IRB Frequently Asked Questions

What Activities Need IRB Approval?

We cannot make an official determination of whether a study requires IRB approval via email or over the phone.

Step 1: Use the Non-Human Subject Research Determination form on KRP to determine if IRB review is required. See Definition of Human Subjects Research for more information.

Step 2: Use the Exempt Self-Determination form on KRP to determine if IRB review is required. See Exempt Self-Determination for more information.

Any systematic investigation (including pilot studies, program evaluations, qualitative research), that is designed to develop or contribute to generalizable (scholarly) knowledge, and which uses living humans or identifiable private information about living humans qualifies as human subjects research. See Definition of Human Subjects Research for more information.


Projects that use an existing data set which includes identifiable data gathered in earlier research projects may require a new IRB protocol for review. Secondary analysis of existing data may include the review of medical records, student records, data collected from previous studies, audio/video recordings, etc. that were initially collected for another purpose. In order to be existing, the information must be "on the shelf" (i.e., it has already been collected) at the time that the current research is proposed.

Though such projects do not involve interactions or interventions with humans, they may still require IRB review, since the definition of "human subject" at 45 CFR 46.102(f) includes living individuals about whom an investigator obtains identifiable private information for research purposes.

In addition to being identifiable, the existing data must include "private information" in order to constitute research involving human subjects. Private information is defined as information which has been provided for specific purposes by an individual and which the individual can reasonably expect will not be made public (e.g., a medical or school record). Information that contains identifiers and can be accessed freely by the public (without special permission or application) is not "private" and the research therefore does not therefore involve human subjects. For example, a study involving only analysis of the published salaries and benefits of public university presidents would not need IRB review since this information is not private.

Data analysis activities that meet the definition of research with human subjects may qualify for an exemption or require expedited or even full committee review. Any such project must receive IRB approval or a determination of exemption before the investigator accesses the data.

When does the secondary use of existing data not require review?
In general, the secondary analysis of existing data does not require IRB review when it does not fall within the regulatory definition of research involving human subjects, as referenced above.

Note: Although the definition of a human subject includes only living individuals, thereby excluding decedents, there are cases in which the health information of the deceased and death data files may require IRB review. For additional information and clarification on what constitutes human subject research, refer to Activities that Require IRB Review.

Public data: Public use data sets (such as portions of U.S. Census data, data from the National Center for Educational Statistics, National Center for Health Statistics, etc.) are data sets prepared with the intent of making them available for the public. The data available to the public are not individually identifiable, and therefore their analysis would not involve human subjects.

De-identified data: If the dataset has been stripped of all identifying information and there is no way that it could be linked back to the subjects from whom it was originally collected (through a key to a coding system or by any other means), its subsequent use by the lead researcher or another investigator would not constitute human subjects research, since it is no longer identifiable. Identifiable means the identity of the subject is known or may be readily ascertained by the investigator or associated with the information. In general, information is considered to be identifiable when it can be linked to specific individuals by the investigator(s) either directly or indirectly through coding systems, or when characteristics of the information obtained are such that by their nature a reasonably knowledgeable person could ascertain the identities of individuals. Therefore, even though a dataset may have been stripped of direct identifiers (names, addresses, student ID numbers, etc.), it may still be possible to identify an individual through a combination of other characteristics (e.g., age, gender, ethnicity, and place of employment).

Example: Many student research projects involve secondary analysis of data that belongs to, or was collected by, their faculty advisor or another investigator. If the student is provided with a de-identified, non-coded data set, the use of the data does not constitute research with human subjects because there is no interaction with any individual and no identifiable private information will be used. The project does not therefore require IRB review.

Coded data: Secondary analysis of coded private information is not considered to be research involving human subjects and would not require IRB review if the investigator(s) cannot readily ascertain the identity of the individual(s) to whom the coded private information pertains as a result of one of the following circumstances:

  1. The investigators and the holder of the key have entered into an agreement prohibiting the release of the key to the investigators under any circumstances, until the individuals are deceased (DHHS regulations for humans subjects research do not require the IRB to review and approve this agreement);
  2. There are IRB-approved written policies and operating procedures for a repository or data management center that prohibit the release of the key to the investigator under any circumstances, until the individuals are deceased; or
  3. There are other legal requirements prohibiting the release of the key to the investigators, until the individuals are deceased.

