What Does IRB Approval Mean?

If you’ve been asked to undergo IRB review—or are trying to figure out whether your project needs it—you’re in the right place. Whether you're a student, researcher, or faculty member, understanding IRB approval is key to conducting ethical human-subjects research. Below is a concise, actionable guide to what IRB approval means, when it’s required, and how to get it done in 2026.

What does IRB approval actually mean?

The Institutional Review Board (IRB) is a federally mandated committee that reviews, approves, or disapproves research involving human participants. According to FDA and HHS regulations as of 2026, any research that involves human subjects and falls under FDA-regulated products (drugs, devices, biologics, or dietary supplements) must receive IRB oversight before any data is collected.^FDA.

An IRB’s job is to ensure that research protects participants’ rights, privacy, and welfare. It has the authority to approve, require modifications to secure approval, or disapprove a study entirely. IRBs operate under 45 CFR 46 and 21 CFR Part 56, federal regulations that define human-subjects research and IRB responsibilities^{HHS OHRP}.

When is IRB approval required?

Think of it this way: if you’re collecting data directly from people—or using identifiable private information about them—you’ll likely need IRB approval. That includes surveys, interviews, medical testing, or even analyzing existing data where individuals could be identified.^{HHS FAQ}

Here’s the exception: studies done purely for internal administrative purposes—like course evaluations or customer feedback—generally don’t need IRB review. Honestly, this makes sense—those aren’t designed to contribute to generalizable knowledge.

Who needs IRB approval?

That covers a lot of ground. If you’re a grad student running a psychology experiment, a professor studying workplace dynamics, or even a clinician testing a new patient-care protocol, you’ll need IRB approval. Even researchers outside traditional academia often need it when their work involves human subjects.

Here’s a quick test: if your institution receives federal funding for research, their IRB will almost certainly require oversight for any human-subjects work. That’s non-negotiable.

Can I start research before getting IRB approval?

This isn’t just bureaucratic red tape. Starting without approval can invalidate your entire study, jeopardize your academic standing, or even put your institution at risk. The IRB exists to protect participants—and that protection can’t be applied after the fact.

Some researchers get tempted to collect preliminary data while waiting for approval. Don’t. Even pilot studies need IRB sign-off if they involve human participants. The consequences aren’t worth it.

What happens if I don’t get IRB approval?

That sounds harsh, but it’s true. Journals won’t publish unapproved research. Universities won’t accept dissertations based on unapproved studies. Grant agencies won’t release funds. In extreme cases, institutions have faced federal audits or lost funding when they failed to enforce IRB requirements properly.^{HHS OHRP Guidance}

I’ve seen students scramble to get approval after collecting data only to find their work can’t be used. Don’t let that be you—plan ahead.

How long does IRB approval last?

After that year ends, you’ll need to submit for continuing review. The IRB will check whether your study is still following its approved protocol, whether any new risks have emerged, and whether your consent process remains appropriate.

Some low-risk studies might qualify for longer approval periods—sometimes up to three years—but that depends entirely on your IRB’s policies and the nature of your research. Always check with your institution.

What are the different types of IRB review?

Here’s how they break down:

Here’s the key point: Exempt status must still be determined by the IRB, not self-declared. Even if your study seems obviously low-risk, submit your application—the IRB makes the final call.

How do I determine which review type applies to my study?

Start with your institution’s IRB portal—most have a decision flowchart or questionnaire that walks you through the process. These tools typically ask about your data collection methods, whether you’re using identifiable information, and the vulnerability of your participant population.

If you’re still uncertain, reach out to your IRB administrator. They deal with these questions daily and can often give you a quick answer. Don’t guess—get clarification before you submit.

Remember: misclassifying your review type can delay your approval or even lead to rejection. Better to ask early than waste weeks waiting for a response.

What documents do I need to submit for IRB approval?

Here’s your complete checklist:

• IRB application form (filled out completely)
• Study protocol (detailed description of your methods)
• Consent forms (informed consent documents for participants)
• Recruitment scripts or advertisements
• Data collection instruments (surveys, interview questions, etc.)
• Data storage and security plan
• Risk mitigation strategies
• CITI Program human-subjects training certificate

Some institutions also require conflict-of-interest disclosures or biosketches for key personnel. Check your IRB’s specific requirements—these can vary widely.

How long does IRB review take?

Timing depends on several factors: your institution’s backlog, the complexity of your study, and whether you’ve submitted a complete application. Some universities process Expedited reviews in as little as a week during slow periods.

Full Board reviews take longer because your application goes before the entire committee. These reviews are scheduled monthly or quarterly, depending on your institution. If you’re in a hurry, plan accordingly.

Pro tip: submit during off-peak times (summer or winter breaks) when IRBs tend to have lighter workloads.

What if my IRB application gets rejected?

Rejections usually fall into a few common categories: incomplete consent forms, unclear risk-benefit analysis, or insufficient data security plans. The IRB will typically provide specific feedback on what needs to change.

Here’s what to do next:

• Carefully review the IRB’s comments (they’re usually detailed)
• Make the requested changes to your application
• Update any affected documents (consent forms, protocols, etc.)
• Resubmit promptly—don’t let the application go stale

Most rejections aren’t personal—they’re just the IRB doing its job to protect participants. Take the feedback seriously, make the changes, and try again.

