IRB exempt research is human subjects research that qualifies for reduced oversight because it fits one of eight categories defined at 45 CFR 46.104 and poses minimal risk to participants. Exempt does not mean unregulated. Your IRB or a designated institutional official still has to review the protocol and issue a determination before you collect any data. What you gain is real: no full board review, no annual continuing review, and more flexibility in how you obtain consent.
You Cannot Declare Your Own Study Exempt
This is the mistake that costs researchers the most time. The exemption determination has to come from the IRB or an appropriate institutional official, not from the investigator.1Office of Research Integrity. Chapter 3 – The Protection of Human Subjects Definitions You submit the application, a reviewer compares your protocol against the regulatory categories, and you get a letter back. Federally funded research conducted without that step can trigger suspension of the award, and journals routinely refuse manuscripts that lack documentation of an exempt determination.
Submit before you collect a single data point, and keep the determination letter. You will need it for publication, for progress reports, and for any future funding application.
The Eight Exempt Categories
Your study has to fit entirely within one or more of these eight categories. If any component falls outside, the whole project moves up to expedited or full board review.
Category 1: Educational Research
Research in established educational settings involving normal educational practices, such as comparing instructional strategies or evaluating curricula, provided the research does not interfere with students’ ability to learn required content.2eCFR. 45 CFR 46.104 – Exempt Research Testing a new math curriculum where students still cover the required material fits. An experiment that means some students miss key content does not.
Category 2: Surveys, Interviews, Educational Tests, and Public Observation
Studies relying solely on these methods can qualify when at least one of three conditions is met: the data is recorded so participants cannot be identified; disclosure would not put anyone at risk of legal liability or damage to financial standing or reputation; or the IRB conducts a limited review focused on privacy protections.2eCFR. 45 CFR 46.104 – Exempt Research The third option is new under the 2018 revised Common Rule and lets you collect identifiable data under Category 2 as long as the limited review confirms adequate safeguards.
Category 3: Benign Behavioral Interventions
Brief, harmless activities with adults who agree to take part in advance: puzzles, online games, small-stakes economic tasks. The intervention must be painless, not physically invasive, and not something a reasonable person would find offensive or embarrassing.2eCFR. 45 CFR 46.104 – Exempt Research The same three data-protection conditions from Category 2 apply. If your study uses deception, this category only covers it when participants agree in advance that the study may involve deception.
Category 4: Secondary Research With Existing Data or Biospecimens
Using data or biological samples that already exist qualifies if the information is publicly available or if you record it so identification is impossible.2eCFR. 45 CFR 46.104 – Exempt Research This is how researchers work with public health datasets, de-identified medical records, or previously collected surveys. The constraint: no contacting original subjects, no attempts to re-identify.
Category 5: Federal Program Evaluations
Research designed to evaluate or improve public benefit programs, when conducted or approved by a federal department or agency head. The conducting agency must publish the project on a publicly accessible website before research begins.2eCFR. 45 CFR 46.104 – Exempt Research
Category 6: Food Evaluations
Taste tests and food quality studies when participants consume wholesome foods without additives, or when any additives or contaminants fall at or below levels the FDA, EPA, or USDA has determined to be safe.2eCFR. 45 CFR 46.104 – Exempt Research
Categories 7 and 8: Broad Consent for Storage and Secondary Use
Added in the 2018 revision, these cover identifiable data and biospecimens collected under broad consent. Category 7 covers storage for future research; Category 8 covers using the stored materials in a later study. Both require limited IRB review, and secondary use has to stay within the scope of what participants originally agreed to.2eCFR. 45 CFR 46.104 – Exempt Research
When Limited IRB Review Still Applies
Categories 2, 3, 7, and 8 can require a limited IRB review, a lighter form of oversight focused specifically on whether the study has adequate participant privacy and data confidentiality protections. The IRB chair or a designated reviewer evaluates this rather than the full board.3eCFR. 45 CFR 46.111 – Criteria for IRB Approval of Research
For Categories 2 and 3, limited review kicks in when the data is identifiable. Running a survey or behavioral task and recording responses that could be traced back to individuals triggers it. For Categories 7 and 8, limited review is always required because the entire point is storing or reusing identifiable materials.2eCFR. 45 CFR 46.104 – Exempt Research The review is narrower and faster than full board review, but you still need a solid plan for encryption, access controls, and de-identification.
Restrictions for Children and Prisoners
The categories do not apply uniformly to all populations, and the restrictions catch researchers off guard.
