03 · What You Need to Know
An approval letter authorizes a particular study, not research in the abstract
Ethics approval is attached to the research the committee reviewed. That means a particular protocol, participant population, procedures, consent process, data plan, recruitment approach, and set of supporting documents.
OHRP's current guidance for U.S. IRBs recommends procedures for determining and documenting the effective date of initial approval and communicating IRB findings and actions to investigators. For research approved with conditions, OHRP separately recommends documentation of when the conditions are satisfied and when approval becomes effective.
Those are requirements and recommendations within a particular regulatory framework, not a universal template. They illustrate why the details surrounding approval matter.
Check the actual approval status
Start with the decision itself. Does the letter say approved, approved with conditions, conditionally approved, modifications required, deferred, acknowledged, exempt, or something else?
Similar-sounding terms can have different operational meanings. If the decision is conditional rather than final and unconditional, determine what remains outstanding and whether any research activities are actually authorized.
Do not reduce a multi-page decision letter to the single most encouraging word in its first paragraph.
Check the effective date
The date printed at the top of a letter is not necessarily the date on which approval became effective.
This matters particularly when a committee initially approves research with conditions. Under OHRP guidance, the effective date of initial approval in that situation can be the date on which the chairperson or another designated individual determines that all conditions have been satisfied.
Your committee may use a different process. Look for an explicit effective date or ask how it is determined.
Identify exactly which protocol version was approved
Research protocols often accumulate revisions during ethics review. The version originally submitted may no longer be the version authorized for use.
Check the protocol title, version number, date, and any other identifier used by the committee. Compare the approved copy with the document held by the research team.
This sounds administrative until someone conducts the study using "Protocol_Final_v3" while the committee actually approved "Protocol_Final_v3_REVISED2." Version control is not glamorous, but neither is explaining protocol deviation afterward.
Check every participant-facing document
The same principle applies to participant information sheets, consent forms, assent documents, recruitment advertisements, questionnaires, interview guides, social media posts, scripts, and other materials included in the review.
Confirm that the versions distributed to research staff are the versions currently authorized.
OHRP has historically recommended dating approved informed-consent documents as one mechanism for helping investigators use current approved materials. Institutional practices now vary, so follow your committee's document-control system rather than assuming every approved form must carry the same markings.
Check whether approval is limited to particular participant groups
A study may involve several populations, and approval may not necessarily cover all of them at the same time.
OHRP's guidance on approval with conditions gives an example in which certain research activities might be permitted in non-pregnant adults while conditions remain before inclusion of pregnant women or children.
The broader lesson is useful outside that specific framework: read the scope of approval carefully. Do not assume authorization for one population automatically extends to another population that appeared somewhere in the original proposal.
Check which sites are covered
Multi-site research can involve additional complexity. Ethics approval from one committee may not necessarily authorize research at every institution or location involved.
Depending on the governance arrangement, other sites may rely on the same reviewing committee, require local authorization, require their own ethics review, or impose separate institutional conditions.
Confirm that each site where recruitment, consent, intervention, data collection, or access to identifiable information will occur is appropriately covered before beginning activities there.
Ethics approval may not equal site permission
A committee may find the research ethically acceptable while another institutional authority controls access to the site, participants, records, facilities, or data.
Ethics approval
The responsible ethics body has made the ethical determinations required under its framework for the research it reviewed.
Operational or institutional permission
A site, organization, data custodian, regulator, sponsor, or other authority permits the activity within its own jurisdiction or control.
A school principal's permission does not necessarily replace ethics approval. Ethics approval likewise does not automatically compel a school, hospital, company, archive, or database custodian to give you access.
Check whether regulatory authorization is also required
Some research is subject to additional regulation involving investigational drugs, devices, biological materials, radiation, controlled information, or other regulated activities.
An ethics committee may be only one component of the authorization structure. Depending on the study and jurisdiction, separate regulatory approval, notification, licensing, or sponsor authorization may still be required.
Do not infer from ethics approval that another regulator has also approved the study unless the applicable process explicitly establishes that relationship.
Check whether contracts, funding, or institutional clearances remain outstanding
A study may have ethics approval while still awaiting a data-use agreement, clinical-trial agreement, material-transfer agreement, funding release, insurance confirmation, information-security clearance, research-office authorization, or another institutional requirement.
Not every administrative dependency prevents every research activity. The responsible institutional office determines what must be complete before particular activities begin.
Ask the operational question: what authorization is required before this specific activity occurs?
Check the approved recruitment procedure before approaching anyone
Approval of the study does not authorize improvisational recruitment.
If the approved protocol states that an independent coordinator sends invitations, the principal investigator should not simply decide to approach participants directly. If approved recruitment occurs through email, a new social media campaign may require further review.
Use the approved recruitment materials and recruitment process rather than treating approval as permission to find participants by any effective means.
Check whether staff are ready and authorized to perform their roles
Ethics approval does not train the research team automatically.
Before starting, confirm that staff have the qualifications, study training, ethics training, delegation, system access, and procedural instructions required by the institution and protocol.
This is particularly important when procedures involve consent, clinical interventions, sensitive interviewing, safety assessment, identifiable information, or other responsibilities requiring specialized competence.
Check the approval period and continuing obligations
If the committee specifies an approval period or continuing-review date, record it before recruitment begins rather than rediscovering it near expiration.
Approval systems differ substantially here. Under the U.S. 2018 Common Rule, continuing review is no longer routinely required for certain categories of research, including research eligible for expedited review, unless the IRB determines otherwise. Other research, FDA-regulated studies, older regulatory frameworks, or institutional policies may still require periodic continuing review.
WHO regional ethics procedures provide a different example: some approved projects extending beyond one year undergo review after 12 months unless the committee specifies more frequent review.
The date that matters is therefore the date and requirement actually assigned to your study.
Check reporting obligations before something happens
An approval letter or institutional policy may require reporting of protocol modifications, serious or unexpected events, deviations, new risk information, progress reports, study closure, or other developments.
Read those requirements before the first participant is enrolled. A reporting rule discovered only after the event is much harder to follow on time.
Watch Out
Do not treat the approval letter as a ceremonial certificate to file away. It may contain operational conditions governing what can begin, what must be reported, which documents must be used, and how long the authorization remains current.