IRB Approval, Decoded: Pick Your Review Tier Before You Submit (Exempt, Expedited, or Full Board)

At a glance

• IRB approval is not one monolithic application. Your review tier (exempt, expedited, or full board) is set by the study’s risk and procedures before you submit, and it dictates your packet, your timeline, and even whether you need a university at all.
• An IRB does not just bless your ethics. It has authority to approve, require modifications to secure approval, or disapprove the research, and “approved” carries an expiration and continuing-review conditions.
• Misclassifying the tier is the most common self-inflicted delay. Submit a minimal-risk study as full-board and you wait for a convened meeting; submit a risky study as expedited and the reviewer kicks it back.
• You do not always need a university. Unaffiliated investigators can use an independent or central IRB, and multi-site drug trials often run under a single IRB (sIRB).
• IRB approval and an FDA IND are two separate gates. Ethics review under Part 56 does not satisfy the IND requirement under Part 312, and an IND in effect does not waive IRB review.
• This is a compliance explainer, not a certification. The regulations set what review requires; the sponsor and investigator stay responsible for meeting them.

What an IRB is, and the three decisions it actually makes

Stop thinking of the IRB as a rubber stamp on your ethics. Under 21 CFR 56.109(a), an IRB shall review and has authority to approve, require modifications in (to secure approval), or disapprove all research activities covered by the regulations. That is three distinct outcomes, and the middle one (“require modifications”) is where most first submissions land. The same approve / require-modifications / disapprove structure appears in the Common Rule at 45 CFR 46.109(a), which extends the board’s authority over all covered research activities, including exempt determinations.

ICH E6(R3) frames the purpose in §1.2.1: the IRB/IEC exists to safeguard the rights, safety, and well-being of all trial participants, with particular attention to vulnerable populations. That purpose, not your timeline, drives every decision the board makes. What the board reviews is enumerated in ICH E6(R3) §1.2.2: the protocol and amendments, the informed consent and assent materials, and related documents. If you understand what the board is obligated to look at, you can build a packet that answers it the first time.

The decision that comes first: exempt vs. expedited vs. full board

Here is the move the top-ranking pages miss. Your tier is decided by the nature of the study, not by you choosing the fastest lane. Get it right before you write a single packet section.

Tier	When it applies	Who reviews	Governing provision
Exempt	Narrow categories of low-risk research (e.g., certain educational tests, surveys, benign behavioral interventions, secondary use of existing data)	An institutional official or IRB makes the determination; the investigator does not self-certify	45 CFR 46.104(d) lists the categories; 21 CFR 56.104 lists FDA’s separate, narrower exemptions
Expedited	Research involving no more than minimal risk that falls on the published list of categories, plus minor changes to already-approved research	The IRB chair or one or more experienced reviewers designated by the chair	21 CFR 56.110(b); 45 CFR 46.110
Full board	Everything else, including any study above minimal risk	A convened meeting with a quorum present, including a nonscientist member	21 CFR 56.108(c); 45 CFR 46.109(b)

Two cautions on this table. First, exempt does not mean unreviewed: 45 CFR 46.104(a) exempts qualifying studies from most of the policy’s requirements but still binds them to the conditions in each category, and several categories require a limited IRB review. The determination is not yours to make alone. Second, the expedited reviewer has a hard limit. Under 21 CFR 56.110(b), reviewers exercising the expedited procedure may exercise all the authorities of the IRB except that they may not disapprove the research; a study can be disapproved only through the convened, nonexpedited procedure. So “expedited” can stall but never formally die in that lane, which matters for how you respond to reviewer questions.

The FDA and Common Rule exemption lists are not identical, and this is a genuine tension worth naming rather than smoothing over. The Common Rule’s exempt categories at 45 CFR 46.104(d) (educational settings, surveys, benign behavioral interventions, secondary research) have no direct counterpart in 21 CFR 56.104, whose exemptions are narrow and product-specific (for example, emergency use reported to the IRB within five working days, and certain pre-1981 investigations). A behavioral study that is squarely exempt under the Common Rule can still require IRB review if it involves an FDA-regulated test article. Check both frameworks when your study touches a drug, device, or biologic; do not assume one exemption travels to the other.

