The type of review that does not require IRB approval but does require a determination by a designated individual is the "not human subjects research" (NHSR) determination — often called a "non-research" or "not-human-subjects" determination. An IRB member or experienced staff person, not the convened board, evaluates whether the activity meets the regulatory definition of research involving human subjects. If it does not, the project proceeds without IRB approval, but the determination itself is documented.
This distinction matters because it sits upstream of the familiar exempt, expedited, and full-board categories. Those three are all IRB review pathways that end in approval or disapproval. The NHSR determination is a threshold screening that decides whether IRB review applies at all. Understanding the mechanism, the regulatory basis, and the operational edge cases prevents both unnecessary approvals and unlawful human-subjects work.
Mechanism: how a determination differs from an approval
The federal regulations define "research" as a systematic investigation designed to develop or contribute to generalizable knowledge. They define a "human subject" as a living individual about whom an investigator obtains data through intervention or interaction, or obtains identifiable private information. Both prongs must be satisfied for the activity to fall under IRB oversight. A designated reviewer applies these definitions to a submitted protocol and issues one of three outcomes: human subjects research requiring review, not human subjects research, or research not involving human subjects.
The critical mechanical point is that the determination is a classification decision, not a regulatory approval. An approval certifies that a study's risks are acceptable and its consent process adequate under a specific review category. A determination certifies only that the activity falls outside the categories the regulations govern. That is why no approval letter or consent requirement attaches to a negative determination, and why the reviewer can be a single qualified person rather than a convened quorum.
Institutional policy operationalizes this. Many research offices route every new project through an intake screening, and staff with delegated authority issue NHSR letters within days. The delegated authority is the hinge: the institution formally designates who may make the call, which is why the question specifies an IRB member or experienced staff person. The 2018 revised Common Rule reframed some of this screening logic but did not convert the NHSR determination into a review category with approval attached.
Plainly: the determination answers "does the IRB have jurisdiction here," while approval answers "is this study acceptable under the rules." Different questions, different paperwork.
Quantified context: volumes, thresholds, and timelines
The scale of this screening is large relative to actual reviews. At research-intensive institutions, intake offices routinely process several hundred to well over a thousand determination requests per year, and a substantial share resolve as NHSR or as not-engaged. A common institutional benchmark treats quality-improvement and program-evaluation projects as presumptively outside human-subjects research unless they are designed to generalize beyond the local setting. That presumption shifts enormous volume away from the convened board.
Decision timing reflects the mechanism. A single-reviewer determination typically resolves in one to ten business days, compared with roughly two to six weeks for expedited review and one to three months for full-board review at many institutions. The reviewer's queue, not a meeting calendar, sets the pace. Documented determinations are usually issued as a short letter or memo citing the regulatory definitions.
The jurisdictional triggers are concrete. Federally funded or FDA-regulated activity brings the regulations into play; purely internal quality work usually does not. Studies collecting identifiable private information about living individuals generally require review unless an exclusion or a determination applies. De-identified data sets and specimens can fall outside the human-subjects definition entirely, while coded data with a key usually remain within it. Those thresholds, not the size of the study, drive the classification.
One useful context number: the regulatory categories for expedited review are enumerated and limited, and full-board review is reserved for greater-than-minimal-risk studies. The NHSR determination is not a shortcut around those thresholds — it is a finding that none of them apply. Mixing the two up is the most common operational error in research offices.
Edge cases: where the determination gets contested
Several scenarios generate genuine disagreement, and the reviewer's reasoning matters more than the label.
Quality improvement versus generalizable research is the classic boundary. A hospital improving its own discharge process may publish the results, and publishing alone does not automatically create generalizable knowledge. Conversely, a project designed from the outset to produce transferable evidence can be research even when conducted internally. Reviewers weigh intent, design, and dissemination plans together.
The engaged-versus-not-engaged question is separate. An institution that receives data or specimens but has no direct interaction with subjects may be "not engaged" in the research, which produces a determination distinct from NHSR. Both outcomes mean no local IRB approval, but the reasoning and documentation differ. Collaborating sites often need this letter to satisfy a primary site's reliance agreement.
Public-health surveillance and program evaluation conducted under statutory authority can fall outside the human-subjects definition, and the CDC has published guidance distinguishing surveillance from research. Emergency-use and expanded-access situations are not NHSR at all; they follow separate pathways that do involve IRB chair or board action. A reviewer who treats an emergency-use request as a determination question has misclassified it.
The counterintuitive detail: a negative determination can create more liability exposure than a routine exemption. If a reviewer wrongly classifies human-subjects research as NHSR, the institution has conducted unapproved research with no consent documentation and no continuing review. That is a compliance finding, not a paperwork gap. Experienced offices therefore require the requester to describe the data, the population, and the dissemination plan in enough detail to justify a negative finding in writing.