Note: If a student is analyzing coded data from a faculty advisor/sponsor who retains a key, this would be human subjects research, because the faculty sponsor is considered an investigator on the student's protocol, and can readily ascertain the identity of the subjects since he/she holds the key to the coded data. If the student's work fits within the scope of the initial protocol from which the dataset originates, the faculty sponsor (or investigator who holds the dataset) may wish to consider adding the student and his/her work to the original protocol by means of a modification request rather than having the student submit a new application for review.

Example: Researcher A plans to examine the relationships between attention deficit hyperactivity disorder (ADHD), oppositional defiance disorder, and teen drug abuse using data collected by Agencies I, II, and III that work with "at risk" youth. The data will be coded and the agencies have entered into an agreement prohibiting release of the key to the researcher that could connect the data with identifiers. The use of the data would not constitute research with human subjects and does not require IRB review.

When is the secondary use of existing data non-exempt? If secondary analysis of existing data does involve research with human subjects and does not qualify for exempt status, the project must be reviewed either through expedited procedures or by the full committee. Again, an IRB Application must be submitted.

Consent: Researchers using data previously collected under another study should consider whether the currently proposed research is a "compatible use" with what subjects agreed to in the original consent form. For non-exempt projects, a consent process description or justification for a waiver must be included in the research protocol. The UCI IRB may require that informed consent for secondary analysis is obtained from subjects whose data will be accessed.

"Restricted Use Data": Certain agencies and research organizations release files to researchers with specific restrictions regarding their use and storage. The records frequently contain identifiers or extensive variables that combined might enable identification, even though this is not the intent of the researcher. Research using these data sets most often requires expedited or full committee review.

For an explanation of the different categories of human subjects research, see Levels of Review.

As part of the 2018 Common Rule, the Office for Human Research Protections has officially called out oral history projects as not meeting the definition of research.  The revised Common Rule at 45 CFR 46.102 states the following regarding the definition of "research":

(l) Research means a systematic investigation, including research development, testing, and evaluation, designed to develop or contribute to generalizable knowledge. Activities that meet this definition constitute research for purposes of this policy, whether or not they are conducted or supported under a program that is considered research for other purposes. For example, some demonstration and service programs may include research activities. For purposes of this part, the following activities are deemed not to be research:

(1) Scholarly and journalistic activities (e.g., oral history, journalism, biography, literary criticism, legal research, and historical scholarship), including the collection and use of information, that focus directly on the specific individuals about whom the information is collected.

(2) Public health surveillance activities, including the collection and testing of information or biospecimens, conducted, supported, requested, ordered, required, or authorized by a public health authority. Such activities are limited to those necessary to allow a public health authority to identify, monitor, assess, or investigate potential public health signals, onsets of disease outbreaks, or conditions of public health importance (including trends, signals, risk factors, patterns in diseases, or increases in injuries from using consumer products). Such activities include those associated with providing timely situational awareness and priority setting during the course of an event or crisis that threatens public health (including natural or man-made disasters).

(3) Collection and analysis of information, biospecimens, or records by or for a criminal justice agency for activities authorized by law or court order solely for criminal justice or criminal investigative purposes.

(4) Authorized operational activities (as determined by each agency) in support of intelligence, homeland security, defense, or other national security missions.

Requirements for Approval of Offsite Research

All research activities performed by or under the direction of UCI personnel in the course and scope of University duties, or which use University resources, must comply with applicable UCI policies and procedures, regardless of funding and whether performed in UCI facilities or at offsite locations.

Any human subjects research conducted in whole or in part offsite, including research at UCI affiliated institutions, must be reviewed and approved/registered by all applicable UCI entities prior to initiation if it satisfies any of the following criteria.

  1. It is conducted by or under the direction of UCI personnel in connection with his or her UCI responsibilities.
  2. It uses UCI property, facilities, or resources to support or carry out the research.
  3. The name of the University of California, Irvine is used in applying for funds (intra or extramural).
  4. The name of the University of California, Irvine is used in explanations and/or representations to subjects.
  5. The investigator plans to use his/her University of California, Irvine association in any publication or public presentation resulting from the research.
  6. UCI's non-public information will be used to identify or contact human research subjects or prospective subjects.