Build the packet your tier requires

Once the tier is settled, the packet follows. The core documents are stable across tiers; the depth and the review path differ. Anchor your checklist to what the board is required to evaluate.

IRB application packet checklist:

• Protocol and any amendments. ICH E6(R3) §1.2.2 makes the protocol the first document the board reviews; it carries your design, risk, and procedures.
• Informed consent materials (and assent, where minors are involved). Required reading for the board under ICH E6(R3) §1.2.2, and the central object of the consent criteria below.
• Recruitment and advertising materials, so the board can judge undue influence.
• Investigator CVs and qualifications. ICH E6(R3) §2.1 ties the investigator’s qualifications to eligibility to conduct the trial.
• The case for your tier: a short rationale mapping your procedures and risk level to exempt, expedited, or full-board, with the category cited.

Annotated protocol-section example. In the protocol’s risk and procedures section, do not just describe what you will do; map it to the board’s approval criteria. The FDA criteria at 21 CFR 56.111(a) require the board to find that risks to subjects are minimized, that risks are reasonable in relation to anticipated benefits, that subject selection is equitable, and that informed consent will be sought and documented as required by Part 50. A protocol risk section that explicitly says “risks are minimized by [procedure]; the risk-benefit balance is [statement]; selection is equitable because [criteria]” gives the board its 56.111 findings on a plate. The Common Rule mirrors these approval criteria at 45 CFR 46.111. Write to the criteria, not around them.

On consent specifically, ICH E6(R3) §2.8.1 requires that the investigator, in obtaining and documenting informed consent, comply with applicable regulatory requirements and adhere to GCP and the ethical principles of the Declaration of Helsinki. Your consent form is reviewed as part of the packet, so build it to that standard before submission rather than after a revision round.

Local academic IRB vs. independent or central IRB, including the no-university path

You do not need a university to get approved. The regulations do not require the IRB to be your employer. An unaffiliated or independent investigator can engage an independent (commercial/central) IRB that meets the same standards. The board you use must satisfy the membership and operating requirements that apply to any IRB: 21 CFR 56.107 requires at least five members of varying backgrounds, at least one scientist and one nonscientist, and at least one member not otherwise affiliated with the institution. ICH E6(R3) §1.3.1 likewise recommends a reasonable number of members, at least five, collectively qualified to review the science, medical aspects, and ethics. An independent IRB that meets these standards reviews your study on the same legal footing as a university board.

For multi-site work, you can avoid duplicative review. 21 CFR 56.114 permits institutions in multi-institutional studies to use joint review, reliance on another qualified IRB, or similar arrangements to avoid duplication of effort. This is the legal basis for the single-IRB (sIRB) model that now governs much multi-site federally funded research. Where teams get this wrong: they assume every site must run the protocol through its own board, then lose weeks reconciling minor wording differences across five sets of minutes. Reliance agreements exist precisely to prevent that.

One registration footnote for independent boards: under 21 CFR 56.106, an IRB reviewing FDA-regulated investigations must register with HHS before it begins that review and renew every three years. That is the IRB’s obligation, not yours, but confirming your chosen board is properly registered is cheap insurance.

Timelines by tier, and the revision round-trip that doubles your clock

The single biggest timeline driver is the review path baked into your tier. Expedited review under 21 CFR 56.110(b) is carried out by the chair or designated reviewers and does not wait for a convened meeting. Full-board review under 21 CFR 56.108(c) must happen at a convened meeting with a majority of members present, which means you are bound to the board’s meeting cadence. If the board meets monthly and you miss the submission cutoff, your clock starts at the next meeting, not the day you submitted.

The quiet doubler is the revision round-trip. Because the most common outcome is “require modifications to secure approval” under 21 CFR 56.109(a), a full-board study that needs changes can ride two convened cycles: one to raise the modifications, one to confirm them. ICH E6(R3) §1.2.3 expects the board to review within a reasonable time and to document its decisions, but reasonable still spans a meeting interval. Plan for the round-trip from the start. A protocol and consent form written tightly to the 56.111 / 46.111 criteria is the most reliable way to land “approved” rather than “modifications required” on the first pass.

