What is the role of the REB regarding privacy and data handling in TCPS 2 research?

• A. The REB only reviews consent forms.
• B. The REB has no role in privacy decisions.
• C. REB oversees data storage and security implementations directly.
• D. REB reviews privacy protections, ensures mitigations, and oversees consent processes.

Answer: (D)

Privacy and data handling are central concerns in TCPS 2, and the REB’s job is to evaluate how a study protects participants’ information throughout the research process. The board reviews the plan for privacy and confidentiality across all stages: what data will be collected, how it will be stored and who will have access, whether and how data may be shared with others, how long it will be kept, and how it will be disposed of. It also checks that the consent process clearly explains these data practices, including any potential future uses or data sharing, and participants’ rights to withdraw or limit certain uses. To make sure risks are mitigated, the REB requires concrete protections such as de-identification or pseudonymization, encryption, secure storage, and appropriate data-sharing agreements with collaborators or third parties. In short, the REB reviews privacy protections, ensures mitigations are in place, and oversees the consent processes.