Protocol Closure Guidance
Guidance for investigators regarding closure of IRB protocols
Version Date: October 10, 2005
Federal regulations and University of Wisconsin - Madison policies require initial and continuing review of human subjects research that is not determined to be exempt from Institutional Review Board (IRB) oversight. IRB oversight of a research protocol is required as long as the activities conducted involve human subjects. Even if all study interventions are complete, the following activities are considered research activities involving human subjects and thus require continued IRB oversight and submission of continuing review progress reports:
- Collecting identifiable private information about individuals, including long-term follow-up or observation of subjects;
- Conducting data analysis of private information that is directly or indirectly identifiable.
Please note the University of Wisconsin Faculty Legislation recommends retention of data for 7 years after the completion of data analysis should an issue of scientific misconduct arise.
Protection of Subject Confidentiality
Individually identifiable data from study participants should be de-identified, and coded if necessary, as soon as possible after collection to protect participant confidentiality. Long-term maintenance of individually identifiable data, particularly when the information is sensitive or constitutes protected health information, requires justification and ongoing review.
Transfer of Identifiable Data from Another Institution
If an investigator collects data at another institution and continues to analyze individually identifiable data under a University of Wisconsin-Madison appointment, such activities require review by a University of Wisconsin-Madison IRB.
Uses of Collected Data
Reanalysis of identifiable subject data for a new research question requires review by an IRB. New use of already collected data that are identifiable can be submitted as a change of protocol if the study is still active with the IRB. If the protocol has been closed with the IRB, an Initial Review Application or Application for Exemption would be required. Analysis of data that are no longer identifiable (either directly or indirectly) is exempt from IRB review (a determination of exemption is made by the IRB). Under the HIPAA Privacy Rule, a new use of protected health information (PHI) triggers the need for the investigator to either obtain a new authorization form the subject or submit a new request for a waiver of authorization, even when an authorization or waiver of authorization was obtained for the original use of the data.
For multi-center studies, continuing review of the research by a University of Wisconsin - Madison IRB is no longer required after all human subject research activities have been completed by the UW investigator, even if (i) interactions or interventions with subjects may be occurring at other sites; or (ii) data analysis of identifiable private information is ongoing at another central site that collects and analyzes the data from all study sites.