The UCI IRB may approve/register human subjects research that is proposed to occur at or in collaboration with offsite locations when appropriate documentation demonstrating the support and collaboration of the offsite location(s) and compliance with federal requirements is provided.

The documentation necessary for UCI approval/registration of offsite human subjects research is dependent upon several factors, including but not limited to the degree of risk to subjects, UCI's relationship with the site, the source of funding for the research, and the degree of responsibility UCI personnel will assume. See the campus Offsite Research Activities policy for detailed information.

No, a confirmation email will not be sent and the project status will remain as "submitted" or "resubmitted".

Once completed, the screener tool will confirm (within the form) the Non-Human Subject's Research or for Exempt Self-Determination. When this occurs:

  • UCI IRB review is not required and will not be provided.
  • Research activities may begin as soon as the form is submitted in KRP.
  • To demonstrate evidence of the determination to sponsors or publishers, make a PDF of the submission form.
    • All protocols submitted in KRP can be printed to PDF via the “print” option on the right-hand side of the protocol. 
  • For Exempt Self-Determinations, you may also provide this letter which explains the UCI self determination policy to sponsors and publishers.

IRB Application and Submission


  • UCI IRB Minimal Risk: Exempt and Expedited applications are reviewed by a subcommittee of IRB members. There are no submission deadlines for Exempt and Expedited research. Exempt/Expedited reviews occur on a rolling basis.  IRB review typically occurs within 4-6 weeks of receipt of all required documentation.
  • UCI IRB Full Committee: Applications are reviewed monthly. UCI has two biomedical IRBs and one Social/Behavioral IRB. See the HRP Calendar and Deadlines for full Committee meeting dates and deadlines. Final approval is obtained in about 7 weeks.
  • sIRB/ Reliance: Reliance Applications for a ‘Request to Rely’ on a non-UCI IRB are reviewed by a Subcommittee of the UCI IRB.  There are no submission deadlines, and requests are reviewed on a ‘first-come, first-serve’ basis.  Pre-Review occurs approximately 1-2 weeks from time of submission. Final approval is obtained in about 8 weeks.

IRB Review & Determination:

The results of the IRB review can be found once logged into the protocol in KRP. Refer to either ‘Administrative Details’ or ‘Admin Notes & Files’.

Full Committee meeting results are posted by 3 pm, the afternoon of the meeting.

The IRB reviews the application and make a determination:

  • A - Approval. The approval letter and stamped approved documents are available in KRP within 3-5 working days. Research studies should not begin until stamped approval documents are released.
  • M - Minor changes required. IRB comment are available in KRP within 10 working days.
  • T - Tabled for re-review. The application requires significant clarifications and revisions. IRB comment are available in KRP within 10 working days.

Kuali Research Protocols (KRP) is UCI's IRB, sIRB and hSCRO submission and management system.

All transactions for the IRB must be submitted in KRP. For help navigating KRP, review the KRP User Guide.

Per HRP policy, the IRB relies on the Department Chair (DC) or Organized Lead Unit Director (OLUD) to help assess and provide an assurance to the following points:

  • The Lead Researcher (and Faculty Sponsor) is competent to perform (and supervise) the study.
  • The research is appropriate in design (i.e., the research uses procedures consistent with sound research design, the study design can be reasonably expected to answer the proposed question, and the importance of the knowledge expected to result from the research is known).
  • There are adequate resources and funds available to support the performance of this research.

What is the review process in KRP?

KRP will send an email to the DC or OLUD (or their designee) to alert them about each new protocol under their auspices, with a link to the protocol. DC or OLUD’s will communicate with their colleagues to request changes or ask for clarifications outside of KRP. When ready, the DC or OLUD will sign off on the protocol via the Ancillary Committee tab by marking ‘Approved.’

3d Glasses with solid fill

For a video of this process, step-by-step, click here.

DCs submitting their own IRB protocol will not need approval from School Deans. Similarly, OLUDs submitting their own IRB protocol will not need approval from the Vice Chancellor of Research. The IRB expects that the DC or OLUD will write their protocols at a level that supports the above requirements.

For the purposes of the UCI IRB application, a Master Protocol or Detailed Project Proposal includes ALL of the following information listed below.  

