Understanding Research Ethics Approval: What You Need Before Data Collection

A strong research question is not enough to begin a study. Before recruiting participants, conducting interviews, distributing surveys, accessing private records, or collecting biological samples, researchers may need formal ethics approval.

This process is designed to protect the people, communities, animals, data, and institutions involved in research. It requires an independent body to examine whether the proposed methods are ethically acceptable and whether the expected value of the study justifies its risks.

Ethics review should not be treated as a final administrative step completed after the methodology has already been fixed. It is part of research design. Preparing an application often reveals unclear consent procedures, unnecessary data collection, weak security measures, or recruitment methods that could place pressure on participants.

The exact requirements differ across countries, disciplines, institutions, and funders. Researchers should therefore consult the policies of the organization responsible for their work. However, several core principles apply across most research settings.

What Is Research Ethics Approval?

Research ethics approval is a formal decision confirming that a proposed study has been reviewed by an authorized ethics body. Depending on the institution and country, this body may be called a research ethics committee, institutional review board, ethics review board, or human research ethics committee.

The committee does not simply decide whether the topic is interesting. It examines how the research will be conducted. Reviewers consider the study’s objectives, participant population, recruitment process, consent materials, data handling, potential harms, expected benefits, and plans for reporting results.

Approval confirms that the submitted version of the project meets the applicable ethical requirements. It does not provide unlimited permission to conduct any related activity. Researchers must follow the approved protocol and request authorization before making significant changes.

Why Ethics Review Is Necessary

Research can create harm even when the researcher has good intentions. An interview may cause emotional distress. A leaked dataset may reveal a participant’s health, financial, political, or employment information. A poorly designed recruitment process may make people feel that they cannot refuse.

Independent review helps identify these problems before they affect participants. It also challenges researchers to explain why each procedure is necessary and how risks will be reduced.

Ethics approval protects researchers and institutions as well. A documented review process shows that the study was evaluated before it began. It provides a clear framework for dealing with unexpected events, complaints, protocol changes, and data security incidents.

Funders, universities, hospitals, research partners, and academic journals may require evidence of approval. Without it, researchers may be unable to use the collected data, publish the findings, or demonstrate that the study followed accepted standards.

Which Studies May Require Approval?

Research involving human participants commonly requires ethics review. This includes clinical studies, laboratory experiments, interviews, focus groups, observations, questionnaires, usability tests, and behavioral research.

A study may require review even when it appears harmless. Asking participants about work experiences, educational performance, political opinions, personal relationships, or financial conditions can create privacy and social risks.

Research using identifiable records may also fall within the review process. Examples include medical files, employment records, student data, customer information, location histories, photographs, recordings, and online account data.

Studies involving human tissue, genetic material, biological samples, or previously collected specimens usually need additional attention. Research involving animals is generally assessed through a separate animal ethics process.

Secondary data analysis can also require a formal determination. The fact that another researcher collected the data does not automatically make it unrestricted. Consent terms, licensing conditions, identifiability, legal obligations, and the sensitivity of the information still matter.

Research That May Not Require Full Review

Not every academic or professional activity requires a full committee review. Some projects may qualify for a simplified process, an exemption, or a formal determination that they fall outside the institution’s definition of regulated research.

Examples may include analysis of fully public and non-sensitive information, certain quality-improvement activities, anonymous educational evaluations, or research based on data that cannot reasonably be connected to individuals.

These categories are not universal. A project treated as exempt by one institution may require review elsewhere. The intended publication of results, the population involved, and the type of data collected can also change the decision.

Researchers should not declare their own project exempt unless institutional rules clearly allow them to do so. The safest approach is to submit a screening form or ask the responsible ethics office for a written determination.

Why Approval Must Come Before Data Collection

Researchers should obtain the required decision before recruiting participants or collecting data. Beginning early can create problems that cannot be corrected later.

An ethics committee evaluates a proposed procedure. Once the interviews, experiments, or surveys have already occurred, the committee can no longer protect participants from the original risks.

Institutions therefore generally do not treat retrospective review as equivalent to prior approval. Data collected without the required authorization may become unusable for a thesis, report, publication, or funded project.

Recruitment is also part of the research process. Posting an advertisement, contacting potential participants, screening volunteers, or accessing identifiable records may count as beginning the study.

