How to Get IRB Approval for a Student Survey (2026)

If you want to know how to get IRB approval for a student survey, the short version is this: talk to your faculty advisor first, complete your CITI training, draft a protocol and a consent document, then submit everything through your school’s IRB portal and wait for a determination letter. Most student surveys never reach a full board meeting, and many institutions will not charge you for the review.

The part students get wrong is assuming they can decide for themselves whether approval is needed. You cannot. Only your institutional review board can declare a study exempt, and most schools still want you to submit an application so they can issue that determination on paper.

This guide walks through the whole path, from the decision test that tells you whether review applies at all, through the nine steps of the process, to the first day of collecting data. It was last updated in October 2026, and every regulatory reference points to 45 CFR 46, the federal Common Rule.

Table of Contents

1. 1What You Need
2. 2Step-by-Step
3. 3Step 1: Confirm That You Need IRB Review
4. 4Step 2: Check the Requirements With Your Advisor
5. 5Step 3: Decide Whether the Study Is Exempt or Expedited
6. 6Step 4: Write a Clear Research Protocol
7. 7Step 5: Create the Survey and Consent Materials
8. 8Step 6: Submit the Complete Application
9. 9Step 7: Respond to Questions and Revisions
10. 10Step 8: Keep the Approval and Control the Study Version
11. 11Step 9: Begin Data Collection Responsibly
12. 12Common Mistakes
13. 13Starting the project too late
14. 14Submitting mismatched documents
15. 15Choosing the wrong review level
16. 16Collecting more data than the study needs
17. 17Writing vague procedures
18. 18Failing to get the advisor and training in place
19. 19Changing the survey after approval
20. 20Assuming IRB approval lets you survey students
21. 21Frequently Asked Questions
22. 22How long does IRB approval take for a student survey?
23. 23Do anonymous online surveys still need IRB approval?
24. 24Do I need IRB approval to survey my classmates?
25. 25Can my faculty advisor be the principal investigator on my survey study?
26. 26Do interviews or surveys of people under 18 need a different approval?
27. 27What happens if my application comes back with changes requested?

What You Need

An IRB application is a packet of documents, not a single form. Institutions ask for the same core set, so gather these before you log in to the portal.

• A one-page research question. If you cannot write it in a sentence, the protocol will not get off the ground either.
• A draft survey instrument. Every question, including skip logic and any sensitive items, so reviewers can see what you plan to ask.
• A consent document or consent script. For online surveys this is usually a short opening page with a consent checkbox.
• A population and sampling plan. Who you will invite, how many responses you need, and how you will reach them.
• Recruitment materials. The email, flyer, in-class script, or message board post, in the exact wording you intend to use.
• A data-handling plan. Where responses live, who can see them, whether identifiers are separated from answers, when files get deleted.
• Your advisor’s name and contact details. Most institutions require a faculty member attached to the study, and often the faculty member is listed as principal investigator.
• Your CITI training certificate. Human research protections training through the CITI Program, usually required for anyone listed on the study team.
• Institutional forms. Some schools require a faculty sponsorship memo, a fee waiver, a HIPAA authorization, or a research involving minors addendum.

Get the advisor’s name and the CITI certificate first. Those two items gate the submission at most institutions, and CITI training can take two to four hours if you have not done it.

Step-by-Step

This is the process in order. Nine steps covers the full path from first question to first response, and it is the sequence institutions expect.

Step 1: Confirm That You Need IRB Review

Requirements vary by institution, course, study type, participant population, and where participants live, so the answer genuinely depends on where you study. The useful starting point is the federal definition in 45 CFR 46.102, which asks whether you are conducting a systematic investigation designed to develop generalizable knowledge, and whether you involve living individuals through an intervention or through identifiable private information.

Two quick filters help. If you are analysing data that is already public, already de-identified, or already collected for another approved purpose, you are probably outside the definition. If you are going to ask identifiable people questions and record what they say, you are almost certainly inside it.

You will know this step worked when you have found the correct office by name, usually called the Human Research Protection Program, the Office of Research Compliance, or the IRB, and you have its submission portal URL and staff contact.