Background & Purpose of the Research

  • Describe the purpose, specific aims or objectives and specify the hypotheses or research questions to be studied:
  • Provide the scientific or scholarly rationale for the research and describe the relevant background information and the specific gaps in current knowledge that this study intends to address:
  • Provide relevant preliminary data (animal and/or human):
  • Describe the primary outcome variable(s), secondary outcome variables, and predictors and/or comparison groups as appropriate for the stated study objectives/specific aims:
  • List up to ten relevant references/articles to support the rationale for the research:

Subject Population(s) (Individuals/Records/Biospecimens)

  • Eligibility Factors (Inclusion/Exclusion Criteria)
  • Identify the factors for limited eligibility and provide a scientific rationale. Include additional rows for factors, as needed.

Study Design

  • Include an explanation of the study design (e.g., randomized placebo-controlled, cross-over, cross-sectional, longitudinal, etc.) and, if appropriate, describe stratification/ randomization/blinding scheme:
  • Provide precise definitions of the study endpoints and criteria for evaluation; if the primary outcomes are derived from several measurements (i.e., composite variables) or if endpoints are based composite variables, then describe precisely how the composite variables are derived:

Statistical Considerations

  • Is a statistical analysis plan appropriate for this qualitative study design? (If Yes)
  • Describe the statistical methods for the stated specific aims and hypotheses. Your analysis plans should match the stated study specific aims and hypotheses:
  • Describe the statistical method(s) that will be used to analyze the primary outcome(s) or endpoints:
  • If appropriate describe secondary or post hoc analyses of primary outcome(s) or other exploratory analysis and if necessary, provide a breakdown of the methods used per outcome or endpoint:
  • Sample Size Determination: Explain how the overall target sample size was determined (e.g., power analysis; precision estimation), providing justification of the effect size for the primary outcome based on preliminary data, current knowledge/literature and/or cost consideration; if appropriate, provide sample size justification for secondary outcomes. Power analysis should (at least) match the primary outcome/endpoint:

Research Procedures

  • Provide a detailed chronological description of the clinical or treatment plan:
  • List all procedures involving the use and/or collection of photographs, or audio/video recording:
  • Specify the total duration of a subject’s participation in the study and clearly outline the duration of participation for each study visit and sub-study, as applicable:
  • List data collection tools (e.g., measures, questionnaires, observational tool) below by clicking the 'Add Line' button. Include additional rows for study instruments, as needed:

Use of Identifiable Private Information as Part of the Main Study

  • Provide a complete list of the data points, variables, and/or information that will be collected (i.e. data abstraction form):
  • Or specify variables or information required here:
  • Specify the time-frame of the data to be accessed (e.g. January 2002 to 2024):

Risk Assessment

  • Discuss what steps have been taken and/or will be taken to prevent and minimize any risks/potential discomforts to subjects:

Research Personnel Heat Map

Use the following heat map to determine when Research Personnel need to be listed as part of the study team in the IRB protocol. 

For a PDF version of the RP Heat Map, please click here.

Role of Research Personnel Minimal Risk Protocol Greater Than Minimal Risk Protocol
Access to subject identifiable data including Protected Health Information (PHI) for screening/ determining eligibility

List only the LR and Co-Researcher(s) in the Study Team section of the IRB Protocol. The LR is required to maintain a Study Team Tracking Log or something similar to track Research Personnel independently.

Recruiting subjects directly via phone, email or in person
Access to subject identifiable data which may include
PHI for data collection purposes
Involvement in the informed consent process
(i.e., explaining the study to prospective subject)
Performing research procedures that involve greater than minimal risk  

List the LR, Co-Researcher(s) and Research Personnel in the Study Team section in of the IRB Protocol.

Involvement in the interpretation of study data
Finalization of the informed consent process
(i.e., able to sign off as the individual obtaining consent)

Has a disclosable financial conflict of interest*


*For more information on IRB COI disclosure requirements, click here

The Recruitment Material Master Template may be used for Exempt & Expedited research not regulated by the FDA. When the template is utilized, researchers provide the IRB with a summary of recruitment methods, key information, scripts, fonts, & media that may be utilized across a range of possible recruitment documents.