Researchers should wait for the formal written decision. Submitting an application, receiving informal encouragement, or answering the committee’s questions does not mean that approval has been granted.

Preparing the Research Protocol

The protocol is the central document in an ethics application. It describes what the research team plans to do and why each step is necessary.

A strong protocol begins with the study objective and research questions. It should explain the scientific or social value of the project and show that the methods can realistically answer those questions.

The protocol should identify the participant population, inclusion criteria, exclusion criteria, expected sample size, recruitment process, study location, and duration.

Every interaction with participants should be described. This may include screening, consent, surveys, interviews, recordings, tests, follow-up messages, compensation, and debriefing.

The protocol must also explain how data will be collected, analyzed, retained, shared, and destroyed. Vague statements such as “all data will remain confidential” are usually insufficient without practical details.

Assessing Risks and Benefits

Ethics review considers whether the potential benefits of a study justify its risks. The expected benefit does not need to be immediate or personal. A participant may receive no direct advantage while the research contributes to future knowledge or improved services.

Risks can be physical, psychological, social, economic, professional, or legal. A medical procedure may cause physical discomfort. A sensitive interview may create distress. Disclosure of a participant’s identity may affect employment, relationships, or personal safety.

Researchers should not dismiss a risk simply because it seems unlikely. They should assess both the probability of harm and its possible severity.

The application should explain how each risk will be minimized. Possible safeguards include collecting less information, conducting interviews in private, using trained staff, providing support contacts, encrypting files, separating identifiers, or allowing participants to skip questions.

Informed Consent

Informed consent is more than a signature on a form. It is a process through which a person receives understandable information and freely decides whether to participate.

Participants should know the purpose of the research, what they will be asked to do, how long participation will take, and which risks or inconveniences may arise.

They should also understand how their data will be used, who may access it, whether it may be shared, and how long it will be stored.

The consent materials should explain that participation is voluntary. Refusing should not result in an unfair penalty, and participants should normally be able to withdraw according to the terms stated in the protocol.

Technical or legal language can weaken consent when participants do not understand it. Forms should match the language, reading level, cultural context, and communication needs of the intended population.

Consent Waivers and Alternative Procedures

Some studies cannot use a standard signed consent form. Anonymous online surveys may use an information page followed by a voluntary decision to continue. Certain record-based studies may request a waiver of individual consent.

A waiver is not simply a convenient way to avoid contacting participants. The researcher must explain why the study cannot reasonably be conducted using ordinary consent and why the alternative does not create unacceptable risk.

In some situations, a signed form can create more risk than protection. For example, a signature may become the only document linking a participant to sensitive research. An ethics committee may permit verbal or implied consent when this approach is better suited to the study.

The committee, rather than the researcher alone, should approve any departure from the standard consent process.

Research Involving Vulnerable Participants

Some individuals may have a reduced ability to protect their own interests or may face additional pressure to participate. Research involving these groups often requires stronger safeguards.

Children may need age-appropriate information, their own agreement, and permission from a parent or guardian. Adults with impaired decision-making capacity may require a legally authorized representative and an assessment of their ability to understand the study.

Students, employees, patients, prisoners, and military personnel may feel dependent on the person recruiting them. A student might believe that participation affects a grade, while an employee may fear disappointing a supervisor.

The study design should separate authority from recruitment whenever possible. Participation should not influence access to services, employment decisions, academic evaluation, or medical care.

Researchers should also avoid excluding vulnerable populations automatically. Exclusion can prevent them from benefiting from research. The goal is fair participation with appropriate protection.

Recruitment Materials

Ethics committees often review every message used to recruit participants. This can include posters, emails, social media posts, website text, telephone scripts, and direct-message templates.

Recruitment materials should describe the opportunity accurately. They should not exaggerate benefits, hide important requirements, or suggest that participation is an obligation.

Compensation can be mentioned, but it should not dominate the advertisement. A payment that is extremely high relative to the burden or local economic conditions may place undue pressure on potential participants.

The recruitment plan should explain how contact details were obtained. Researchers cannot assume that access to an email list, patient database, classroom roster, or online group automatically permits research recruitment.

Compensation and Incentives

Participants may receive money, vouchers, travel reimbursement, food, or another form of compensation. Payment can recognize time and expenses without purchasing consent.

