Bandingkan kaedah

	Kelulusan Etika Retrospektif	Perlindungan Data dan Privasi dalam Penyelidikan
Bidang	Etika Penyelidikan	Etika Penyelidikan
Keluarga	Process / pipeline	Process / pipeline
Tahun asal	1991	1996
Pengasas	U.S. Department of Health and Human Services; International research ethics community	European Union; U.S. Department of Health and Human Services; International research ethics community
Jenis	Guideline	Regulation
Sumber perintis	U.S. Department of Health and Human Services. (2018). Protection of Human Subjects. Code of Federal Regulations Title 45, Part 46, Section 46.101(b).	European Union. (2018). Regulation (EU) 2016/679 of the European Parliament and of the Council: General Data Protection Regulation (GDPR). Official Journal of the European Union, L 119, 1-88.
Alias	retroactive approval, post-hoc ethics approval, IRB exemption determination, delayed ethics review	research privacy, GDPR research, data security, confidentiality
Berkaitan	5	5
Ringkasan	Retrospective ethics approval is the ethics committee's review and determination regarding research conducted or data collected before ethics approval was obtained. This situation arises when researchers collect data without advance ethics review (intentionally, out of oversight, or due to institutional gaps) and then seek ethics approval before analysis or publication. Retrospective approval is generally disfavored; regulations and guidelines strongly recommend prospective review (approval before data collection). However, retrospective determination of exemption (finding that data already collected meets exempt criteria under 45 CFR 46.104, similar frameworks in other jurisdictions) or retrospective approval with specific justifications may be possible. Understanding when retrospective approval can be obtained—and its limitations—is important for researchers facing this ethical and regulatory challenge.	Research involving human subjects generates sensitive data: medical records, genetic information, behavioral responses, economic or social information. Regulatory frameworks—HIPAA (Health Insurance Portability and Accountability Act) in the U.S., GDPR (General Data Protection Regulation) in the European Union, and parallel regulations in other countries—establish legal obligations for data protection and privacy. Researchers must implement technical and procedural safeguards to prevent unauthorized access, maintain confidentiality, and comply with participant rights (access, rectification, deletion, data portability). Understanding data protection requirements is not optional compliance; it is foundational to ethical research.