If approved by the IRB, researchers may then generate as many variations of recruitment materials as needed without further submission to the IRB as long as they are restricted to the contents outlined within the master template & adhere to the requirements of UCI HRP Policy 22. However, the IRB reserves the right to require the review of a final version of any recruitment material to be developed through the use of a master template.

When approved, the master template will be stamped as approved and dated (in a manner similar to consent forms) and returned to the investigator. The IRB will stamp will not review or stamp any final versions of recruitment materials generated from the approved master template. It is the investigators responsibility to maintain copies of any recruitment material generated from the content of an approved master template.  

It depends.

  • If the changes to the master template do not require changes the approved protocol (i.e., contact information), then IRB approval is not required. 
  • If the changes to the master template also require changes to the approved protocol (i.e., eligibility criteria), then IRB approval is required. 

You can think of the master template like a box of Lego bricks, with each “brick” being an element of the recruitment process such as the methods, key information, scripts, fonts, & media.

  • As long as the IRB has approved these bricks as documented in the master template, researchers can assemble them into any recruitment material without IRB approval.
  • If researchers need new bricks, they need to update the master template and submit an amendment for IRB approval.  

Only Lead Researchers (LRs) receive email notifications from KRP as the default contact.

Faculty Sponsors (FSs), Co-Researchers (CRs) and Admin Contacts (ACs) can also receive email notifications on status changes and approvals by adding themselves to the Permissions Tab w/ "Full Access" in the protocol.

Please refer to our online user guide here for detailed instructions:

  • If you are the LR or personnel on a study with the appropriate permissions and still not receiving emails from KRP, please check your Clutter or Junk folders.
  • If you are a Health Sciences employee, you will still receive KRP email notifications regardless if it's sent to or


CITI Training Questions

Your CITI profile must:

  1. Affiliate with UCI,
  2. Reflect your UCI Email as the primary email, in the following specific format:,
  3. Any other version of your UCI email will NOT be valid for credit:
    • For health science (hs) users, do NOT include the "hs" in your UCI email address.
    • Do NOT use an alias instead of the UCINetID. 

If your CITI profile is accurate, your course completion is sent to UCI via a nightly data transfer. You will need to wait for the next day after course completion to add yourself to a UCI Web-application.

For help related to CITI credit in Kuali Research Protocols (KRP), please contact Electronic Research Administration: 

UCINetID passwords are not known to anyone but you. If you've forgotten your password for your UCInetID, you need to have Office of Information Technology (OIT) reset your password and re-activate your UCInetID. See the OIT website for information and instructions.

If you do not already have an account at Collaborative Institutional Training Initiative (CITI), you would first need to set one up.  UCI students, staff, faculty and research personnel will be able to log in to the Collaborative Institutional Training Initiative (CITI) website using their UCINetID and password. When setting up your account, it is important that you use your UCI email as your primary on this account because that is the only way our database can receive updates regarding your training. For additional information on the registration process, please follow these step-by-step instructions.

If you already have a CITI account from another Institution, your prior courses may be eligible for transfer. Log on to the CITI site and add UCI as an affiliate institution. CITI will review the modules you previously completed and the date(s) on which you took them. CITI will ask you to complete any modules required by UCI that were not required by your previous institution and/or modules that are no longer eligible to be transferred.

If UCI IRB required courses were completed at another institution:

  1. Go to your CITI Profile 
  2. Add your UCI email address as the "primary" email. For Health Science researchers, use the non "hs" version of your UCI email:
  3. Ensure University of California Irvine appears under "Affiliated Institutions"
  4. Once the information is updated, any completed courses that are eligible for transfer will link overnight to the IRB Database.

For information on adding CITI courses to your CITI profile, please follow these step-by-step instructions.

If you are working with a colleague outside of UCI who needs UCInetID access, you may be able to sponsor your colleague for a temporary UCInetID. Only UCI faculty or management-level staff members or their designees may sponsor someone.

If you're new to UCI, to activate your UCInetID, you'll need an ID number first. New employees will get their ID number from their department's payroll coordinator, student applicants will be sent their ID number when they first apply to UCI, and sponsored guests will receive their ID number from their sponsor.

UCI offers two versions of the Basic Human Research Training course: one for Biomedical Investigators (which includes HIPAA) and one for Social & Behavioral Investigators (with an optional HIPAA module).  Individuals choose the course that best matches their research activities / and role.

