I guess we can deem the IRB approval unnecessary according to US and german law.
For the US law it's the 45 CFR 46.101(b)
http://www.hhs.gov/ohrp/humansubjects/guidance/45cfr46.html#46.101 Especially subnumber (2) of this code: "Unless otherwise required by department or agency heads, research
activities in which the only involvement of human subjects will be in
one or more of the following categories are exempt from this policy: [...]
(2) Research involving the
use of educational tests (cognitive, diagnostic, aptitude,
achievement), survey procedures, interview procedures or observation of
public behavior, unless:
(
i) information
obtained is recorded in such a manner that human subjects can be
identified, directly or through identifiers linked to the subjects; and
(ii) any disclosure of the human subjects' responses outside the
research could reasonably place the subjects at risk of criminal or
civil liability or be damaging to the subjects' financial standing,
employability, or reputation."
We should fall into this category with our survey. Similarly the Hessian "Datenschutzbeauftragte" states "Die datenschutzrechtlichen Bestimmungen finden nur Anwendung, wenn für
ein Forschungsprojekt personenbezogene Daten benötigt werden. Forschung
mit anonymisierten Daten ist jederzeit ohne datenschutzrechtliche
Vorgaben möglich." (
http://www.datenschutz.hessen.de/wf001.htm#entry2223), so we're inside the framework of the Bundesdatenschutzgesetz as well.
I'd say we add/edit following text of the manuscript in the following way:
=== start ===
The survey was performed using
\textit{Google Docs
} and was distributed to possible participants through the
\textit{23andMe
}community forums, the
\textit{DIYBiology
} mailing list,
blogs which focus on genetics and DTC genetic testing and social media websites like
\textit{Twitter
},
\textit{Google+
} and
\textit{Facebook
}. The survey was taken anonymously by the participants, thus IRB approval was deemed unnecessary according to US regulations in \text{45 CFR 46.101(b)} and according to the Hessian data protection officer (
http://www.datenschutz.hessen.de/wf001.htm#entry2223).
The survey included demographics such as age, chromosomal sex and ethnicity of the participants. Furthermore, it included questions on their
(planned) customership with a DTC company.
=== end ==
Do you think that will do? Should we add more on this?
Cheers,
Bastian