Research Ethics and Ethics Approval for Students

Ethics is part of research from the first idea, not an administrative step at the end. Whenever your project involves people, or information about people, you take on responsibilities: to treat them with respect, to protect them from harm and to handle their information carefully. Universities formalize these duties through ethics review, and a project that skips it can be stopped, or its data declared unusable.

This guide explains the principles behind research ethics, what reviewers look for, how to prepare an application and how to avoid the delays that catch students out. Procedures vary by institution and country, so follow your own university's process.

Why research ethics exists

Modern research ethics grew from historical cases in which people were harmed, deceived or exploited in the name of science. Codes and reports written in response, including the Nuremberg Code, the Declaration of Helsinki and the Belmont Report, set out principles that still shape review today. Ethics review is meant to protect participants and also researchers and institutions.

Core principles

The Belmont Report in the United States named three principles that are widely used.

Other frameworks add integrity, honesty and transparency, which cover accurate reporting, avoiding fabrication and acknowledging others' work.

Do you need approval?

Most projects that involve human participants need approval before data collection. Typical triggers include:

• Surveys, interviews, focus groups or experiments.
• Observation of people.
• Use of identifiable records, such as medical or student records.
• Work with children or other vulnerable groups.
• Collection of sensitive data, such as health, ethnicity, sexuality or criminal history.
• Research in your own workplace or institution.

Some projects may be exempt or low risk, such as analysis of published literature or fully anonymous public data. Do not decide this yourself. Ask your supervisor or your ethics committee, and get the decision in writing.

Informed consent

Consent must be informed, voluntary and documented. Participants need clear information in plain language about:

• The purpose of the study.
• What they will be asked to do, and for how long.
• Possible risks and benefits.
• That taking part is voluntary and they may withdraw at any time.
• How their data will be used, stored and protected.
• Who is conducting the study, and how to contact them or the ethics committee.

Give them time to decide, and avoid pressure. Be careful about recruiting people over whom you have power, such as your students, employees or patients, since they may feel unable to refuse.

For children and others who cannot consent themselves, you usually need consent from a parent or guardian plus the participant's own assent, where appropriate.

Confidentiality, anonymity and data protection

Participants trust you with information, and you must protect it.

• Anonymity: no one can identify the participant, including you.
• Confidentiality: you know who they are, but you do not reveal it.
• Pseudonyms and codes: replace names with codes, and keep the key separately and securely.
• Storage: use encrypted, access-controlled storage approved by your institution, not personal devices without safeguards.
• Retention: say how long you will keep data and how you will destroy it.
• Legal rules: data protection laws such as the GDPR in Europe and the UK, and sector rules such as those on health or education records in the US, may apply. Your institution's data protection officer can advise.

Do not promise more than you can deliver. If your sample is small, quotations might identify someone even without a name, so remove or alter identifying details.

Vulnerable and special groups

Extra care is needed when participants may be less able to protect their own interests, such as:

• Children and young people.
• People with cognitive or learning difficulties.
• Patients and people in care.
• Prisoners and detained people.
• People in dependent relationships with the researcher.
• Groups facing stigma or legal risk.

Review boards look closely at how you will recruit, obtain consent and protect these participants. Some projects at student level are not allowed to involve certain groups, so check early.

Risk and benefit

Consider the possible harms, which include physical, psychological, social, legal and economic ones, and how you will reduce them. For many student projects, the main risks are distress from sensitive questions and loss of privacy. Plan responses: tell participants they can skip questions, offer breaks, provide contact details for support services and have a protocol if someone discloses serious harm. Explain the benefits honestly, which may be indirect, such as contributing to knowledge, and do not exaggerate them.

Deception and debriefing

Some experiments require limited deception, for instance not telling participants the real purpose until afterward. This needs strong justification and review. If it is approved, debrief participants fully afterward, explain what was hidden and why and give them the chance to withdraw their data.

Secondary data and online research

Using existing data still raises ethical questions. Ask whether the data were collected with consent that covers your use, whether people could be identified and whether terms of use allow your analysis. Online research, such as analyzing social media posts, is a gray area: public posts may still carry expectations of privacy. Check your institution's guidance, and avoid quoting identifiable posts without a plan.

How ethics review works

Institutions run committees, called institutional review boards in the US and research ethics committees in the UK and many other countries. Student projects are often reviewed at department level, with faculty or university committees handling higher-risk work. Reviewers check your application for scientific merit, risk, consent, privacy and compliance. They may approve, ask for changes or reject.

What an application usually contains

Attach all participant-facing documents. Reviewers read them as participants would, so write in plain language.

Timing

Approval takes time, and it is the step students most often underestimate. Low-risk student projects may be reviewed in days or weeks, and complex ones may take months, especially if they need external approval, such as a hospital or school. Build approval time into your proposal timeline, and never start recruitment or data collection before you have written approval. Data collected without approval may not be usable. Our guide to research and dissertation proposals shows how to schedule it.

If your plans change

If you change your methods, participants or data handling after approval, you usually need to submit an amendment before making the change. Small changes may be quick to approve, but you must ask. Keep a record of approvals and amendments, and report the approval number in your methodology chapter.

Common reasons applications are returned

• Unclear or missing consent materials.
• Overpromising confidentiality.
• Weak data protection plans.
• Unaddressed risks, especially for sensitive topics.
• Coercive recruitment, such as recruiting your own students in class.
• Vague methods that reviewers cannot assess.
• Missing permissions from sites or gatekeepers.
• Inconsistent documents that conflict with each other.

Most can be fixed with a revision. Respond to every point the committee raises.

Research integrity

Ethics also covers how you conduct and report the work. Do not fabricate or falsify data, do not cherry-pick results, acknowledge sources, report limitations honestly and give credit where it is due. Keep clear records of your data and analysis. Our guide to academic integrity and misconduct explains the wider rules that apply to students.

Common mistakes

• Starting data collection before approval.
• Assuming a student project does not need review.
• Recruiting people you have power over without safeguards.
• Promising anonymity when you collect identifiable data.
• Storing data on unsecured personal devices.
• Collecting more data than you need.
• Forgetting to plan for distress.
• Not telling the committee about changes.

A quick checklist

• Have I confirmed whether I need approval?
• Do I have clear information sheets and consent forms?
• Have I assessed risks and planned to reduce them?
• Is my data management plan secure and honest?
• Have I considered vulnerable groups and power relationships?
• Have I allowed enough time for approval?
• Do I know how to submit amendments?

Final thoughts

Ethics is about respect: for the people who give you their time and information, and for the trust that makes research possible. Plan for it early, write clearly for reviewers and participants, protect data carefully and wait for approval before you start. A project that is ethical from the beginning is also easier to defend and publish.