Although the HHS IRB regulations list eight exemption categories, UMassD has opted to implement six of those categories at this time, see the list below.

Category 1

Research conducted in established or commonly accepted educational settings that specifically involves normal educational practices that are not likely to adversely impact students’ opportunity to learn required educational content or the assessment of educators who provide instruction. This includes most research on regular and special education instructional strategies, and research on the effectiveness of or the comparison among instructional techniques, curricula, or classroom management methods.

Examples:

Evaluating the use of accepted or revised standardized tests.
Testing or comparing a curriculum or lesson.
A program evaluation of pharmacy continuing education.

Category 2

Research that only includes interactions involving educational tests (cognitive, diagnostic, aptitude, achievement), survey procedures, interview procedures or observation of public behavior (including visual or auditory recording) if at least one of the following criteria is met:

The information obtained is recorded by the investigator in such a manner that the identity of the Human Subjects cannot be readily ascertained, directly or indirectly through identifiers linked to the subjects; OR
Any disclosure of Human Subjects’ responses outside the research would not reasonably place the subjects at risk of criminal or civil liability or be damaging to the subjects’ financial standing, employability, educational advancement, or reputation; OR
The information obtained is recorded by the investigator in such a manner that the identity of the Human Subjects can be readily ascertained, directly or indirectly through identifiers linked to the subjects, AND an IRB conducts limited IRB review.

Examples:

Surveying teachers, nurses, or doctors about a technique or an outcome.
Interviewing managers about a management style or best practice.
Conducting a focus group about an experience or an opinion of a community program.

Category 3

Research involving benign behavioral interventions in conjunction with the collection of information from an adult subject through verbal or written responses (including data entry) or audiovisual recording if the subject prospectively agrees to the intervention and information collection and at least one of the following criteria is met:
1. The information obtained is recorded by the investigator in such a manner that the identity of the Human Subjects cannot readily be ascertained, directly or indirectly, through identifiers linked to the subjects; OR
2. Any disclosure of the Human Subjects’ responses outside the research would not reasonably place the subjects at risk of criminal or civil liability or be damaging to the subjects’ financial standing, employability, educational advancement, or reputation; OR
3. The information obtained is recorded by the investigator in such a manner that the identity of the Human Subjects can be readily ascertained, directly or indirectly through identifiers linked to the subjects, AND an IRB conducts limited IRB review.
For the purpose of this provision, benign behavioral interventions are brief in duration, harmless, painless, not physically invasive, not likely to have a significant adverse lasting impact on the subjects, and the investigator has no reason to think the subjects will find the interventions offensive or embarrassing. Provided all such criteria are met, examples of such benign behavioral interventions would include having the subjects play an online game, having them solve puzzles under various noise conditions, or having them decide how to allocate a nominal amount of received cash between themselves and someone else.
If the research involves deceiving the subjects regarding the nature or purposes of the research, this exemption is not applicable unless the subject authorizes the deception through a prospective agreement to participate in research in circumstances in which the subject is informed that he or she will be unaware of or misled regarding the nature or purposes of the research.

Example:

Healthy adult subjects are asked to take part in two two-hour-long assessments of memory, attention, and information processing speed before and after 1 hour of cognitive enhancement exercise using specially designed computer software. The procedures are conducted during a single visit, and subjects are encouraged to take breaks when desired.

Category 4

Secondary research for which consent is not required: Secondary research uses of identifiable private information or identifiable biospecimens, if at least one of the following criteria is met:

The identifiable private information or identifiable biospecimens are publicly available; OR
Information, which may include information about biospecimens, is recorded by the investigator in such a manner that the identity of the human subjects cannot readily be ascertained directly or through identifiers linked to the subjects, the investigator does not contact the subjects, and the investigator will not re-identify subjects; OR
The research involves only information collection and analysis involving the investigator’s use of identifiable health information when that use is regulated under 45 CFR parts 160 and 164 (HIPAA), subparts A and E, for the purposes of “health care operations” or “research” as those terms are defined at 45 CFR 164.501 or for “public health activities and purposes” as described under 45 CFR 164.512(b); OR
The research is conducted by, or on behalf of, a Federal department or agency using government-generated or government-collected information obtained for non-research activities, if the research generates identifiable private information that is or will be maintained on information technology that is subject to and in compliance with section 208(b) of the E-Government Act of 2002, 44 U.S.C. 3501 note, if all of the identifiable private information collected, used, or generated as part of the activity will be maintained in systems of records subject to the Privacy Act of 1974, 5 U.S.C. 552a, and, if applicable, the information used in the research was collected subject to the Paperwork Reduction Act of 1995, 44 U.S.C. 3501 et seq.

Note: Exemption Category 4 only applies to the re-use of data and specimens that were or will be collected for non-research purposes or from research studies other than the proposed research study. The research materials typically will be publicly available materials, medical records, or existing repositories of clinical specimens. No contact between investigator and subject is allowed. If an investigator wants to collect information/specimens directly from research subjects, then another IRB review path will be required. Exemption Category 4(iii) only applies to the use of data (when HIPAA applies) and not to biospecimens.

