To build an ABA research and program evaluation governance system, create one intake route that classifies each activity before data collection or participant recruitment. Record its purpose, design, people, data, funding, institutional scope, review authority, consent and privacy path, risks, protocol version, incidents, dissemination, and closure. Qualified institutional reviewers make formal regulatory determinations; clinical leaders retain responsibility for ordinary care and client safety.

Define Zara's governed activity and unit

Research governance keeps clinical service, internal improvement, program evaluation, and research decisions attributable to the roles authorized to make them. Teams asking how to build an ABA research and program evaluation governance system need the exact activity, people, purpose, design, data, site, sponsor, funding, institutional scope, authority, current version, participant protections, and unresolved facts before work begins.

Build Zara's research-governance register

Zara creates fields for activity ID, question, sponsor, funding, institution, sites, purpose, prospective design, assignment, intervention, participants, data source, interaction, identifiable information, expected audience, generalizable-knowledge rationale, FWA or other coverage, institutional determination, review status, protocol, consent and assent, HIPAA route, recruitment, risks, monitoring, deviations, authorship, conflicts, publication, correction, retention, and closure. The register stores the source and date behind each decision instead of a single research yes-or-no checkbox.

Protect participants and ordinary care in Zara's workflow

Zara's twenty-eight clinical, quality, evaluation, teaching, and research activities must preserve client dignity, ordinary clinical access, voluntary choice, privacy, communication and AAC, authorized decision-making, safety response, equitable treatment, complaints, and freedom from retaliation. A research label, consent signature, payment, supervisor approval, or publication goal cannot expand a role or erase a required protection.

Work through Zara's fictional example

Zara locks 28 proposed activities. Twenty-four have a documented classification and authorized review route. Four remain held because the sponsor, secondary-data purpose, site engagement, or intervention plan is unresolved. Of the classified activities, ordinary service, QI, evaluation, teaching, and research retain separate labels and obligations. Preserve every proposed, classified, reviewed, approved, exempted, enrolled, changed, reported, published, corrected, held, withdrawn, and closed state with its original version, owner, date, conditions, and validation.

Use Zara's denominator carefully

Classification-and-route completion is 24 of 28, or 85.7%. The four held activities remain in the intake cohort. IRB approval, exemption, consent completion, data access, participant enrollment, protocol adherence, and publication are later states with different denominators.

Assign Zara's decisions to authorized owners

Zara's intake owner gathers facts. The authorized institution or reviewing body determines regulatory status and review. Investigators design and conduct approved work within role. Qualified clinicians protect ordinary care. Privacy, legal, data, safety, finance, employment, and publication owners decide within their domains.

Address Zara's main interpretation risk

A polished protocol can still bypass the right institution, and a routine-care label can conceal a prospective investigation. Classification must follow the actual activity rather than the project name or hoped-for publication.

Verify Zara's research control in practice

Zara samples one activity from every category and traces it from intake through current determination, participant protections, data access, protocol version, incidents, dissemination, and closure. Missing authority or inconsistent states trigger a focused hold.

Place Zara's project inside organizational accountability

Zara's research-governance register uses the CASP Organizational Guidelines public overview only for high-level business, clinical-operations, and risk-management scope in autism service organizations. CASP sells the detailed guidelines. The workflow here is Finni's editorial governance model, not a CASP research protocol, regulatory determination, or institutional approval.

Apply the BACB research duties to Zara's covered roles

Zara's role review uses the current BACB Ethics Code, which applies to BCBA and BCaBA certificants and people who completed an application. Its research section addresses applicable review, participant welfare, informed consent, confidentiality, competence, conflicts, integrity, authorship, publication, and corrections. BACB has no separate organization or corporation jurisdiction, so institutional and legal controls remain necessary.