A CITI Refresher course is required every 5 years to ensure ongoing education about human research protections. There are also two versions of the refresher course.

The Basic and Refresher Courses require approximately two hours to complete. The modules may be completed over multiple sessions. You must complete a module and the related quiz before you log out of a session. If you do not complete the module, you will be required to take it again. 

The minimum "passing" aggregate score is 80%.  A passing score is based on the whole course, and not on the individual modules within a course.  When your Grade Book gives you an option to print a "Completion Report," it means you passed the course. A running tally is compiled in the Grade Book. If you want to improve a score on a quiz, you may repeat the module and the quiz.  You can print or download a Course Completion Report as evidence of completion. You can view or print your completion reports any time by logging into CITI.

For more information on required tutorials, see the Electronic Tutorials webpage. Also, to determine whether your research involves PHI, please see the PHI (HIPAA) webpage.

The Office of Reseach provides  a self-serve Cognos Report for tutorial verification.

Cognos is only available on campus (or Cisco VPN, not Web VPN) and requires UCINetID logon. If you are unable to access the report, please contact Electronic Research Administration (ERA) for assistance.

If you fail to complete the required CITI HRP Refresher course you will receive an expiration notice. Failure to complete the required CITI training course will delay approval of IRB submissions and could jeopardize an individual's ability to engage in human subjects research.

Informed Consent Questions

Prisoners in Research (Guidance from OHRP)

No, Subpart C applies whenever any human subject in a research protocol becomes a prisoner at any time during the study.

The investigator should report this situation to the IRB immediately.

When a previously enrolled research subject becomes a prisoner and the relevant research protocol was NOT reviewed and approved by the institutional review board (IRB) in accordance with the requirements of Subpart C, the principal investigator should promptly notify the IRB of this event.

All research interactions and interventions with, and obtaining identifiable private information about, the now-incarcerated prisoner-subject must cease until the requirements of Subpart C have been satisfied with respect to the relevant protocol.

NOTE: OHRP has allowed one important exception. In special circumstances in which the principal investigator asserts that it is in the best interests of the subject to remain in the research study while incarcerated, the IRB Chairperson may determine that the subject may continue to participate in the research until the requirements of Subpart C are satisfied.

Upon receipt of notification that a previously enrolled research subject has become a prisoner, the IRB should promptly re-review the protocol in accordance with the requirements of Subpart C if the principal investigator wishes to have the prisoner subject continue to participate in the research.

It is important that the IRB remind the principal investigator that, except in the special circumstances noted above, all research interactions and interventions with, and obtaining identifiable private information about, the now-incarcerated prisoner-subject must cease until all of the requirements of Subpart C have been satisfied with respect to the relevant protocol.

Yes. In addition to Subpart C, most likely Subpart D (Protections for Children) would also apply.

Yes. However, OHRP recommends that the convened IRB review research involving prisoners as human subjects.

The exemptions at 45 CFR 46.101(b) do not apply to research involving prisoners. See 45 CFR 46.104(b)(2).

Post IRB Approval Questions

No. The IRB approves protocols with the understanding that the work will be conducted only by the investigators named in the protocol application. If your colleagues would like to work on your research project, you may modify your existing protocol to add them as co-investigators. Otherwise, they must apply for their own IRB protocol approvals. For more information on how to modify an approved protocol, visit Protocol Amendments.

To request approval of a proposed modification, complete and submit an Amendment.

Upload one version of all revised documents (i.e. consent/assent forms, recruitment letters or ads, questionnaires, etc.). In addition include any new documents added as a result of the proposed change (Sponsor Amendment, questionnaires, etc.)

A study may be closed when all of the following apply:

  • All subject recruitment and enrollment is complete (i.e., no new subject recruitment or enrollment are ongoing)
  • All subject specimens, records, data have been obtained (i.e., no further collection of data/information from or about living individuals will be obtained)
  • No further contact with subjects is necessary (i.e., all interactions or interventions are complete and no further contact with enrolled subjects is necessary)
  • Analysis of subject identifiable data, records, specimens are complete (i.e., use or access to subject identifiable data is no longer necessary. Note: this includes review of source documents by study sponsors).