Part 2: Private information and information security
Internet research with human subjects
Data pertaining to human subjects collected through the internet (i.e., listservs, web surveys, electronic bulletin boards, chat rooms, and emails) are subject to review by UW-Stout’s IRB and should follow the same guidelines as other types of research. When using either a listserv or chat room, permission must be granted by the listserv owner or chat room manager (e.g., no pretending to be a chat room member). In addition, be sure that the level of security is compatible with the risk (e.g., encryption and secure socket layer—SSL, or S-HTTP) such as when social security numbers, attitudes toward specific groups, or medical information is collected. Here, technical separation of identifiers (personal information can be stored separately from data in an encrypted format) and data and certified digital signatures may be used. Keep in mind that internet data in transit is vulnerable. It is imperative that the risk be aligned with the security level of the researcher’s system. For on-line surveys, the consent document cover letter should parallel the regular consent form. For example, by clicking the “yes” button, you agree to take part in this research project (University of Georgia). Follow UW-Stout’s IRB guidelines when developing your online research protocol. Please ensure that your project addresses potential risks (e.g., stress, physical harm, financial harm) and protect your subjects as you would for other types of research (e.g., informed consent, confidentiality, right to withdraw).