03 · What You Need to Know
There Are Several Different Decisions Hidden Inside “Can I Use the Data?”
First Determine Whether Required Approval Was Actually Missing
Before deciding that a dataset was collected “without ethics approval,” establish whether prospective approval was actually required.
The project may have fallen outside the applicable human-participant research framework. It may have qualified for exemption. It may have involved genuinely nonidentifiable secondary information. Or the institution may have required a formal determination even though full committee approval was unnecessary.
Those distinctions can materially change whether there is an ethics violation at all.
Retention, Analysis, and Publication Are Different Decisions
Researchers often ask whether the “data can be used” as though data use were a single action. It is not.
| Decision |
Question Being Asked |
| Retention |
May the records continue to be held, including for compliance, legal, safety, or research purposes? |
| Analysis |
May researchers process the information to answer the research question? |
| Further research use |
May the information be linked, reused, shared, or incorporated into additional studies? |
| Presentation |
May findings be disseminated at conferences, reports, theses, or other venues? |
| Publication |
Will a particular journal consider and publish a manuscript based on the research? |
Permission for one does not automatically establish permission for all the others.
The Researcher Should Not Make the Data-Disposition Decision Alone
If required approval was missing, the dataset is part of a research-compliance issue. The REC, IRB, research-compliance office, or other authorized institutional authority should determine what rules apply and what may happen to the information.
Researchers have a strong interest in preserving scientifically useful data. That interest is understandable, but it is precisely why an independent institutional determination matters.
If you have just discovered the problem, first follow the appropriate response for research found after data collection to have required ethics approval.
Do Not Assume the Data Must Automatically Be Destroyed
Automatic destruction can be as poorly reasoned as automatic use.
Records may need to be preserved to investigate what occurred, document participant involvement, satisfy legal or sponsor requirements, maintain research-integrity records, or protect participants. The institution may also need to determine whether some form of future use is permissible.
Deleting everything before that assessment can eliminate evidence necessary for responsible oversight.
Retention Does Not Automatically Mean Research Use Is Permitted
An institution may require records to be retained while simultaneously prohibiting their use for the intended research analysis.
Data retention
The information continues to exist under controlled storage for a permitted institutional, compliance, legal, safety, or research purpose.
Research use
The information is analyzed, linked, interpreted, shared, or disseminated to answer a research question.
Researchers should not infer the second merely because they have been instructed not to delete the first.
Participant Consent Helps, but It Does Not Replace Missing Ethics Approval
If participants voluntarily agreed to take part and were appropriately informed, that fact can be relevant to the institution's assessment. But participant consent and independent ethics review serve different functions.
Consent does not determine whether participant selection was equitable, risks were appropriately minimized, confidentiality protections were adequate, or a waiver or other procedure should have been used. Nor can participants authorize an institution to ignore regulatory requirements that applied to the research.
Accordingly, “everyone signed the consent form” is important information, not an automatic license to use the dataset.
No Apparent Harm Does Not Automatically Validate the Data
A study may have produced no known adverse event or confidentiality breach. That can be relevant to the seriousness of the incident, but prospective ethics review is not required only for studies that eventually harm someone.
OHRP's published compliance determinations treat covered nonexempt human-subject research conducted without required prior IRB review or approval as noncompliance. The requirement is prospective rather than conditional on whether harm later materializes.
Later Approval Does Not Automatically Sanitize Earlier Data
If the REC or IRB approves the protocol prospectively after discovering the problem, that approval can govern future research according to its terms. It should not be assumed to reach backward and convert the earlier dataset into approved data.
The institution may need to make a separate determination concerning the previously collected information.
This is why retrospective ethics approval is not a reliable mechanism for repairing missing prospective review.
Could Re-Consent Make the Data Usable?
Potentially relevant, but not automatically.
In some circumstances, an institution may determine that contacting participants for permission concerning future use of previously collected information is ethically and legally appropriate. In others, re-contact may be impractical, itself create risk, or fail to address the underlying problem.
Even successful re-consent does not transform the original research into prospectively approved research. It may affect the permissibility of a future use, depending on the governing framework and institutional decision.
De-Identifying the Dataset Does Not Rewrite How It Was Collected
Removing identifiers can reduce future privacy risks and may affect whether subsequent secondary research falls within a human-participant research framework.
But de-identification after the event does not change whether participants were originally involved in research without required approval. The ethics of original collection and the regulatory status of a later secondary use are related but distinct questions.
A New Secondary Study May Have a Different Ethics Status
Suppose an institution determines that the original research cannot proceed as planned but retains a dataset under appropriate controls. Researchers later propose a separate secondary analysis using information from which they cannot readily identify individuals.