For research involving children, only Categories 1, 4, 5, 6, 7, and 8 are available. Category 2 is limited to educational tests and observation of public behavior where the researcher does not participate in the observed activities, and the limited-review pathway under Category 2 cannot be used at all for children.2eCFR. 45 CFR 46.104 – Exempt Research If you planned to survey children and record identifiable responses under the limited-review option, that route is closed.
For prisoners, none of the exempt categories apply to research specifically targeting them. The only exception is research aimed at a broader population that happens to include some prisoners incidentally.2eCFR. 45 CFR 46.104 – Exempt Research A study of a prison education program cannot use the exempt pathway. Research involving pregnant women can use all exemption categories, provided the conditions for each are met.
Exempt Research Is Not the Same as Not Human Subjects Research
These two designations get confused, and the confusion wastes time. Exempt research still involves human subjects under federal definitions. The IRB reviews it, issues a determination, and expects you to follow ground rules. A project classified as “not human subjects research” falls outside the IRB’s authority because it either does not meet the federal definition of research or does not involve human subjects.4Environmental Protection Agency. About Human Subjects Research
Internal program evaluations for organizational improvement, quality assurance work, and case studies with no intent to contribute to generalizable knowledge typically fall in the not-human-subjects bucket. Practically, you get a quick administrative letter confirming the IRB has no jurisdiction rather than going through the exemption process.
What to Submit
Forms vary by institution; the core documents do not. Expect to provide a research protocol describing purpose, methods, recruitment, and what participants will do; recruitment materials such as flyers, email scripts, and social media posts; all data instruments, including full survey questionnaires and interview guides; a data protection plan describing encryption, secure storage, access, and de-identification; consent materials such as your information sheet or verbal script; and details on the participant population, especially whether it includes children, prisoners, or other groups triggering additional protections.5National Institutes of Health. Vulnerable and Other Populations Requiring Additional Protections
Missing documents are the most common cause of delay. Training certification in human subjects protection is typically required before an application is accepted; most institutions accept CITI Program training, and NIH-funded research requires documented human subjects education.6National Institutes of Health. Exempt Human Subjects Research
Consent for Exempt Studies
Exempt research does not require a traditional signed consent form with every federally mandated element. An information sheet explaining the study, what participation involves, and how to opt out is usually appropriate. Many researchers use an online survey cover page stating that proceeding to the questions constitutes consent.
Watch one trap. Asking participants to type their name in an online consent checkbox embeds an identifier in what should be anonymous data. If your exemption depends on de-identified data, a name field on the consent page undermines the whole framework. Use checkbox confirmations or implied consent instead.
Other laws can override this flexibility. Research involving educational records may require signed consent under FERPA, and research accessing medical records may require signed authorization under HIPAA, regardless of the IRB exemption.
Timeline, the Determination Letter, and No Continuing Review
After you submit, a designated reviewer or IRB staff member evaluates whether your study genuinely fits within one of the categories. For studies requiring limited review, the IRB chair or designee handles the privacy assessment. Exempt determinations generally come back faster than expedited or full board reviews because the evaluation is narrower.
If the reviewer agrees, you get a formal determination letter. Keep it. Journals ask for it, and funding agencies expect it in progress reports. If the reviewer disagrees, they will redirect you to expedited or full board review and tell you what else they need. Data collection cannot begin until you have the letter; data collected before the determination may be unusable for publication or grant reporting.7U.S. Department of Health & Human Services. Types of Determinations
One of the biggest practical advantages: an exempt determination does not expire and does not require annual renewal. Research approved through expedited or full board review typically needs continuing review; exempt research is excluded from that requirement under federal regulations.8U.S. Department of Health & Human Services. Continuing Review Guidance (2010)
Modifying an Exempt Study
Freedom from continuing review does not mean freedom to change the study however you like. If a modification pushes the protocol outside the exempt categories, the modified version needs IRB review before you implement it.8U.S. Department of Health & Human Services. Continuing Review Guidance (2010) OHRP recommends consulting institutional officials whenever questions arise about whether planned changes might make an exempt study non-exempt.9U.S. Department of Health & Human Services. Exempt Research Determination FAQs
Changes that typically trigger a new review include adding procedures that increase risk, collecting new types of identifiable information, introducing vulnerable populations that were not in the original protocol, adding sensitive survey questions about illegal activity or traumatic experiences, removing the consent process, and introducing deception. Minor adjustments that keep the study within its original risk profile generally do not require resubmission. When in doubt, email your IRB. A five-minute conversation about a proposed change beats discovering later that your data cannot be used.