Reading the IRB approval letter

“Approved” is a conditional, time-boxed status, not a permanent clearance. The approval letter authorizes the study as reviewed, and it carries an expiration tied to continuing review. ICH E6(R3) §1.2.4 requires the IRB/IEC to conduct continuing review of each ongoing trial at intervals appropriate to the degree of risk to participants. The Common Rule sets a floor for the convened path: 45 CFR 46.109(e) requires continuing review at intervals appropriate to the degree of risk and not less than once per year for research requiring convened review, with specific exceptions.

What the letter does NOT authorize is just as important. You cannot change the approved research on your own. 21 CFR 56.108(a)(4) requires that changes in approved research may not be initiated without IRB review and approval, except where necessary to eliminate apparent immediate hazards to subjects. Read the letter for its approval period, its continuing-review date, and any conditions; treat the expiration as a hard deadline, because lapsed approval stops enrollment and study activity.

Where IRB approval stops and FDA IND begins

This is the conflation that costs regulated trials the most. IRB approval and an FDA IND are two separate gates, and clearing one does not clear the other.

For an investigational drug, an IND must be in effect before the clinical investigation begins. Under 21 CFR 312.40, an investigational new drug may be used in a clinical investigation only if the sponsor has submitted an IND that is in effect, and an IND goes into effect 30 days after FDA receives it unless FDA notifies the sponsor otherwise. That 30-day window, and any clinical hold, is an FDA matter entirely separate from your ethics review.

The two gates are explicitly linked but not interchangeable. 21 CFR 312.66 requires the investigator to assure that an IRB complying with Part 56 will be responsible for the initial and continuing review and approval of the study, and to report changes and unanticipated problems to that IRB. In other words, the IND framework points back to IRB review as a precondition, and IRB review under Part 56 does not address the IND submission at all. You need both: a board that has approved the study and an IND in effect. The investigator’s general responsibilities under 21 CFR 312.60 reinforce this, requiring conduct per the investigational plan and applicable regulations and informed consent under Part 50. Treat IRB approval and the IND as parallel tracks you start early, not a sequence where one waits on the other.

Where teams get it wrong

• Self-classifying as exempt. The exempt determination is an institutional or IRB call, not the investigator’s; FDA exemptions under 21 CFR 56.104 are far narrower than the Common Rule’s, so an FDA-regulated study rarely qualifies.
• Treating expedited as a guarantee of speed. Reviewers can return a minimal-risk study with questions, and under 21 CFR 56.110(b) only a convened board can disapprove, so a contested study migrates to full board anyway.
• Missing the meeting cutoff. Full-board review is bound to convened-meeting cadence under 21 CFR 56.108(c); submit a day late and you lose a cycle.
• Assuming “approved” is permanent. Continuing review is mandatory under ICH E6(R3) §1.2.4 and 45 CFR 46.109(e), and approval expires.
• Conflating ethics review with the IND. Part 56 approval does not put an IND in effect, and 21 CFR 312.40 holds the trial until the IND is in effect.

For the adjacent steps, see our companion pieces on informed consent (the form the board scrutinizes most closely), essential documents and the trial master file (where your approval letter and correspondence live), protocol deviations (what continuing review will ask about), and FDA IND submission (the parallel regulatory gate this article only points to).

Sources

• ICH E6(R3) Good Clinical Practice, version r3, ICH — https://www.ich.org/page/efficacy-guidelines
• 21 CFR Part 56 Institutional Review Boards, version 2024, FDA — https://www.govinfo.gov/content/pkg/CFR-2024-title21-vol1/pdf/CFR-2024-title21-vol1-part56.pdf
• 45 CFR 46 Protection of Human Subjects (Common Rule), version 2018, HHS — https://www.govinfo.gov/content/pkg/CFR-2024-title45-vol1/pdf/CFR-2024-title45-vol1-part46.pdf
• 21 CFR Part 312 Investigational New Drug Application, version 2026-04, FDA