Depending on the governing framework, that new activity may require a fresh determination concerning whether it constitutes human-participant research or qualifies for exemption.
That possibility should be assessed prospectively. It should not be used as a clever relabeling exercise to avoid addressing the original unapproved research.
Publication Is a Separate Editorial Decision
Even if an institution permits some use of the information, a journal is not required to publish the resulting research.
Editors have responsibilities to participants, readers, the research record, and their own journal policies. They may ask for ethics approval numbers, exemption documentation, consent information, correspondence with an ethics body, or an explanation of why approval was not required.
The current ICMJE Recommendations state that authors reporting human research should seek approval from an independent local, regional, or national review body. They also make clear that approval by a review body does not prevent editors from making their own judgment about whether the research conduct was appropriate.
COPE Has Historically Treated Missing Prospective Approval Seriously
COPE case discussions illustrate why researchers should not assume that a later committee letter will satisfy a journal.
In a published COPE case involving a questionnaire study conducted without prior ethical approval, retrospective approval was considered inadequate because the ethics committee no longer had the opportunity to modify the study before it occurred. The editorial recommendation was not to accept retrospective approval as a cure, and the paper was rejected.
That historical case should not be interpreted as a universal rule binding every journal or every type of study. It does demonstrate that editors may regard missing prospective approval as a substantive research-integrity problem rather than a missing administrative attachment.
Journal Policies Vary
There is no single global editorial rule specifying the fate of every manuscript based on data collected without required approval. Disciplines, publishers, and journals differ, and the facts of individual cases can differ substantially.
A journal may reject the manuscript, request an institutional investigation or ethics determination, seek further explanation, consult publication-ethics guidance, or take another action under its policy.
Researchers should read the current instructions and ethics policy of the actual journal rather than assuming that a decision made by another journal will predict the outcome.
Do Not Shop for a Journal That Asks Fewer Ethics Questions
If one journal rejects a manuscript because required prospective approval was missing, submitting the paper elsewhere without disclosing the ethics history does not resolve the underlying issue.
Ethics statements should accurately reflect what happened. Do not invent an approval number, describe a later determination as prospective approval, or omit a material ethics issue merely because the submission system does not ask the question elegantly.
Watch Out
Changing journals does not change the history of the research. Resolve the institutional ethics issue first and disclose the resulting determination accurately wherever publication policies require it.
A Journal May Ask Whether Approval Was Required, Not Merely Whether You Have a Letter
This distinction is especially important for exempt research and activities outside formal human-participant review.
Researchers should not seek an unnecessary approval merely to obtain a document for publication. Instead, obtain the appropriate institutional determination when required and report it accurately.
A legitimate statement that an authorized body determined the study did not require ethics review is different from conducting research that required approval and later saying no approval was obtained.
Publication Cannot Be the Primary Reason for Resolving the Problem
The first obligation is to address the participants, data, institutional requirements, and research record. Whether the paper survives is secondary.
This ordering matters because an ethics problem should not be managed differently merely because the results are exciting. Participant protections do not become negotiable when the p-value becomes attractive.
If Publication Is Allowed, Transparency Matters
If the institution permits research use and a journal agrees to consider the manuscript, describe the ethics history truthfully according to the journal's requirements.
Do not state that the study “received ethics approval” if the only approval occurred after data collection and applied prospectively to future activities. If an institutional body issued another type of determination, use its actual terminology and dates.
Editors can then evaluate the work with an accurate record rather than a carefully polished fiction.
What if the Work Has Already Been Published?
Discovery after publication creates another layer of responsibility. Notify the relevant institutional authority and follow the journal's procedures for correcting the research record.
Depending on the facts and journal policy, editorial responses can range from requesting clarification to issuing a correction, expression of concern, retraction, or another notice. The appropriate response should follow investigation rather than be assumed by the authors.
The Scientific Value of the Dataset Does Not Decide the Ethics Question
A unique dataset can be scientifically valuable. Destroying or prohibiting use of it may itself carry scientific costs. Those considerations can be relevant to institutional deliberation.
But scientific value does not independently authorize use. The decision must also consider how the data were obtained, participant rights and expectations, consent, risks, applicable regulations, institutional policy, and research integrity.
The Best Outcome Is Prevention
These dilemmas are difficult precisely because no later solution can perfectly reproduce prospective review.
The more reliable approach is to establish whether ethics approval is needed before recruitment or data collection begins and obtain any required exemption or review determination at that stage.