What Is Research Ethics Compliance?
Research ethics compliance refers to the process of obtaining approval from an Institutional Review Board (IRB) in the United States or a Research Ethics Board (REB) in Canada before conducting research involving human participants. These oversight bodies review research protocols to ensure that studies respect participant autonomy, minimize harm, ensure fair participant selection, and maintain an acceptable balance between research benefits and risks. The frameworks trace back to the Belmont Report (1979) in the US and the Tri-Council Policy Statement (TCPS 2) in Canada.
Who Needs to Comply?
- Academic researchers at universities and colleges. IRB/REB review is mandatory for any research involving human participants
- Researchers receiving federal funding: in Canada, TCPS 2 compliance is required for research funded by CIHR, NSERC, or SSHRC; in the US, the Common Rule applies to federally funded research
- Healthcare researchers: ethics review is typically required by institutional policy and health privacy legislation (PHIPA, HIPAA)
- Government research teams conducting studies involving public participation
- Contract research organizations conducting studies on behalf of academic or government clients that require ethics approval
- Market research agencies: when conducting research that crosses into human subjects research territory (sensitive topics, vulnerable populations, experimental designs)
Gray areas: Most commercial market research, customer satisfaction surveys, brand tracking, product testing, does not require IRB/REB review. The line blurs when commercial research involves sensitive topics (mental health, substance use, financial hardship), vulnerable populations (children, patients, Indigenous communities), experimental interventions, or when the findings will be published in academic journals. Industry self-regulation through codes like the ESOMAR/ICC Code and Insights Association standards provides ethical guidance for commercial research that falls outside formal IRB/REB jurisdiction.
Key Requirements for Research Teams
Informed Consent
Ethics boards require that participants provide informed consent based on a clear understanding of what the research involves, what data will be collected, how it will be used, any foreseeable risks, their right to withdraw at any time without consequences, and who to contact with questions. For survey research, the consent process typically occurs at the beginning of the survey as a consent screen that participants must acknowledge before proceeding. The consent language must be written at a reading level appropriate for the participant population, typically Grade 8 or below.
Risk Assessment and Mitigation
Every study must assess the potential risks to participants and implement measures to mitigate them. For survey research, risks may include psychological distress from sensitive questions (trauma, grief, health concerns), breach of confidentiality, social or economic harm if responses are linked to identifiable individuals, and fatigue or time burden from excessively long instruments. Mitigation strategies include providing mental health resources after sensitive questions, implementing strong data security, anonymizing responses, and keeping surveys to a reasonable length.
Vulnerable Populations
Research involving vulnerable populations triggers heightened ethical scrutiny. Vulnerable populations include children and minors, individuals with cognitive impairments, prisoners, patients in acute care, Indigenous communities, pregnant individuals, and people in dependent relationships (students evaluated by professors, employees surveyed by employers). Additional protections may include parental or guardian consent, simplified consent processes, independent advocates, and community consultation. IRBs/REBs may require a full board review (rather than expedited review) for research with vulnerable populations.
Privacy and Confidentiality
Ethics compliance requires specific protections for participant data. Research protocols must describe how data will be stored, who will have access, how identifiers will be managed, and when data will be destroyed. Ethics boards evaluate whether the level of identification is necessary for the research, if anonymized data would suffice, the board may require anonymization. For qualitative research (interviews, focus groups), additional protections address audio/video recordings, transcription, and the use of direct quotations.
Ongoing Compliance and Reporting
Ethics approval is not a one-time event. Researchers must report adverse events (participant distress, data breaches), submit amendments for protocol changes (adding questions, changing recruitment methods, extending the study period), and renew approval annually for ongoing studies. For longitudinal survey research, panel studies, or community tracking, this means maintaining an active relationship with the ethics board throughout the project lifecycle.