Example:

A researcher is given two datasets that contain private, identifiable information. The researcher uses the identifiers to merge the two datasets but strips the resulting (merged) data of identifiers immediately after the merge and before conducting data analysis. The resulting data used for the analysis is completely de-identified with no link to identifiers.

Category 5

Research and demonstration projects that are conducted or supported by a Federal department or agency, or otherwise subject to the approval of department or agency heads (or the approval of the heads of bureaus or other subordinate agencies that have been delegated authority to conduct the research and demonstration projects), and that are designed to study, evaluate, improve, or otherwise examine public benefit or service programs, including procedures for obtaining benefits or services under those programs, possible changes in or alternatives to those programs or procedures, or possible changes in methods or levels of payment for benefits or services under those programs. Such projects include, but are not limited to, internal studies by Federal employees, and studies under contracts or consulting arrangements, cooperative agreements, or grants. Exempt projects also include waivers of otherwise mandatory requirements using authorities such as sections 1115 and 1115A of the Social Security Act, as amended. (i) Each Federal department or agency conducting or supporting the research and demonstration projects must establish, on a publicly accessible Federal Web site or in such other manner as the department or agency head may determine, a list of the research and demonstration projects that the Federal department or agency conducts or supports under this provision. The research or demonstration project must be published on this list prior to commencing the research involving human subjects.

Category 6

Taste and food quality evaluation and consumer acceptance studies,

if wholesome foods without additives are consumed OR
if a food is consumed that contains a food ingredient at or below the level and for a use found to be safe, or agricultural chemical or environmental contaminant at or below the level found to be safe, by the Food and Drug Administration or approved by the Environmental Protection Agency or the Food Safety and Inspection Service of the Dept. of Agriculture

OHRP And FDA Expedited Categories

Expedited Review categories are outlined below, including examples. Information is also provided through the OHRP and FDA website, included here: Expedited Review categories. Note: Categories one (1) through seven (7) pertain to both initial and continuing IRB review. Categories eight (8) and nine (9) pertain only to continuing IRB review.

Category 1

Clinical studies of drugs and medical devices only when condition (a) or (b) is met:

Research on drugs for which an investigational new drug application (21 CFR Part 312) is not required. (Note: Research on marketed drugs that significantly increases the risks or decreases the acceptability of the risks associated with the use of the product is not eligible for expedited review.)
Research on medical devices for which (i) an investigational device exemption application (21 CFR Part 812) is not required; or (ii) the medical device is cleared/approved for marketing and the medical device is being used in accordance with its cleared/approved labeling.

Category 2

Collection of blood samples by finger stick, heel stick, ear stick, or venipuncture as follows:

from healthy, nonpregnant adults who weigh at least 110 pounds. For these subjects, the amounts drawn may not exceed 550 ml in an 8 week period and collection may not occur more frequently than 2 times per week; or
from other adults and children, considering the age, weight, and health of the subjects, the collection procedure, the amount of blood to be collected, and the frequency with which it will be collected. For these subjects, the amount drawn may not exceed the lesser of 50 ml or 3 ml per kg in an 8 week period and collection may not occur more frequently than 2 times per week.

Category 3

Prospective collection of biological specimens for research purposes by noninvasive means.

Examples:

hair and nail clippings in a nondisfiguring manner;
deciduous teeth at time of exfoliation or if routine patient care indicates a need for extraction;
permanent teeth if routine patient care indicates a need for extraction;
excreta and external secretions (including sweat);
un-cannulated saliva collected either in an unstimulated fashion or stimulated by chewing gumbase or wax or by applying a dilute citric solution to the tongue;
placenta removed at delivery;
amniotic fluid obtained at the time of rupture of the membrane prior to or during labor;
supra- and subgingival dental plaque and calculus, provided the collection procedure is not more invasive than routine prophylactic scaling of the teeth and the process is accomplished in accordance with accepted prophylactic techniques;
mucosal and skin cells collected by buccal scraping or swab, skin swab, or mouth washings;
sputum collected after saline mist nebulization.

Note: On October 4, 2010, OHRP clarified that it agrees with the FDA’s position that the following procedures are considered noninvasive:

Vaginal swabs that do not go beyond the cervical os;
Rectal swabs that do not go beyond the rectum; and
Nasal swabs that do not go beyond the nares.

Category 4

Collection of data through noninvasive procedures (not involving general anesthesia or sedation) routinely employed in clinical practice, excluding procedures involving x-rays or microwaves. Where medical devices are employed, they must be cleared/approved for marketing. (Studies intended to evaluate the safety and effectiveness of the medical device are not generally eligible for expedited review, including studies of cleared medical devices for new indications.)

Examples:

physical sensors that are applied either to the surface of the body or at a distance and do not involve input of significant amounts of energy into the subject or an invasion of the subjects privacy;
weighing or testing sensory acuity;
magnetic resonance imaging;
electrocardiography, electroencephalography, thermography, detection of naturally occurring radioactivity, electroretinography, ultrasound, diagnostic infrared imaging, doppler blood flow, and echocardiography;
moderate exercise, muscular strength testing, body composition assessment, and flexibility testing where appropriate given the age, weight, and health of the individual.