Step 2: Check the Requirements With Your Advisor

Your faculty supervisor can save you a full review cycle. Ask them what the department expects, whether the faculty member will serve as principal investigator, whether the project is a class assignment with its own lighter form, and whether your target population is reachable through the institution.

Bring a draft, not just a question. Advisors respond much faster to a one-page protocol outline and a sample survey than to an abstract idea. If your advisor will not sponsor the study, ask whether another faculty member in the department will, and if nobody will, ask the department chair or the IRB office directly about their process for unaffiliated or independent student researchers.

This step worked when you have a named faculty sponsor and written agreement about who is principal investigator and who is the student researcher.

Step 3: Decide Whether the Study Is Exempt or Expedited

There are three review levels, plus a fourth outcome that is not review at all. Exempt studies fall under categories in 45 CFR 46.104, and most student surveys rely on category (2), which covers research in established educational settings, or category (7), which covers research with no more than minimal risk and no adverse effect on participants. Expedited studies are reviewed by a single IRB member under 45 CFR 46.110.

Full board review happens when the study does not fit an exempt or expedited category. Not-regulated projects are not human subjects research at all, such as quality improvement work, oral history projects, or research using public datasets.

State your reasoning in the application and let the board decide. Students who label their own study as exempt without submitting it are the single most common source of trouble, because the exemption is only valid once the IRB grants it. You will know this step worked when you have picked a review level, written a two-sentence justification for it, and submitted anyway.

Step 4: Write a Clear Research Protocol

The protocol is the core document. A workable student protocol usually covers the purpose and research questions, the background and rationale explaining why the study matters, the methods including the survey procedure, eligibility criteria and how many responses you need, the recruitment approach, risks and benefits, how confidentiality is protected, compensation if any, how results will be shared, and contact information for questions and for complaints.

Write in plain language. Reviewers are reading dozens of packets a month, and a vague sentence about data security gets a question back while a specific one does not. Say where the data is stored, who has access, whether you collect IP addresses or timestamps, and when you will destroy the raw data.

Reviewers also look at how your questions are written. Leading items, double-barrelled questions, and items that push toward a socially desirable answer all get flagged, and they are the reason a solid study is sent back for revision.

This step worked when a reader outside your department could follow your procedure without asking you a single clarifying question.

Step 5: Create the Survey and Consent Materials

Align every survey question with the protocol. If the protocol says you will measure attitudes toward campus parking and the survey asks about overall campus safety, reviewers will notice, and the mismatch is a common reason for a return.

Write consent in plain, non-technical language and keep it short. State that participation is voluntary, that people may skip questions or stop at any time, how their data will be handled, how long it will be kept, and who to contact with concerns. For an online survey, put this text on the first page with an “I agree” option, and do not start collecting answers until they select it.

Collect only what you need. Skip names, student IDs, and email addresses unless there is a documented need, and if you do need them to prevent duplicate responses, say so in the protocol. If you offer extra credit or a raffle, describe the odds and how winners are selected.

Draft your recruitment materials separately for each channel. A script read aloud in class needs different words from a campus-wide email, and both need to state that the study is approved and how long it takes to complete.

You will know this step worked when every attachment matches every other attachment, with the same study title, dates, and contact person throughout.

Step 6: Submit the Complete Application

This is where most delays happen. Before you hit submit, confirm that you have the online application form completed, the protocol, the survey instrument, the consent document, all recruitment materials, the faculty sponsor’s approval, the data-management plan, and the CITI certificate for every person listed on the study team.

Check whether your board meets on a fixed calendar. Full board review happens at meetings, so a packet submitted two days before a meeting may sit for weeks. Expedited and exempt reviews usually run on a rolling basis instead.

Save the submission confirmation. You will want the protocol number and the version number, because both appear on the approval letter and both show up later when your committee asks for documentation.

Step 7: Respond to Questions and Revisions

Most student applications come back at least once, and that is normal rather than a rejection. Read the reviewer comments in full before touching a document, and sort them into required changes and optional suggestions.

Make the change everywhere it appears. If you edit the consent document, check whether the same wording sits inside the protocol, since inconsistent copies slow things down more than the change itself. Respond point by point, quoting the comment and describing the change in one or two sentences, and state where you made it.