Misconceptions: what the determination is not
The most common misconception is that "no IRB approval needed" means "no oversight." The determination is an oversight act. It is documented, attributable to a named designated reviewer, and auditable. Institutions retain these records for the same retention periods as approval files.
A second misconception conflates the determination with exempt review. Exempt review is an IRB review category; the study is examined and found exempt from continuing review and certain requirements, but the IRB has exercised jurisdiction. An NHSR determination finds the IRB never had jurisdiction. The practical difference surfaces in reliance agreements, sponsor paperwork, and journal attestations, which ask different questions depending on the pathway.
A third error treats the determination as permanent and portable. It attaches to a described activity at a specific institution. Change the data sources, add identifiable information, or shift to a generalizable design, and the classification can flip. Many offices require re-determination when protocols materially change.
Red flag: a protocol describes interaction with living individuals but claims NHSR because the data are "anonymous." Red flag: a project is labeled quality improvement but the design, sampling, and dissemination plan target generalizable conclusions. Red flag: a sponsor requires an IRB approval letter and the site offers only an NHSR determination. Red flag: a determination letter is reused for a different project or a later phase of the same project. Red flag: identifiable private information is collected without any documented classification rationale.
Comparison of review pathways
| Pathway | Who decides | Ends in approval | Continuing review | Typical use |
|---|---|---|---|---|
| NHSR determination | Designated IRB member or experienced staff | No | No | Activity outside human-subjects research definition |
| Not-engaged determination | Designated reviewer | No | No | Institution receives data or specimens but does not engage |
| Exempt review | IRB or designated reviewer | Yes, exempt determination | Usually no | Minimal-risk categories enumerated in regulation |
| Expedited review | IRB chair or designated reviewer | Yes | Varies by risk | Minimal-risk studies meeting expedited categories |
| Full-board review | Convened IRB quorum | Yes | Required for greater-than-minimal-risk work | Higher-risk studies |
| Emergency use | IRB chair or board | Yes, separate pathway | Follow-up reporting | Expanded access outside a protocol |
The table clarifies the core distinction: the first two rows produce no approval, while rows three through six are approval pathways with differing review intensity. The reviewer's authority is delegated in every row, but only the determination rows answer a jurisdictional question.
Practical actions: how to request and document a determination
Start by writing a one-page description of the activity covering the population, the data or specimens, the interaction or intervention, the identifiability of information, the funding source, and the dissemination plan. Reviewers cannot justify a negative determination without these facts.
Apply the two-prong test explicitly. State whether the activity is a systematic investigation designed to develop generalizable knowledge, and state whether it involves living individuals through interaction, intervention, or identifiable private information. A conclusion that fails either prong supports NHSR.
Check engagement separately if other institutions are involved. Request a not-engaged determination for sites that only receive data or specimens, and coordinate reliance language with the primary site.
Sequence the request before data collection begins. A determination obtained after identifiable data are collected cannot retroactively authorize that collection, and offices may treat late requests as unapproved research.
Threshold step: if the activity involves identifiable private information about living individuals, expect review unless a documented exclusion applies. Threshold step: if results are intended for publication or external dissemination, scrutinize the generalizable-knowledge prong. Threshold step: if the activity is federally funded or FDA-regulated, confirm the applicable definitions before claiming NHSR. Threshold step: retain the determination letter in the study file for the institution's stated retention period. Threshold step: re-request determination after any material change to data sources, population, or design.
Plainly: ask early, describe the data precisely, and keep the letter.
Limitations and professional caveats
Institutional policy varies more than the federal text suggests. Some offices route all NHSR questions to a single designated reviewer; others use a screening committee. Some require determinations for every new project, while others screen only projects flagged at intake. The federal definitions are stable, but the operational rules that implement them are local, and the designation of who may decide is institutional.
The regulations also evolve. The 2018 revised Common Rule changed several definitions and review requirements, and FDA's human-subjects regulations do not always align with the Common Rule on exclusions for quality improvement or public-health activities. A determination defensible under one framework may not be under the other. Reviewers should cite the specific regulatory provision they applied.
Finally, this article describes the classification logic and typical institutional practice, not the rules of any particular institution. Readers should confirm their own office's authority, forms, and documentation standards before relying on any determination pathway. The mechanisms described here are general; the applicable policy is the one at the institution where the work is conducted.
This article is general educational information about research-review categories, not a legal opinion, regulatory ruling, or institutional policy statement. It does not authorize any specific study or substitute for a determination by your institution's designated reviewer. Consult your IRB office or a qualified research-compliance professional for guidance on a specific project.