Category 5

Research involving materials (data, documents, records, or specimens) that have been collected, or will be collected solely for non-research purposes (such as medical treatment or diagnosis).

Some research in this category may be exempt from the HHS regulations for the protection of human subjects. 45 CFR 46.101(b)(4).
This category includes materials that were previously collected for either non-research or research purposes, provided that any materials collected for research were not collected for the currently proposed research.
The phrase “…or will be collected solely for non-research purposes” pertains to the origin of the materials. For example, blood samples that were collected for a clinical test or the results of a course driven exam given in a history class.

Category 6

Collection of data from voice, video, digital, or image recordings made for research purposes. Expedited Review does not apply if identification of the subjects and/or their responses would reasonably place them at risk of criminal or civil liability or be damaging to the subjects’ financial standing, employability, insurability, reputation, or be stigmatizing, unless reasonable and appropriate protections will be implemented so that risks related to invasion of privacy and breach of confidentiality are no greater than minimal.

Category 7

Research on individual or group characteristics or behavior (including, but not limited to, research on perception, cognition, motivation, identity, language, communication, cultural beliefs or practices, and social behavior) or research employing survey, interview, oral history, focus group, program evaluation, human factors evaluation, or quality assurance methodologies.

Note: Some research in this category may be exempt from the HHS regulations for the protection of human subjects. 45 CFR 46.101(b)(2) and (b)(3).

Category 8

Continuing review of research previously approved by the convened IRB as follows:

where (i) the research is permanently closed to the enrollment of new subjects; (ii) all subjects have completed all research-related interventions; and (iii) the research remains active only for long-term follow- up of subjects; or
where no subjects have been enrolled and no additional risks have been identified; or
where the remaining research activities are limited to data analysis.

Clarifiers regarding category (a):

Closure of enrollment only has to apply to the local site, not to all sites,
Long-term follow-up may include research interactions (as opposed to intervention) that involve no more than minimal risk to subjects (e.g., quality of life surveys);
Long-term follow-up may include collection of follow-up data from procedures or interventions that would have been done as part of routine clinical practice to monitor a subject for disease progression or recurrence, regardless of whether the procedures or interventions are described in the research protocol.

Clarifiers regarding category (b):

“no subjects have been enrolled” means no subjects enrolled at the local site
“no additional risks have been identified” means no additional risks identified at the local site or any other institution engaged in the research project or from any other relevant source since the IRB’s most recent prior review.

Clarifiers regarding category (c):

The only remaining human subjects research activity is the analysis of data that includes identifiable private information and the IRB reviewer has determined that this activity involves no more than minimal risk.
Simply maintaining individually identifiable private information without using, studying, or analyzing such information is not human subjects research and thus does not require continuing review.

Category 9

Continuing review of research, not conducted under an investigational new drug application or investigational device exemption where categories two (2) through eight (8) do not apply but the IRB has determined and documented at a convened meeting that the research involves no greater than minimal risk and no additional risks
have been identified.

Federal Agencies that issue Certificates of Confidentiality

National Institutes of Health (NIH): NIH issues Certificates of Confidentiality (CoCs) to protect the privacy of research participants by preventing the disclosure of sensitive information even in response to legal demands. CoCs are automatically issued for applicable NIH awards. Researchers can use the NIH award itself as confirmation of CoC protections. For more information, visit the NIH Certificates of Confidentiality website or contact the NIH CoC Coordinator at coc@nih.gov.
National Institute of Justice (NIJ): NIJ provides CoCs for research related to criminal justice and law enforcement, ensuring that sensitive research data related to these fields is protected from legal disclosure. Request CoCs as part of the grant application process. CoCs are typically issued along with grant awards. For more information, visit the NIJ website or contact the NIJ grants office at nij@ojp.usdoj.gov.
Office for Victims of Crime (OVC): OVC issues CoCs for research involving victims of crime, protecting sensitive victim information from legal disclosure. Apply for CoCs through the grant application process. CoCs are often included with grant awards. For details, visit the OVC website or email the OVC grants office at OVCGrants@ojp.usdoj.gov.
Substance Abuse and Mental Health Services Administration (SAMHSA): SAMHSA provides CoCs for research involving substance abuse and mental health services, ensuring confidentiality of sensitive participant data. Request CoCs through the grant application process. CoCs are typically issued with grant awards. For more information, visit the SAMHSA website or contact SAMHSA at SAMHSA_grants@samhsa.hhs.gov.
Department of Justice (DOJ): The DOJ may provide CoCs for research related to legal, criminal justice, and law enforcement topics, protecting sensitive information from disclosure. Request CoCs as part of the research grant application process. CoCs are generally included with grant awards. For more information, visit the DOJ website or contact the DOJ Office of Justice Programs at ojp@ojp.usdoj.gov.