What determines the level of privacy protection required in TCPS 2?

• A. The funding source.
• B. The identifiability of the information.
• C. The data collection method.
• D. The size of the participant group.

Answer: (B)

Identifiability of the information drives the level of privacy protection in TCPS 2. When data can be linked to a specific person, researchers must apply stronger safeguards—secure storage, restricted access, careful handling of identifiers, and thoughtful consent and data-sharing plans that address the risk of re-identification. If the information is de-identified or anonymized to a point where individuals cannot reasonably be identified, the required protections can be lighter, reflecting the lower risk to participants. However, even de-identified data require careful attention to confidentiality and the possibility of re-identification, especially when datasets could be cross-matched with other information. Funding source, data collection method, or group size do not determine the protection level; it’s about how identifiable the information is and the associated risk of identifying participants.