The determinations you will see are approved, approved with contingencies, changes requested, action deferred, tabled, and disapproved. Approved with contingencies means you may start only after meeting the stated conditions. Action deferred means the reviewer could not finish and wants more information from you. Tabled means the board ran out of time. Disapproved closes the file, and if that happens, ask for the reasoning in writing and take it to your advisor before deciding whether to redesign the study or file a new application.

Resubmit well before your planned data-collection date, because one round of revisions is typical and two is not unusual.

Step 8: Keep the Approval and Control the Study Version

Save the approval or determination letter, the approved protocol version, the final survey, the consent materials as approved, and the approval dates in one folder. Journals, dissertation committees, and thesis offices routinely ask for the approval number and the approval letter, sometimes years later.

Note the expiration date, which is commonly approved for one year, and put a reminder in your calendar. If you want to change the questions, the recruitment wording, the population, or the compensation, submit a protocol amendment and wait for approval before making the change. Running a modified survey under an old approval is a protocol deviation, and noncompliance is a serious finding even when the change was harmless.

Step 9: Begin Data Collection Responsibly

Start recruiting and collecting data only after the approval or exempt determination is in hand, and use the materials that were approved. Sending the recruitment email a week early is a common and avoidable violation.

Keep a simple log with the date you sent each recruitment message, the number invited, the number of responses, and the version of the survey that was live. Note anything unexpected, including a platform glitch or a participant complaint, because those get reported to the IRB depending on what happened.

You will know this step worked when your records match your approved documents and you can produce the approval letter on demand.

Common Mistakes

Almost every delay traces back to one of a short list of avoidable errors.

Starting the project too late

Students design the study, then discover they need approval, then find out the full board does not meet again until after their data-collection window closes. Start the IRB clock before you build the schedule, and work backwards from your deadline. Forum discussions on r/AskAcademia and academia.stackexchange describe the same pattern repeatedly, with students reporting waits anywhere from a couple of weeks to several months.

Submitting mismatched documents

The protocol describes one population while the survey welcome screen names another, or the recruitment flyer promises a prize the protocol never mentions. Fix every document together and re-read them as one packet before submitting.

Choosing the wrong review level

Claiming exemption without submitting gets flagged. If you are unsure between exempt and expedited, say so in the application and ask the reviewer to assign the level.

Collecting more data than the study needs

Free-text fields that invite names, IP address collection, and linked email records all attract scrutiny. Every additional identifier is extra risk you have to justify, and you can usually answer the research question without it.

Writing vague procedures

Saying data will be kept secure is not a plan. Say where it is stored, who can access it, whether identifiers are separated, and when it is destroyed. The same applies to recruitment: describe the exact steps, not the intention to recruit broadly.

Failing to get the advisor and training in place

No faculty sponsor, or a CITI certificate nobody has attached, and the packet comes straight back. Researchers posting on r/Professors describe institutions where the whole loop takes a couple of days, and that is only ever true where the prerequisites were finished first.

Changing the survey after approval

Adding a question or changing the incentive after the approval letter arrives requires an amendment. Approval covers the study you submitted, not the study you imagined.

Assuming IRB approval lets you survey students

This is the mistake that costs the most time, because it surfaces at the worst moment. At many institutions a separate office, often Institutional Research, the Provost’s office, or a student survey committee, must approve any survey of the student body, and the survey will not go out without that second approval. Rensselaer Polytechnic Institute states the point plainly on its student survey requests page: IRB approval may be necessary for a survey using human subjects, and such approval does not guarantee that the survey will be administered. Ask your institution about both permissions before you build the recruitment plan, not after.

Frequently Asked Questions

Institutional review at a university is normally free to the researcher, so cost is rarely the obstacle; timing and completeness are.

Start today with the two items that gate everything else. Email your advisor with a one-page outline of your research question and survey, and register for CITI training the same afternoon. Once those are moving, draft the protocol and consent document, find your institution’s IRB portal, and check the board meeting calendar before you commit to a data-collection date. Submitting early and completely is the shortest route to an approval letter in your inbox.