536/2014, which replaced the earlier Clinical Trials Directive in January 2022. The regulation harmonizes rules across EU member states, creating a single submission portal and a unified assessment procedure that leads to one decision rather than separate approvals in each country. It includes its own rules on informed consent, participant protection, and transparency.
Other countries, from Japan to Brazil to Australia, maintain their own regulatory agencies and ethics committees that perform functions similar to the FDA and IRBs. The details differ, but the core structure of independent review, informed consent, and risk-benefit analysis is nearly universal among countries with developed research systems.
What Makes Human Testing Illegal
Human testing crosses into illegal territory when it skips any of the required safeguards. Conducting experiments without IRB approval, enrolling participants without proper informed consent, exposing people to risks that outweigh the potential benefits, targeting vulnerable populations without additional protections, or failing to register and report trial results can all trigger enforcement actions. Testing that involves deception, coercion, or exploitation isn’t just unethical. It’s a violation of federal law.
The legal system around human testing exists because of historical abuses, from Nazi medical experiments to the Tuskegee syphilis study in the U.S., where Black men were deliberately left untreated for decades. Every layer of modern regulation traces back to those failures. The law doesn’t ban human testing. It makes sure people are protected when it happens.