How to Run an Ethics and Access Review for Thesis Research Involving Young Children (2026)

An education faculty overseeing a thesis that studies young children — classroom observation, an intervention in a primary or early-years setting, interviews with children themselves — is not looking at a routine ethics-review case. Children are a recognised vulnerable-population category in most research-ethics frameworks, and a thesis committee that runs a child-participant study through the same generic ethics checklist used for adult-participant research misses protections the framework specifically requires. Seven steps below build a workable ethics-and-access pathway, each with the office that owns it and the artefact it produces.

Step 1 — Confirm which risk tier the study falls into before drafting the protocol

In the United States, 45 CFR 46 Subpart D — the federal regulation on research involving children as subjects, which applies to research conducted or supported by the Department of Health and Human Services (HHS) and which institutions often mirror in their own IRB policy — sorts child research into four risk categories, each with a different approval pathway: minimal-risk research (§46.404); research with greater than minimal risk but a prospect of direct benefit to the individual child (§46.405); research with no prospect of direct benefit where the risk represents no more than a minor increase over minimal risk and the study is likely to yield generalisable knowledge about the children’s disorder or condition (§46.406); and research not otherwise approvable, which can proceed only after the HHS Secretary consults a panel of experts and allows public review and comment (§46.407). In every category the IRB must make adequate provision for the permission of parents or guardians and for the child’s assent where the child is capable of assenting, although §46.408 allows the IRB to waive assent, and in some circumstances parental permission, under defined conditions. Artefact: a risk-tier determination made at proposal stage, before the instrument or protocol is finalised, not discovered midway through ethics review.

A committee reviewing a printed risk-assessment checklist around a table
A risk-tier determination made at proposal stage avoids discovering the correct tier midway through review.

Step 2 — Separate parental permission from child assent as two distinct requirements

Parental or guardian permission authorises a child’s participation; it is not the same as the child’s own assent, which the framework addresses separately where the child is developmentally capable of understanding what participation involves. A protocol that collects only parental sign-off, with no age-appropriate assent process for the child and no documented IRB determination that assent can be waived, leaves a gap the committee will ask about. Artefact: two distinct consent instruments — a parental permission form and an age-appropriate child assent process — reviewed together by the ethics committee, not folded into a single generic consent form.

A parent signing a printed permission form at a kitchen table
Parental permission and child assent are two distinct instruments, not one combined form.

Step 3 — Build the access route through the school or care setting, not around it

A thesis studying children in a school, nursery or after-school programme needs sign-off from that setting’s own leadership, in addition to parental permission and, where applicable, the district or governing body’s own research-access policy. The template should require this institutional sign-off as a separate, named step — distinct from the university’s own ethics approval — since a study a university ethics committee has cleared can still be declined access by the school itself. Artefact: a named institutional-access step with its own sign-off, sequenced before data collection can begin.

Step 4 — Assign the ethics committee a reviewer with child-research experience specifically

A generic ethics committee reviewer without specific experience in child-participant research can miss protections that a reviewer familiar with the risk-tier framework would catch — an assent process pitched at the wrong developmental level, a data-retention plan that does not account for a minor reaching the age of majority during the study, or a debriefing step that assumes an adult’s capacity to process it. Artefact: a named reviewer or sub-panel with child-research experience assigned to every application in this category, rather than routed to whichever reviewer is available that cycle.

Step 5 — Write the data-retention and re-contact plan explicitly

A study involving children raises a retention question adult-participant research usually does not: what happens to the data, and to the consent record itself, if the institution wants to re-contact the participant for a follow-up study years later, after the child has reached the age of majority and can consent for themselves. The protocol should state explicitly how long identifiable data is retained, who can access it, and what the re-contact process looks like if a follow-up study is proposed. Artefact: a retention-and-re-contact clause in the ethics application, reviewed by the same committee that reviews the original protocol.

Step 6 — Give the supervisor a pre-submission checklist

Before a proposal reaches the ethics committee, a supervisor can check five things without needing to be a child-research specialist: the risk tier is stated, parental permission and child assent are both addressed as separate instruments, the setting’s own institutional access sign-off is planned for, a named reviewer with child-research experience is requested, and a data-retention plan exists. Artefact: a supervisor-facing pre-submission checklist, distinct from the ethics application itself.

Step 7 — Log outcomes to refine the pathway each cycle

The graduate school or research-ethics office should track which risk tier each early-childhood proposal falls into, how long each stage of review took, and which institutional-access requests were declined and why, feeding that pattern back into supervisor briefings for the next cohort. A pathway that is never reviewed against its own outcomes stays exactly as workable, or unworkable, as it was the year it was written. Artefact: an annual review note comparing outcomes against the pathway’s stated timelines.

Building the equivalent pathway outside the United States

45 CFR 46 Subpart D is a US federal framework; it does not stand in for the UK, German, Dutch or Spanish child-research protections, each of which has its own ethics and safeguarding framework, typically administered through a combination of national research-ethics guidance and the specific requirements of the school, health or social-care system the study is set in. An institution outside the US should not adopt the Subpart D risk-tier language directly — it should confirm its own national and institutional child-research safeguarding requirements and build the seven-step structure above around whatever categories and consent requirements its own framework actually specifies, rather than importing a US-specific risk tier that does not exist in its own regulation.