The amount should be proportionate to the participant’s effort, inconvenience, and local context. It should not be so large that a person ignores risks they would otherwise reject.

The payment schedule should also be fair. Participants who withdraw should normally receive compensation for the part they completed rather than losing everything.

Researchers must distinguish between reimbursement and benefit. Repaying travel costs prevents participation from creating an expense, while an incentive provides an additional reason to join.

Data Protection and Confidentiality

A detailed data management plan is essential when research involves personal or sensitive information. It should identify which data will be collected and why every item is necessary.

Collecting less data is one of the strongest privacy protections. A study that does not need a participant’s full name, home address, or exact birth date should not request it.

Anonymous data cannot reasonably be connected to a person. Pseudonymized data uses a code in place of direct identifiers, but a separate key may still allow re-identification. These terms should not be used interchangeably.

The application should state where files will be stored, which devices or servers will be used, who will have access, and whether data will be transferred across institutions or countries.

Security measures may include encryption, access controls, secure backups, restricted folders, confidentiality agreements, and the separate storage of identifiers.

Audio, Video, and Images

Recordings create additional privacy risks because a voice, face, location, or background detail can reveal identity. Removing a participant’s name does not make a video anonymous.

The consent process should explain whether recordings will be transcribed, shared with other researchers, used in presentations, placed in an archive, or quoted in publications.

Researchers should distinguish between permission to participate and permission to publish identifiable material. A participant may agree to an interview without agreeing to the public use of their photograph or voice.

The protocol should specify when recordings will be deleted and whether automated transcription services or external platforms will process them.

Online and Social Media Research

Online information can appear public while still creating ethical concerns. A person may post in an accessible forum without expecting their words to be copied into an academic publication.

Researchers should consider the platform’s privacy settings, the sensitivity of the topic, the size of the audience, the participant’s expectations, and the risk that a quotation can be found through a search engine.

Using a username instead of a real name may not protect identity when the original post remains searchable. Paraphrasing or obtaining consent may be necessary for sensitive material.

Online surveys also require secure platforms, clear privacy notices, and realistic explanations of data collection. Researchers should know whether the service records IP addresses, device details, location data, or tracking information.

Secondary Data and Existing Records

Using an existing dataset can reduce the burden on participants, but it does not remove all ethical obligations. Researchers must confirm that the proposed use is compatible with the original consent, data agreement, and access conditions.

A dataset described as de-identified may still permit re-identification when it contains rare characteristics or can be combined with other information.

The ethics application should identify the source of the data, the original purpose of collection, the available identifiers, and the security controls.

Public availability does not always mean unrestricted ethical use. Sensitive historical archives, leaked datasets, and online records may create serious harm even when they are technically accessible.

Required Application Documents

An ethics submission usually contains more than a single application form. The committee needs to review the complete participant experience.

Researchers may need to provide the study protocol, consent forms, participant information sheets, recruitment materials, questionnaires, interview guides, debriefing documents, compensation details, and data management plan.

Additional documents may include institutional permissions, cooperation letters, safety procedures, conflict-of-interest statements, insurance information, and proof of researcher training.

Every document should use a version number and date. This helps the committee and research team identify which materials were approved.

Responding to Committee Questions

An ethics committee may approve a study immediately, request changes, ask for clarification, or reject the application. A request for revision does not mean that the project is fundamentally unethical.

Reviewers may ask the researcher to simplify consent language, reduce unnecessary data collection, improve withdrawal procedures, clarify compensation, or provide stronger support for distressed participants.

Responses should address every point directly. Revised documents should clearly show what changed and maintain consistent version numbers.

Researchers should avoid defending a procedure merely because it is common in their field. The application should explain why it is suitable for the specific participants and risks involved.

After Approval

Approval is the beginning of ethical oversight rather than the end. The research team must use the authorized documents and follow the approved procedures.

Staff should receive training before interacting with participants or accessing data. Consent forms, questionnaires, and recruitment messages should match the versions listed in the approval letter.

Researchers should maintain records of consent, recruitment, incidents, withdrawals, and protocol deviations according to institutional requirements.

Some approvals expire after a defined period. Continuing the study may require a progress report, renewal, or confirmation that recruitment has ended.

