This activity requires IRB review to verify that identifiability is not violated, and/or that an adequate data protection plan for confidentiality is in place.
The researcher should inform the research participants of this intention in the process of obtaining consent.
If the level of confidentiality in the new data set created by the linkage is less than that in either of the pre-existing sets, then the change in research design must be examined by the IRB. The IRB, after evaluating the level of risk involved, can recommend waiving informed consent if risk of harm is low, adequate confidentiality procedures are in effect, and it meets all the regulatory criteria for waiver of consent.