03 · What You Need to Know
An Abuse Disclosure Is Not an Ordinary Research Response
Start with immediate safety, not investigative curiosity
A participant's disclosure can naturally make a researcher want more details. But the researcher's first responsibility is not to establish whether abuse has legally occurred.
If the participant appears to be in immediate danger, the study's urgent safeguarding or emergency procedure should guide the response. If there is no immediate threat, the researcher can follow the ordinary escalation pathway established for disclosures.
The important distinction is between gathering information needed to respond safely and conducting an investigation that belongs to qualified safeguarding professionals, clinicians, child-protection authorities, law enforcement, or another appropriate body.
Clarification for safety
Obtaining only the information necessary to understand whether an immediate protective response or required report may be needed.
Investigating the allegation
Trying to establish credibility, collect evidence, interrogate details, identify culpability, or determine whether abuse legally occurred.
Unless the research protocol specifically requires and ethically supports a specialized assessment, researchers should not quietly turn an interview into an abuse investigation.
Do not promise absolute confidentiality
Confidentiality is central to research involving sensitive information, but it can have legally or ethically defined limits.
U.S. OHRP guidance on informed consent states that absolute confidentiality should not be guaranteed and that participants should be informed of circumstances in which confidentiality will not be maintained, including legal requirements and mandated reporting.
This matters particularly in research where disclosures of child abuse, elder abuse, interpersonal violence, or other safety concerns are reasonably foreseeable. A participant who was promised “nothing you say will ever leave this room” may experience a required report as a profound betrayal, even when the researcher is legally obligated to make it.
Mandatory reporting rules are jurisdiction-specific
There is no universal reporting rule that applies to every researcher, participant, and form of abuse. Laws differ among countries and, in federal systems, can differ among states, provinces, territories, or other jurisdictions.
Even within one jurisdiction, reporting obligations may depend on whether the participant is a child, an older or otherwise protected adult, whether the alleged victim remains at risk, the type of abuse, and whether the researcher belongs to a profession designated as a mandatory reporter.
Published literature on child-abuse research has long emphasized that mandatory-reporting requirements can vary by jurisdiction and create difficult interactions among participant protection, confidentiality, research validity, and legal obligations.
Watch Out
Do not rely on a generic statement such as “researchers are mandatory reporters” or “researchers are never mandatory reporters.” Determine the actual law and institutional requirements applying to the research team, participant population, and study location.
A disclosure by a child requires particular care
Research involving children has additional protections, and possible child abuse raises particularly consequential safeguarding and reporting questions. In U.S. HHS-regulated research, children receive additional protections under Subpart D of 45 CFR part 46. OHRP also recognizes that research involving abused or neglected children may require special mechanisms for protecting participants, including circumstances in which ordinary parental permission is not a reasonable protective requirement.
If a child makes a disclosure, researchers should follow the protocol's child-safeguarding procedure and applicable reporting law. They should not assume that notifying a parent is always the appropriate first response because the parent, guardian, or another household member may be implicated in the concern.
Adult disclosures can involve different legal rules
An adult participant reporting past or current abuse may not trigger the same reporting obligations as a child-abuse disclosure. Depending on jurisdiction, competent adults may have substantial control over whether interpersonal violence is reported, while particular circumstances involving protected adults or immediate danger may be treated differently.
This is precisely why the protocol should distinguish categories of foreseeable disclosure instead of containing one generic instruction to “report abuse.”
| Situation |
Key question |
Possible response pathway |
| Possible immediate danger |
Does delay create an imminent safety risk? |
Activate the approved urgent safeguarding or emergency procedure |
| Child discloses possible abuse |
What child-protection and mandatory-reporting rules apply? |
Follow the child-safeguarding and legally required reporting pathway |
| Competent adult reports interpersonal abuse |
Is reporting required or does the participant control disclosure? |
Follow applicable law and protocol; provide appropriate support or referral without assuming mandatory reporting |
| Possible abuse of a protected or vulnerable adult |
Do adult-protection reporting rules apply? |
Follow applicable safeguarding and reporting requirements |
| Historical abuse with no apparent current danger |
Does the jurisdiction nevertheless require a report? |
Apply the relevant law and approved protocol rather than inferring from remoteness alone |
Certificates of Confidentiality do not mean researchers can ignore all reporting laws
In the United States, NIH Certificates of Confidentiality protect identifiable, sensitive research information against many forms of compelled disclosure. They are important protections, but researchers should understand their limits.