How do I prepare a strong IRB application?

Start with your institution’s IRB template—it’s designed to include all the required elements. Here’s what makes a strong application:

• Clear study purpose: Explain exactly what you’re investigating and why it matters
• Realistic risk assessment: Don’t downplay risks—be honest about potential harms
• Robust consent process: Your consent forms should be understandable to participants
• Strong data security: Show how you’ll protect identifiable information
• Feasible timeline: Demonstrate you’ve thought through logistics

Honestly, the best applications anticipate questions before the IRB asks them. Put yourself in the reviewer’s shoes—what would make you hesitant about this study?

What’s the most common mistake in IRB applications?

I’ve seen researchers forget to attach their consent forms, leave sections blank on the application, or write protocols that read like rough drafts. These oversights create unnecessary delays.

Another frequent issue: consent forms that are too technical or don’t include all required elements. Participants need to understand what they’re agreeing to—jargon won’t cut it.

Here’s a simple fix: have someone outside your field review your consent forms. If they can’t explain the study back to you in plain language, rewrite it.

Can I make changes to my study after IRB approval?

This includes anything that affects participants’ rights, welfare, or consent process. Common modifications include changing recruitment methods, adjusting study procedures, or extending recruitment timelines.

Here’s the process:

1. Draft a clear description of the proposed changes
2. Explain why the changes are necessary
3. Update any affected documents (consent forms, protocols)
4. Submit the modification request through your IRB portal

Some minor changes might qualify for Expedited review, while major changes will go to Full Board. When in doubt, ask your IRB administrator.

Never implement changes without approval—even if they seem minor. That’s a fast track to violating your IRB approval.

What’s the difference between IRB approval and informed consent?

Think of it this way: the IRB says “This study is ethically sound and can proceed.” Informed consent is when you tell participants exactly what the study involves and get their signature.

Both are essential. You can’t have one without the other. The IRB won’t approve a study with flawed consent procedures, and you can’t enroll participants without their informed consent.

Here’s a practical tip: design your consent process first, then submit it to the IRB for approval. This ensures your consent documents align with the study you’re proposing.

How do I handle vulnerable populations in IRB applications?

Vulnerable populations need special protections because they may have limited ability to refuse participation or understand risks. Here’s what the IRB will look for:

• Additional consent: Parents or guardians must consent for minors; sometimes both parents are required
• Assent processes: Children old enough to understand should agree to participate
• Minimal risk standards: Studies must pose no more than minimal risk unless direct benefit exists
• Confidentiality protections: Extra measures to prevent disclosure of sensitive information

Honestly, this is where many applications stumble. If your study involves vulnerable populations, budget extra time for IRB review—these applications typically require Full Board review.

What happens after IRB approval expires?

This isn’t optional. Once your approval lapses, you can’t enroll new participants or collect new data—even if you’re just wrapping up. The IRB needs to confirm that your study is still following its approved protocol and that no new risks have emerged.

Here’s what to expect:

• You’ll receive a reminder from your IRB 30–60 days before expiration
• Submit a renewal application with updates on enrollment, any adverse events, and protocol changes
• The IRB will review your progress and either approve continuation or request modifications

Some studies qualify for expedited renewal if they’ve had no major changes and minimal risk. Others will need Full Board review. Check with your IRB administrator to understand your institution’s process.

Can I appeal an IRB decision?

Start by requesting a meeting with the IRB Chair to discuss your concerns. Bring data, literature, or expert opinions that support your case. Be prepared to explain why the IRB’s decision doesn’t align with federal regulations or your institution’s policies.

Here’s what makes a successful appeal:

• Clear rationale: Explain specifically why you disagree with the decision
• Supporting evidence: Cite regulations, institutional policies, or published research
• Willingness to modify: Show you’re open to reasonable compromises

Note: Appeals rarely succeed without substantial justification. The IRB’s primary concern is protecting participants—not accommodating researchers. Approach this process thoughtfully.

How do I stay updated on IRB policy changes?

Federal regulations can change, and institutions update their processes accordingly. Here’s how to stay current:

• Subscribe to HHS OHRP updates: They publish guidance documents and policy changes regularly^{HHS OHRP}
• Attend annual IRB workshops: Many universities offer these for free and cover recent changes
• Join professional networks: Groups like PRIM&R provide resources and webinars
• Check your IRB’s website: Institutions often post local policy updates

Honestly, this is one area where researchers often drop the ball. Set a calendar reminder to review IRB policies annually—even if nothing has changed, it’s good practice.

What resources are available for researchers navigating IRB approval?

Start close to home:

• IRB office: They’re there to help—schedule a consultation before submitting
• CITI Program: Their human-subjects training is the gold standard^{CITI Program}
• Federal guidance: HHS OHRP publishes FAQs and decision tools^{HHS OHRP Guidance}
• Peer mentors: Talk to colleagues who’ve recently navigated IRB approval

Some institutions also offer mock IRB panels where you can practice presenting your study. Take advantage of these opportunities—they’re incredibly valuable.

Bottom line: don’t try to figure this out alone. The IRB process is complex, but help is available if you know where to look.