Protecting Confidentiality & Anonymity
Policy for the Retention, Storage and Transfer of Human Subjects Research Records [view/download Policy]
If it is essential to collect and link identifying information (e.g., subjects' names) to subjects’ responses (e.g., questionnaire answers), researchers must do their best and may need to be creative to provide the utmost confidentiality of subject data. The following are examples of practices that may be implemented to increase the level of confidentiality:
- Use study codes on data documents (e.g., completed questionnaire) instead of recording identifying information and keep a separate document that links the study code to subjects’ identifying information locked in a separate location and restrict access to this document (e.g., only allowing primary investigators access);
- Encrypt identifiable data;
- Remove face sheets containing identifiers (e.g., names and addresses) from survey instruments containing data after receiving from study participants;
- Properly dispose, destroy, or delete study data / documents;
- Limit access to identifiable information;
- Securely store data documents within locked locations; and/or
- Assign security codes to computerized records.
Maintaining confidentiality of information collected from research participants means that only the investigator(s) or individuals of the research team can identify the responses of individual subjects; however, the researchers must make every effort to prevent anyone outside of the project from connecting individual subjects with their responses.
Providing anonymity of information collected from research participants means that either the project does not collect identifying information of individual subjects (e.g., name, address, Email address, etc.), or the project cannot link individual responses with participants’ identities. A study should not collect identifying information of research participants unless it is essential to the study protocol.
Examples of data collection instruments include:
- Interview notes
- Field notes
- Data spreadsheet
Data collection instruments must not contain information that could readily identify participants (i.e., identifying information). Instead use study codes.
In addition, only collect information that is necessary to achieve the study's objective.
- Employer's name or address
- Relatives' names or addresses
- Date (e.g., birthdate, date of death, etc.)
- Phone / fax numbers
- E-mail addresses
- Social security numbers
- Member / account numbers
- Full face photos & comparable images
The use of study codes is an effective method for protecting the confidentiality of research participants. Study codes may be used on data collection instruments in place of identifying information to protect participants' responses / data when data documents are stored or out in the open. Also, in the event that a data document is lost, stolen, etc. having the data protected by a study ID will prevent anyone who may view the data from determining the participant's identity.
How to Use Study Codes
If you need to link individual participants with their responses / data, if feasible, assign each participant a study ID prior to collecting data. On a separate document / file type each participant's name along with their unique study ID (e.g., 001). Store this document separately from data documents.
When you are ready to collect data, insert each participant's unique study ID onto their data document, or provide each participant with his/her unique study ID and ask him/her to insert the ID onto his/her data document.
How to Use Study Codes for Online Surveys
Provide each participant with his/her unique study ID on his/her invitation document (e.g., email requesting participation). Ask the participant to insert that code into a specified field on the online survey.
If you cannot assign each participant his/her own study ID (e.g., large number of participants - mass recruitment), yet need to link individual participants with their responses / data, request that participants generate their own study ID. For example, you could provide participants with instructions such as:
- What are the first two initials of your high school's name? ____
- What day of the month were you born? ____
- What is the last letter of your first name? ____
- Combine your responses from 1-3 in order here (e.g., FA19A) : _____ (this is your study ID)
- Insert your study ID into question #1 of the attached survey.
Participants may then use this study ID for all survey instruments they complete. This will allow researchers to match survey instruments for longitudinal studies.
In accordance with Virginia state law, codes ï¿½2.2-3801 and ï¿½2.2-3803 (listed below), in most cases, subjects' date-of-birth must not be collected for research purposes. However, if the researcher can provide scientific justification as to why that Personally Identifiable Information (PII) is required/necessary to complete the research aims, and the explanation is satisfactory to the IRB, approval may be granted by the IRB to collect that information.
ï¿½2.2-3801, Code of Virginia, states, ï¿½ï¿½Personal informationï¿½ means all information that (i) describes, locates or indexes anything about an individual including, but not limited to, his social security number, driver's license number, agency-issued identification number, student identification number, real or personal property holdings derived from tax returns, and his education, financial transactions, medical history, ancestry, religion, political ideology, criminal or employment record, or (ii) affords a basis for inferring personal characteristics, such as finger and voice prints, photographs, or things done by or to such individual; and the record of his presence, registration, or membership in an organization or activity, or admission to an institution.ï¿½
ï¿½2.2-3803, Code of Virginia, states, ï¿½Collect, maintain, use, and disseminate only that personal information permitted or required by law to be so collected, maintained, used, or disseminated, or necessary to accomplish a proper purpose of the agency.ï¿½