Anchor Zara's federal scope to the current HHS rule

Zara's federal analysis starts with the HHS 45 CFR 46 page, reviewed in February 2025, which identifies the 2018 Requirements and added subparts for specified populations. Applicability depends on funding, conduct, assurance, institution, activity, and other facts. The page is an authoritative starting point, while the current rule and responsible institution control the determination.

Use the OHRP decision charts as aids for Zara

Zara's reviewer may use the OHRP 2018 Requirements decision charts to organize research, human-subject, exemption, continuing-review, and consent-waiver questions. OHRP calls the charts generalizations and directs users to the full applicable text. They support intake and discussion; they do not authorize an investigator to self-approve a project.

Classify quality improvement carefully for Zara

Zara's project label follows the OHRP Quality Improvement Activities FAQs. OHRP explains that intent to publish is insufficient to decide whether QI is research and that some QI can be nonexempt human-subjects research. Purpose, design, activity, coverage, and an authorized determination matter more than the label chosen by the project team.

Separate HIPAA research permission for Zara

Zara's privacy review uses HHS research guidance under HIPAA, which explains that covered entities may use or disclose PHI for research with individual authorization or through limited rule-defined paths without authorization. Common Rule consent, IRB action, HIPAA authorization or waiver, data-owner approval, and contract terms remain separate decisions even when one document combines information.

Treat informed consent as a process for Zara

Zara's communication plan draws on the OHRP Informed Consent FAQs. OHRP flags that the FAQ predates the 2018 Requirements and 2024 conforming changes, while retaining general nonbinding guidance. Use the current regulation and review decision. The FAQ describes prospective, legally effective, voluntary information exchange with questions and a real choice to join, continue, or withdraw.

Apply child-research requirements precisely for Zara

Zara's child-participant route uses current 45 CFR 46 Subpart D, amended in October 2024. The IRB determines adequate provisions for parental or guardian permission and for child assent when the child is capable, subject to the rule's conditions and possible waivers. Clinical assent policies and research assent determinations should be recorded separately.

Distinguish adverse events and unanticipated problems for Zara

Zara's incident logic uses OHRP guidance on unanticipated problems and adverse events. The guidance explains that only a subset of adverse events are unanticipated problems and describes unexpectedness, relation or possible relation, and increased risk as the three-part analysis. Use the current protocol, institution, and rules for actual reporting decisions and deadlines.

Scope research-misconduct handling for Zara

Zara's integrity route recognizes the 2024 final rule revising 42 CFR Part 93. The rule became effective January 1, 2025, and its regulatory requirements apply beginning January 1, 2026, to covered Public Health Service research-misconduct matters. Allegations received before that applicability date generally follow the 2005 rule unless the institution and respondent elect the new rule in writing. The current rule addresses fabrication, falsification, and plagiarism and excludes honest error or differences of opinion. Other sponsors, institutions, journals, employers, and laws can use different processes; preserve allegations as allegations until the authorized process decides them.

Make Zara's participation process accessible

Zara's access plan uses DOJ effective-communication guidance for covered title II or title III entities. The appropriate aid or service depends on the interaction's nature, length, complexity, context, and the person's usual communication method. Apply the actual entity and rule, preserve AAC and authorship, and test consent, recruitment, questions, incident notices, and withdrawal routes in the formats participants use.

Choose Zara's next review trigger

Reassess after a new site, funder, collaborator, intervention, random assignment, data linkage, population, publication plan, protocol change, complaint, incident, or secondary use. Record the changed fact, affected people and records, immediate protection, governing source, decision owner, reporting or amendment route, deadlines, communication, and validation result.

Close Zara's record with accountable evidence

Review the research-governance register with Zara, investigators, qualified clinicians, the institution or reviewing body, participant representatives as applicable, and the specialists named in the manifest. Confirm that service, QI, evaluation, research, review, consent, privacy, safety, data, employment, authorship, publication, and misconduct routes remain distinct; all conditions are traceable; access is tested; and unresolved work has an accountable endpoint. Keep this page draft and noindex until every required review is complete.

Related resources

Sources