Privacy and Confidentiality
The Consent Process
Privacy and Confidentiality
Other
Risk
100

Privacy

An individual’s right to be free from intrusion or interference by others

100

Consent

An indication of agreement by an individual, or their authorized third party, to become a participant in a research project (= free informed ongoing consent)

100

Physical safeguards (Examples)

Use of the locked filing cabinets, and the location of computers containing research data away from public areas

100

The size of pool (the number of people in any one 'pool') to promise confidentiality

8

100

Physical Risk (Examples)

Bodily contact or administration of any substance

200

Direct identifiers

The information identifies a specific individual through direct identifiers (e.g., names, voice, social security numbers)

200

Undue influence

The impact of an unequal power relationship on the voluntariness of consent

200

(Data) Security

Physical, administrative, and technical measures used to protect information.

200

What observational studies are exempt from REB review?

Observation of behaviour in public places where there is no expectation of privacy

200

Psychological Risk (Examples)

Feeling demeaned, embarrassed, worried, or upset

300

Indirectly identifiers (Examples)

Date of Birth, Occupation, Ethnicity, Gender, First three digits of the postal code

300

Coercion

An extreme form of undue influence, involving a threat of harm or punishment for failure to participate in research

300

Confidentiality

Ethical/legal responsibility of individuals... to safeguard information entrusted to them from unauthorized access, use, disclosure, modification, loss or theft

300

Alternatives to written consent

oral consent, a consent log, audio or video recordings, oral consent documented in field notes

300

Social Risk (Examples)

Possible loss of status or reputation

400

 Anonymized information

The information is irrevocably stripped of direct identifiers;a code is not kept to allow future re-linkage, and risk of re- identification of individuals from remaining indirect identifiers is low or very low


400

How to manage dual roles

Separate their role as researcher from their other roles; Disclosure in the consent process

400

Administrative safeguards

Making and enforcing rules about who has access to personal information about participants

400

Preliminary Activities Not Subject to REB Review

Note taking, diary writing and observation long before the researcher formalizes a research project

400

Privacy Risk (Examples)

Participants' physical privacy; privacy of the data provided; privacy with respect to research participation

500

Anonymous information

The information never had identifiers associated with it (e.g., anonymous surveys) 

500

Incidental findings

Unanticipated discoveries made in the course of research but that are outside the scope of the research

500

What should researchers do when participants want to be identified

Obtain their consent, and specify how they may be identified for their contribution

500

Difference between confidentiality and anonymity

Confidentiality - Identified data were collected; Anonymity - No identifiers were collected

500

Minimal Risk

Risks experienced in everyday life

M
e
n
u