How this compares to the institution’s general ethics-routing process

Most graduate schools already run some version of a general ethics-approval route — this site’s own look at how a psychology programme routes ethics approval covers the committee structure and consent-form conventions that route applies to adult-participant studies. A child-participant application should enter that same institutional route, not a separate parallel process, but it needs the additional risk-tier determination, the assent-and-permission split, and the child-research-experienced reviewer this pathway adds on top of the general route’s existing structure. Building the child-specific steps as an add-on to the existing route, rather than a standalone process, keeps the institution from maintaining two entirely separate ethics-approval systems.

A related question worth naming explicitly: platform-mediated ethics review

Where the institution already runs its general ethics applications through a dedicated platform — the kind covered in this site’s comparison of ethics-review and IRB management platforms — the child-specific steps in this pathway should be built as additional required fields inside that same platform (risk tier, assent instrument, institutional-access sign-off, named reviewer) rather than as a separate paper process that exists alongside the platform. A child-research proposal routed outside the platform the rest of the institution uses is easier to lose track of and harder to audit later.

Why this differs from a general human-subjects ethics review

A general ethics committee is built to evaluate risk, consent and confidentiality for adult participants who can weigh the study’s risks and benefits themselves and consent on their own behalf. A child-participant study adds a second layer — assessing whether a child of a given developmental stage can meaningfully assent at all, and building in the parental-permission layer as a genuinely separate protection rather than a formality. Treating a child-participant proposal as a routine case, reviewed by whichever committee member is available that cycle, is a common way this category of research gets under-protected, not through bad intent but through a generic process applied to a population it was not specifically built to evaluate.

Where this sits alongside other quality checks in the pipeline

An ethics-and-access pathway for a vulnerable population complements, rather than duplicates, the kind of alignment work covered in this site’s piece on running an alignment and operationalization review for education faculty proposals: that review checks whether a proposal’s own internal logic holds together, while this pathway checks whether the study can ethically proceed with the population it proposes to study at all. A proposal can pass one and fail the other, and a graduate school running both checks, at their respective stages, catches more than either run alone.

What happens when a risk-tier determination is skipped

The failure pattern is consistent: a proposal is reviewed as a routine, minimal-risk case because nobody explicitly checked whether it might sit in a higher tier, and the gap only surfaces when a reviewer with more experience — sometimes at a later stage, sometimes only after data collection has started — notices that the study’s design (a mildly distressing observation task, a follow-up contact plan years later, a setting where the child cannot easily withdraw) puts it in a tier the original review never assessed. Reopening ethics review mid-study is far more disruptive than a correct risk-tier determination at proposal stage would have been, and it is avoidable with a single explicit checklist item asked before the protocol is finalised, not after.

Where Tesify fits

The risk-tier determination, consent design and institutional-access negotiation stay with the ethics committee, the supervisor and the setting’s own leadership — none of it is a writing-platform decision. Once a student has cleared ethics and access and moved into drafting, Tesify is the platform candidates use to write their own thesis chapter by chapter: more than 9,000 students have written over 15,000 chapters with it, and the thesis stays 100% written by the candidate. See how Tesify supports an early-childhood education thesis cohort.

Frequently asked questions

What are the four risk categories under 45 CFR 46 Subpart D?

Minimal-risk research (§46.404); greater-than-minimal-risk research with a prospect of direct benefit to the child (§46.405); research with no prospect of direct benefit where the risk is no more than a minor increase over minimal risk and the study is likely to yield generalisable knowledge about the children’s disorder or condition (§46.406); and research not otherwise approvable, which requires a determination by the HHS Secretary after expert-panel consultation and public review and comment (§46.407).

Is parental permission the same as child assent?

No. Parental or guardian permission authorises participation; child assent is a separate requirement, assessed against the child’s own developmental capacity to understand what participation involves, and the IRB may waive it only under the conditions set out in §46.408.

Does university ethics approval guarantee access to a school or care setting?

No. The setting’s own leadership, and often a district or governing body, must separately approve access — a study the university has ethically cleared can still be declined access by the institution hosting it.

Should a generic ethics reviewer handle a child-participant proposal?

Ideally not without specific child-research experience. A reviewer unfamiliar with the risk-tier framework can miss protections a specialist reviewer would catch, such as a developmentally mismatched assent process.

Does 45 CFR 46 Subpart D apply outside the United States?

No. It is a US federal framework. Institutions in the UK, Germany, the Netherlands or Spain should confirm and apply their own national and institutional child-research safeguarding requirements instead.

What should a data-retention plan for a child-participant study include?

How long identifiable data is retained, who can access it, and what the re-contact process looks like if a follow-up study is proposed after the participant reaches the age of majority.

What should a supervisor check before submitting a child-participant ethics application?

That the risk tier is stated, parental permission and child assent are addressed as separate instruments, institutional access sign-off is planned for, a reviewer with child-research experience is requested, and a data-retention plan exists.