Current NIH guidance states that identifiable sensitive information protected by a Certificate may be released when disclosure is required by applicable federal, state, or local law, including certain child or elder abuse reporting requirements.
Older OHRP guidance likewise emphasized that confidentiality protections should not be described as absolute and discussed disclosures involving evidence of child abuse or threats of violence.
Because the statutory framework and applicable reporting law matter, research teams should obtain current institutional or legal guidance rather than relying on assumptions about what a Certificate does or does not protect.
Participants should be told about foreseeable limits to confidentiality before disclosure occurs
If researchers know that certain disclosures must or may be reported, that limitation belongs in the informed-consent process.
OHRP recommends explaining circumstances in which confidentiality will not be maintained when appropriate, including legal and mandatory-reporting requirements.
That disclosure can affect whether participants choose to participate and what they choose to discuss. This may complicate research on violence and abuse because participants could disclose less when they know reporting may occur. Yet concealing a reporting obligation until after someone speaks would undermine informed consent.
Respond without interrogating the participant
Researchers should avoid asking unnecessary probing questions simply because the disclosure is surprising or emotionally compelling. Excessive questioning can increase distress, create expectations of assistance the researcher cannot provide, or interfere with later professional assessment.
The protocol should specify what minimum information researchers need to establish the appropriate safety or reporting pathway. Staff conducting sensitive interviews should be trained in that procedure before participant contact begins.
Do not make promises about what authorities will do
If a report is required, researchers should explain the process as accurately as they can but should not promise a particular outcome. The researcher may not control whether an agency investigates, what protective action occurs, or whether the participant is contacted.
Likewise, telling someone “everything will be fine once I report this” can create false expectations during an already vulnerable moment.
Offer appropriate support without becoming the participant's therapist or investigator
Researchers can respond compassionately while maintaining professional boundaries. Depending on the protocol and participant's circumstances, this may involve providing information about safeguarding services, healthcare, counseling, crisis support, advocacy organizations, or another appropriate referral.
What should be offered depends on the research population and local service environment. Referral information should ideally be prepared and verified before data collection rather than assembled hurriedly after a disclosure.
Record only what the protocol requires
Abuse disclosures can involve highly sensitive identifiable information. Researchers should document what is necessary for participant protection, reporting, research integrity, and institutional requirements while avoiding unnecessary proliferation of sensitive details.
The protocol should specify where safeguarding records are kept, who may access them, whether they are separated from research data, and how any report is documented.
Abuse disclosure is different from an incidental biomedical finding
A disclosure of abuse is sometimes grouped with “unexpected findings” because it arises outside the research question. But its ethical structure is different from noticing an abnormality on a scan.
The researcher is dealing with information communicated by a person, potentially involving ongoing interpersonal harm and legal safeguarding obligations. Analytic confirmation may therefore not be the central issue. The relevant questions concern safety, reporting thresholds, confidentiality, participant autonomy, and appropriate professional response.
This is why the broader question of when confidentiality gives way to a duty to act or report becomes particularly important.
04 · A Practical Example
A Sensitive Interview Produces an Unexpected Disclosure
Hypothetical Example
A participant describes possible abuse during an interview
During a study interview, a participant makes a statement suggesting that they may currently be experiencing abuse. The topic is outside the interview's primary research questions, but the study anticipated that sensitive disclosures could occur and has an ethics-approved safeguarding procedure.
Respond calmly
The researcher listens without expressing disbelief, blame, or shock and does not begin an improvised investigation.
Assess the required safety threshold
Using the protocol, the researcher determines whether there is information indicating an immediate safety concern requiring urgent escalation.
Recall the confidentiality limits
The researcher follows the limits explained during consent and does not promise that the disclosure can necessarily remain confidential.
Escalate appropriately
The researcher contacts the designated safeguarding lead or other person identified in the protocol and follows applicable reporting requirements.
Provide appropriate support
The participant receives the referral or support information specified by the study without the researcher promising outcomes or taking on a role outside their competence.
Document carefully
Only the information required by the safeguarding, reporting, and research procedures is recorded in the appropriate location.
The researcher has neither ignored the disclosure nor attempted to determine personally whether abuse “really happened.” The response is protective, bounded, and governed by procedures established before the disclosure occurred.