Which entity is NOT typically responsible for safeguarding privacy in TCPS 2?

• A. Researchers.
• B. REBs.
• C. Institutions.
• D. Funders.

Answer: (D)

Who is responsible for safeguarding privacy under TCPS 2? The protections are built into the roles of researchers, the Research Ethics Board, and the institution. Researchers must design and conduct the study in a way that protects privacy—obtaining informed consent that explains data use, minimizing the data collected, de-identifying data when possible, and storing information securely with access limited to authorized personnel. The Research Ethics Board reviews the protocol to ensure privacy protections are appropriate and monitors consent processes and data handling throughout the study. The institution provides the framework for privacy protection—policies, training, privacy offices, data governance, and secure IT infrastructure to support researchers and REBs. Funders can require privacy safeguards as a condition of funding, but they do not typically oversee or manage the day-to-day privacy protections in the research itself.