What is required when a study involves the use of identifiable private information or specimens from participants?

What is required when a study involves the use of identifiable private information or specimens from participants?

• A. Justification for access to identifiable information, strict confidentiality protections, limits on data sharing, and plans for handling potential identifiability; consent or waivers may be needed.
• B. Data can be accessed freely if de-identified.
• C. No extra protections beyond standard consent.
• D. Data must be kept in hard copy only.

Answer: (B)

When identifiable private information or biospecimens are involved, extra protections and oversight are required to safeguard participants’ privacy. Researchers must justify why they need access to identifiable data, put strong confidentiality measures in place (such as secure storage, limited access, and coding to prevent direct linking to individuals), and specify how data sharing will be limited and how any risks of re-identification will be addressed. In many cases, obtaining informed consent from participants or securing a waiver/alteration of consent from an ethics review board is needed. This set of requirements is about protecting privacy and showing there’s a legitimate, ethically sound plan for handling identifiable information. De-identified data can often be accessed with fewer restrictions, which is why the option suggesting free access if de-identified does not fit when the data are still identifiable. Likewise, claiming no extra protections beyond standard consent or restricting data to hard copy only does not reflect the heightened safeguards required for identifiable information.

When identifiable private information or biospecimens are involved, extra protections and oversight are required to safeguard participants’ privacy. Researchers must justify why they need access to identifiable data, put strong confidentiality measures in place (such as secure storage, limited access, and coding to prevent direct linking to individuals), and specify how data sharing will be limited and how any risks of re-identification will be addressed. In many cases, obtaining informed consent from participants or securing a waiver/alteration of consent from an ethics review board is needed. This set of requirements is about protecting privacy and showing there’s a legitimate, ethically sound plan for handling identifiable information.

De-identified data can often be accessed with fewer restrictions, which is why the option suggesting free access if de-identified does not fit when the data are still identifiable. Likewise, claiming no extra protections beyond standard consent or restricting data to hard copy only does not reflect the heightened safeguards required for identifiable information.