Compliance Checklist
- Determined whether your study requires IRB/REB review based on the research design, population, and funding source
- Submitted a complete research protocol including objectives, methodology, survey instrument, and data handling plan
- Developed an informed consent document written at an appropriate reading level with all required elements
- Conducted a risk assessment and documented mitigation strategies for identified risks
- Identified whether the study involves vulnerable populations and implemented additional protections if needed
- Described data storage, access controls, anonymization procedures, and retention/destruction timelines
- Obtained approval before beginning any data collection (not retroactively)
- Established a process for reporting adverse events and protocol amendments to the ethics board
- Set a calendar reminder for annual renewal if the study extends beyond the initial approval period
- Ensured all team members with participant contact or data access have completed ethics training (e.g., TCPS 2 CORE, CITI)
- Documented how the study meets relevant industry codes (ESOMAR, Insights Association) if commercial research
How This Compares to Industry Self-Regulation
| Aspect | IRB/REB (Formal Ethics Review) | ESOMAR/ICC Code | Insights Association Code |
|---|---|---|---|
| Mandatory for | Academic, federally funded, healthcare research | Voluntary (industry standard) | Voluntary (industry standard) |
| Pre-study review | Yes, approval before data collection | No formal pre-study review | No formal pre-study review |
| Consent standard | Informed consent with specific required elements | Informed consent expected | Informed consent expected |
| Vulnerable populations | Explicit additional protections required | Guidance provided | Guidance provided |
| Ongoing oversight | Annual renewal, adverse event reporting, amendments | Self-monitoring | Self-monitoring |
| Enforcement | Can halt research, revoke approval | Membership consequences, reputational | Membership consequences, reputational |
| Scope | Human subjects research | Market research, opinion research | Research and analytics |
How Quali-Fi Helps You Comply
Quali-Fi supports ethics-compliant research through platform features that address the core requirements ethics boards evaluate. Consent management tools let you build multi-screen consent flows with all IRB/REB-required elements, purpose, procedures, risks, rights, contact information, presented in plain language before any data collection begins. Consent responses are timestamped and logged, providing the documentation ethics boards and auditors require.
Data security features. AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, and audit logging, address the data protection requirements that ethics protocols must describe. Anonymization tools let you remove or mask identifiers from datasets, supporting the privacy protections that ethics boards expect. For qualitative research involving recordings, Quali-Fi's transcription and analysis tools operate within the platform's security perimeter, avoiding the data exposure risks of exporting recordings to third-party transcription services.
For research teams managing multiple studies with different ethics requirements, Quali-Fi's project-level configuration allows you to set consent flows, access controls, anonymization rules, and retention schedules per study, ensuring that each project's ethics commitments are enforced at the platform level rather than relying on manual compliance procedures. SOC 2 Type II certification provides the independent validation that procurement and ethics boards increasingly require from research technology vendors.
FAQs
Does commercial market research need IRB/REB approval?
Most standard commercial research, customer satisfaction surveys, brand awareness studies, product testing, does not require formal IRB/REB review. However, the line is not always clear. If your commercial research involves sensitive topics, vulnerable populations, experimental designs, or will be published in academic literature, ethics review may be advisable or required. When in doubt, consult with an ethics board, many offer pre-screening consultations to determine whether full review is needed.
What is the difference between exempt, expedited, and full board review?
Exempt research (US terminology) involves minimal risk and falls into specific regulatory categories, certain survey research, observation, and analysis of existing data. Expedited review is available for research that involves no more than minimal risk and falls into approved categories. Full board review is required for research involving greater than minimal risk or vulnerable populations. In Canada, the terminology differs (delegated vs. Full board review under TCPS 2), but the concept is similar, risk level determines the review pathway.
How long does ethics approval take?
Timelines vary significantly by institution. Expedited reviews may take 2-4 weeks. Full board reviews typically require 4-8 weeks and depend on the board's meeting schedule. Plan for at least one round of revisions, most initial submissions receive requests for clarification or modification. For time-sensitive commercial research, the timeline pressure is a primary reason firms explore whether formal ethics review is actually required for their specific study.
Can I use one IRB/REB approval for multiple survey waves?
Generally, the initial approval covers the study as described in the protocol. If subsequent waves use the same methodology, instrument, and population, they may be covered under the original approval. If you change the questionnaire, recruit a different population, or extend the study beyond the approved period, you will need to submit an amendment. Annual renewals are required for ongoing studies regardless.
What ethics training is required?
In Canada, the Tri-Council Policy Statement (TCPS 2) CORE tutorial is the standard training requirement for researchers at institutions that receive tri-council funding. In the US, the CITI (Collaborative Institutional Training Initiative) program is the most widely accepted. Many institutions require all team members with participant contact or data access to complete training, not just the principal investigator.
Related Compliance Topics
- Consent Management in Surveys. Building IRB/REB-compliant consent flows
- PHIPA and Survey Data. Health ethics and privacy intersection
- Children and Survey Compliance, Ethics requirements for research with minors
- Indigenous Data Sovereignty. Community-based ethics frameworks
- Data Anonymization for Research. Protecting participant identity
- HIPAA Survey Compliance. US health research ethics and privacy