Researchers often want to know early whether a study will be considered Not Human Subjects Research (NHSR), exempt, eligible for expedited review, or likely to require full board review. That makes sense: The pathway can affect timing—particularly when a study must be scheduled for a convened institutional review board (IRB) meeting—and different levels of review may also involve different administrative processing.
But one of the most common mistakes is assuming that “minimal risk” automatically means a study is exempt from IRB oversight. Risk is important, but it’s only one part of what the IRB considers. Minimal risk isn’t the same as no risk. Even relatively low-risk research can raise meaningful concerns about participant privacy and data protection.
That’s why the better starting point isn’t “Which review category do I want?” but “What exactly is this study?”
Start with the regulatory definition of research
Before considering NHSR, exempt, expedited, or full board review, researchers first need to establish whether the planned activity meets the applicable regulatory definition of research.
Under U.S. Department of Health and Human Services (HHS) regulations, research is a systematic investigation designed to develop or contribute to generalizable knowledge. An internal program evaluation, for example, may not meet that definition if its findings are intended only for internal planning rather than to be generalized to other settings.
Research regulated by the U.S. Food and Drug Administration (FDA) introduces different considerations. Studies involving FDA-regulated products generally require IRB review when the results are intended to be (1) submitted to the FDA, or (2) held for FDA inspection as part of an application for a research or marketing permit.
Establishing the applicable framework early prevents researchers from jumping prematurely to a review category that may not apply.
When a project isn’t human participants research at all
“NHSR” can describe two different situations. An activity may not meet the regulatory definition of research at all, or it may be research that doesn’t involve human participants as defined by the applicable regulations.
Under the HHS framework, for example, research may fall outside the definition of a human participant if it doesn’t involve living individuals or researchers don’t have access to identifiable information about them. The FDA framework differs: Identifiability isn’t determinative in the same way, including for research involving human biological samples.
Making this distinction early matters. When researchers believe their activity isn’t human participants research, clearly requesting that determination can streamline processing and reduce avoidable questions about what type of review they’re seeking.
How IRBs determine the appropriate study review pathway
Once a project involves human participants research, the appropriate review pathway depends on the study itself, not simply on the review category selected in an application.
IRB administrative staff may be able to immediately see that a study appears eligible for an exemption determination, meets the criteria for expedited review, or requires full board review. But when the answer is less clear, a board member may need to assess the study first.
A study reviewed initially under expedited procedures can still move in another direction. The reviewer may determine that it isn’t human participants research, that it qualifies for an exemption, or that it must instead go to the full board because it is greater than minimal risk or doesn’t satisfy the expedited review criteria.
The pathway is therefore a regulatory determination that follows the facts of the study.
Why exempt status doesn’t simply mean ‘minimal risk’
The word “exempt” creates an especially persistent misconception. Researchers may hear it as shorthand for “low risk” or assume that any minimal-risk study should qualify.
That’s not how exemption works. Regulations identify specific categories of research that may be exempt from IRB oversight. Although most studies receiving an exemption determination are minimal risk, meeting a minimal-risk threshold alone doesn’t make a study exempt.
Consider a benign survey. Its procedures might pose minimal risk, but if the study involves minors, it may not qualify under an exemption category that applies specifically to surveys involving adults.
The practical lesson is simple: Exemption depends on satisfying the criteria of an applicable exemption category, not merely on how risky the research appears. (To learn more, see the specific exemption categories as outlined in HHS regulation 45 Code of Federal Regulations (CFR) 46.104.)
What expedited review means and doesn’t mean
“Expedited” creates a different terminology problem: It sounds as though it promises a fast review.
Regulatorily, expedited review refers to who can conduct the review, not how quickly the decision will arrive. A designated individual board reviewer may act on behalf of the full board. While that review may begin without waiting for a scheduled convened meeting, questions or missing information can still extend the process.
Eligibility also has two important components. The study must be determined to be minimal risk, and all of its procedures must fit within one or more regulatory categories eligible for expedited review.
That procedural detail has important implications. Collecting skin cells with a swab, for example, may qualify under the category covering certain noninvasive specimen collection, while collecting skin through a punch biopsy wouldn’t. (To learn more about the specific items that qualify for IRB review under the expedited procedure, see FDA’s Federal Register notice (63 FR 60353, November 9, 1998) and Office for Human Research Protections (OHRP) regulations on HHS expedited review requirements.)
When full board review becomes the appropriate path
Human participants research that doesn’t qualify for exemption or expedited review must go to the full board.
These studies often involve procedures presenting more than minimal risk, but that’s not an absolute rule. A minimal-risk study may still require full board review when its procedures don’t fit any of the categories eligible for expedited review.
For researchers, preparation becomes especially important at this level. The protocol should thoroughly describe the study procedures, the potential risks to participants, and the protections designed to reduce those risks as much as possible.
A rigorous protocol does more than satisfy documentation expectations. It gives the convened IRB what it needs to evaluate whether the study’s participant protections are appropriate for the risks involved.
Give the IRB the study, not a preferred category
Researchers sometimes spend too much energy trying to classify their own study before submission. A more effective strategy is to make the study itself clear enough for the IRB to make the determination. Determining the appropriate review pathway is the IRB’s responsibility, not the researcher’s.
Regardless of pathway, the IRB generally needs a complete protocol describing the study design, procedures, and participant protections. Even research that ultimately qualifies for exemption may require materials explaining how prospective participants will give permission or consent and the tools used to collect study information.
Incomplete descriptions create predictable friction. If the protocol doesn’t contain enough information to evaluate risk or participant protections, the IRB will have questions, and those questions can delay a determination.
The goal should therefore be accurate disclosure, not successful self-classification.
A better roadmap for a smoother, faster IRB review
The strongest practical roadmap is also the most straightforward: Focus on submitting a complete, comprehensive description of the research rather than trying to engineer a particular review pathway.
At minimum, the protocol should explain:
- The research purpose or objectives.
- Who will participate or what samples will be analyzed.
- The study procedures and data collection methods.
- The potential risks.
- The safeguards for privacy and confidentiality.
Researchers should also submit relevant consent materials, recruitment materials, and tools used to collect study information when applicable.
That completeness has an operational payoff. When reviewers can understand what the study is doing, assess its risks, and see how participants and their information will be protected, they’re less likely to need repeated clarification. Fewer questions can mean fewer avoidable delays.
New technologies will raise new questions about data
The fundamental principles behind these review determinations aren’t changing, but applying them may become more complicated as research methods evolve.
Studies increasingly use technologies such as AI and machine learning and can access and combine larger, richer data sets. That can make it harder to determine whether information is—or could become—identifiable, and whether it can be adequately protected against unintended disclosure.
Those same capabilities can make informed consent more challenging because researchers need to explain clearly how participant data will be used and protected.
The response is not to predict a review category earlier. It’s to describe the research more precisely. As technologies and data practices evolve, comprehensive protocols—especially clear explanations of what data will be accessed, how it will be handled, and how it will be protected—will become even more important to sound IRB decision-making.