Changing an Approved Study

Research projects often change. A team may want to recruit more participants, add interview questions, use a new data platform, expand to another site, or extend the storage period.

Significant changes should normally be submitted as an amendment before implementation. The committee needs to assess whether the revised procedure changes the risk, consent process, or data protections.

Researchers should not assume that a small operational change is ethically insignificant. A new recruitment platform, for example, may collect additional personal data or expose participant identities.

Urgent changes may sometimes be necessary to protect participants. These should be documented and reported according to the institution’s procedures.

Reporting Adverse Events and Protocol Deviations

An adverse event is an unexpected problem that may harm a participant or affect the ethical acceptability of the study. Examples can include serious distress, a confidentiality breach, an injury, or the accidental disclosure of sensitive information.

A protocol deviation occurs when the research differs from the approved plan. It may result from error, misunderstanding, technical failure, or an unexpected situation.

Researchers should know which events require immediate reporting and which can be included in a routine progress report.

The purpose of reporting is not only to assign responsibility. It allows the institution to protect participants, correct procedures, and prevent the problem from happening again.

Conflicts of Interest

A conflict of interest can arise when financial, professional, academic, or personal interests could influence the design, conduct, or reporting of research.

A researcher may own shares in the company whose product is being studied. A supervisor may recruit their own employees. A clinician may invite patients who depend on them for treatment.

A conflict does not always require the study to stop. It must be disclosed and managed. Possible measures include independent recruitment, external data analysis, additional oversight, or public disclosure in reports and publications.

Participants should receive relevant information when a conflict could affect their decision to join.

Ethics Approval and Academic Publication

Academic journals often ask authors to state whether the study received ethics approval. The manuscript may need to identify the approving body and provide a reference or protocol number.

The Methods section should also describe how informed consent was obtained. When approval or consent was not required, the authors should provide the formal basis for that determination.

Ethics approval, participant consent, and permission to publish identifiable information are separate matters. A study can have committee approval while still lacking permission to publish a participant’s face, voice, or detailed case history.

Journal editors may request supporting documents when a statement is unclear. They may reject research when data collection began without required review.

Common Mistakes Before Data Collection

One of the most serious mistakes is starting recruitment while the application is still under review. Researchers may believe that advertising the study does not count as research activity, but recruitment materials are often part of the approved protocol.

Another mistake is submitting incomplete materials. A committee cannot evaluate consent when the final questionnaire, interview guide, or participant information sheet is missing.

Researchers may also underestimate privacy risks. Storing names separately does not provide meaningful protection when the remaining dataset contains enough details to identify participants.

Using unapproved software is another problem. A convenient survey, recording, transcription, or cloud-storage platform may process data in ways that conflict with the approved plan.

Finally, researchers sometimes copy language from another application without adapting it to their own procedures. Ethics documentation must accurately describe the actual study.

A Practical Pre-Collection Checklist

Before collecting data, confirm that the responsible ethics body has issued a written decision. Check that the approval covers the correct research sites, participant groups, methods, and members of the research team.

Use only the approved versions of the recruitment materials, consent documents, surveys, interview guides, and data collection tools.

Make sure that every researcher understands the consent process, confidentiality requirements, incident reporting rules, and participant withdrawal procedures.

Test the data security system before recruitment begins. Confirm that access permissions, backups, encryption, file naming, and storage locations work as described.

Finally, verify any additional permissions required by schools, hospitals, workplaces, archives, community organizations, data owners, or research partners.

Conclusion

Research ethics approval protects participants by identifying risks before recruitment and data collection begin. It also helps researchers develop clearer methods, stronger consent procedures, and safer data practices.

The review process may involve a formal committee assessment, a simplified route, or an official determination that full approval is unnecessary. The correct path depends on the study, institution, jurisdiction, data, and participant population.

Researchers should prepare a complete protocol, explain risks honestly, limit data collection, and provide understandable consent materials. They must also wait for the written decision before beginning any activity covered by the review.

Approval does not end ethical responsibility. Researchers must follow the authorized protocol, report problems, request permission for changes, and protect participants throughout the entire life of the project.

When uncertainty remains, the responsible ethics office should make the determination. Asking before data collection is far safer than trying to correct an ethical and procedural problem after the data already exists.