Research ethics doesn't have a single founding moment, and it didn't arrive at its current form by design. It's the product of a long series of responses, each one prompted by something the previous arrangement didn't cover, or didn't prevent. Looking at the threads covered individually elsewhere on this site, laid out together as a single timeline, makes that pattern easier to see.
The timeline
| Date | Event |
|---|---|
| 1932–1972 | The US Public Health Service Syphilis Study (Tuskegee) runs for forty years before being exposed |
| 1947 | The Nuremberg Code sets out ten principles for legitimate human research, written into a war crimes verdict |
| 1961–63 | Milgram's obedience experiments, at Yale |
| 1964 | The Declaration of Helsinki is first adopted by the World Medical Association |
| 1971 | The Stanford Prison Experiment is conducted, and stopped after six days |
| 1974 | The US National Research Act establishes Institutional Review Boards |
| 1975 | The Declaration of Helsinki's Tokyo revision introduces independent committee review |
| 1979 | The Belmont Report sets out respect for persons, beneficence, and justice |
| Late 1960s–1991 | UK research ethics committees develop locally, without a national framework |
| 1991 | UK Local Research Ethics Committees are formally established |
| 1995–1998 | The EU Data Protection Directive and UK Data Protection Act 1998 |
| 2000s | UK research ethics governance is standardised nationally (COREC, then NRES) |
| 2011 | The UK Health Research Authority is established |
| 2013 | The Declaration of Helsinki's Fortaleza revision; an agreement is reached on access to HeLa genome data |
| 2018 | GDPR and the UK Data Protection Act 2018 bring data protection into the centre of research design |
| 2020 | The Schrems II ruling reshapes the rules for international data transfers |
| 2026 | The MHRA and HRA bring in the largest reform to UK clinical trial regulation in over twenty years, combining safety and ethical review into a single process |
| Today | Independent ethical review provides equivalent oversight for non-CTIMP, commercial, and academic research outside the NHS framework |
What the throughline actually is
None of these entries fixed everything that came before it — and most of them exist precisely because something earlier in the list left a gap. Nuremberg set out principles but created no mechanism to enforce them. Tuskegee showed what happens in that gap, and produced the Belmont Report and Institutional Review Boards. Milgram and Stanford showed that even principles and committees don't fully address psychological harm or the researcher's own position within a study. Data protection law developed on an entirely separate track for decades, until the realities of digital research made it impossible to treat as separate any longer. Each step responds to a limitation in the one before it — not because anyone got it wrong, exactly, but because no single framework, written at one point in time, can anticipate everything that follows.
Why "now" isn't the end of the list
The 2026 reforms are a useful recent example of the same pattern playing out again — just on the operational side rather than the principles side. The gap this time wasn't a missing safeguard, it was speed: combined MHRA and HRA review had brought study set-up times down from 169 days to 122, but the process for approving lower-risk changes to an already-approved study still ran on the same track as everything else. The resulting Route B pathway, now written into regulation, automatically approves eligible modifications unless a concern is raised within 14 days — a genuinely different mechanism from the review-everything-equally model that preceded it. As the HRA's chief executive put it at launch:
The updated regulations will bring greater transparency, faster approvals for clinical trials and simpler approaches for low-risk trials, making it quicker and easier to set up and run trials while placing patients at the centre of medical research. Matt Westmore, Chief Executive, Health Research Authority
The questions covered elsewhere on this site — how data residency rules apply to research, what genuinely counts as anonymised, how biobanks govern consent for research that doesn't exist yet, what happens to research data when the organisation holding it changes — are, in effect, further entries on this same timeline. They exist because the gaps they respond to have only recently become visible, in the same way the gap Tuskegee exposed wasn't visible — to the people with the power to close it — until it had already run for forty years.
A different way to see independent review
It's tempting to think of independent ethical review as a hurdle, inherited from history, that a study has to clear. The history suggests something closer to the opposite: review is the current form of an effort that's been running, in various shapes, for the better part of a century — an effort to make research something that can be trusted, by the people who take part in it and by the people who rely on what it finds. Every question a reviewer asks today has, in some form, already been asked before — usually because, at some point, somebody needed the answer and didn't have one.
