03 · What You Need to Know
Unexpected for the Participant Does Not Mean Unforeseeable for the Protocol
Foreseeability is the key distinction
Researchers may have no idea which participant will produce an incidental finding while still knowing that the research modality is capable of producing them.
Canada's TCPS guidance makes this distinction explicit. Where material incidental findings are reasonably foreseeable, researchers should develop a management plan from the outset for ethics review and inform participants about the disclosure strategy during consent. Genetic research receives particularly explicit planning requirements because such findings are foreseeable.
The same planning logic can be extended to other foreseeable unexpected events. If a study repeatedly asks participants about trauma, violence, suicide, illegal behavior, or severe health problems, it should not be surprised that someone eventually answers the question.
Planning does not mean predicting every possible finding
A useful protocol does not attempt to list every diagnosis, disclosure, or emergency that could conceivably occur. That would be impossible and probably produce an ethics application requiring its own longitudinal study.
Instead, researchers should identify meaningful categories of foreseeable events and establish decision pathways for them.
| Research feature |
Foreseeable issue |
Planning question |
| Imaging |
Unexpected anatomical abnormality |
Who reviews possible abnormalities, and what threshold triggers referral? |
| Genomic sequencing |
Incidental or secondary findings |
What will be sought or returned, how will findings be confirmed, and what choices do participants have? |
| Mental-health assessment |
Self-harm or suicide risk |
What response triggers safety assessment, and who is qualified to perform it? |
| Trauma or family research |
Possible abuse |
What safeguarding and mandatory-reporting rules apply? |
| Violence-related research |
Serious threat toward another person |
What triggers escalation, and what duty-to-protect framework applies? |
| Research on illegal behavior |
Legally sensitive disclosures or demands for records |
What confidentiality protections and legal-response procedures apply? |
| Remote research |
Safety concern involving a participant elsewhere |
What location information and realistic emergency response capability exist? |
A management plan should identify who does what
“The principal investigator will handle it” is rarely an adequate management plan.
TCPS guidance identifies several concrete elements for management of material incidental findings, including how materiality will be determined, whether additional expertise is required, what resources are available for confirmation, which findings will be disclosed, who will communicate them, and how participant consent will be managed.
The same operational discipline is useful for unexpected disclosures. The protocol should identify who recognizes the trigger, who assesses it, who can make a disclosure decision, who contacts the participant, and who provides or coordinates follow-up.
Trigger
Define what observation, response, disclosure, or event activates the pathway.
Assessment
Identify who has the expertise to determine significance, urgency, or the applicable reporting threshold.
Decision
Specify who decides whether confirmation, disclosure, referral, safeguarding action, or another response is required.
Action
Define how the participant or another appropriate person is contacted and what support or referral follows.
Documentation and oversight
Specify what must be recorded and reported to the ethics committee or IRB, sponsor, safety monitor, institution, or another body.
Consent should match the management plan
Participants cannot meaningfully consent to confidentiality or return-of-results arrangements that the research team itself has not yet decided.
If foreseeable incidental findings may be returned, participants should understand what categories may be offered and what choices they have. If suicide risk can trigger safety intervention, relevant confidentiality limits should be explained. If abuse reporting is legally required, the consent process should not promise absolute secrecy.
TCPS 2 specifically requires participants to be informed during initial consent about reasonably foreseeable material incidental findings and, where applicable, the strategy for disclosure.
Likewise, consent under U.S. human-subject protections must be legally effective within the applicable jurisdiction, and additional applicable laws can affect what participants need to be told.
Plan what you will not do
Good protocols establish boundaries as well as actions.
An imaging study might state that research scans are not systematically screened for every possible clinical abnormality. A genomic study might define which secondary findings, if any, will be actively sought. A survey might explain that responses are not monitored continuously for emergencies. A qualitative study might specify that researchers will not investigate abuse allegations themselves.
These boundaries help prevent research from quietly becoming clinical screening, emergency monitoring, forensic investigation, or another service it was never designed to provide.
Confirmation and expertise need resources
A management plan is not credible if it requires resources the study does not possess.
TCPS guidance explicitly tells researchers to consider additional expertise and appropriate resources, including resources for confirming the materiality of findings where possible.
If your protocol promises confirmation, genetic counseling, specialist review, participant recontact, or clinical referral, identify who will provide those services and who will bear relevant confirmation and follow-up costs.
Plan participant preferences before the finding exists
A participant's choice about receiving findings is easier to respect when it was obtained before anyone knows whether a consequential result exists.
The management plan should therefore address whether participants can choose which incidental findings they receive, whether preferences can change over time, and what happens if an unforeseen finding falls outside the original categories.
TCPS guidance specifically includes these questions among the elements researchers should consider in management plans.
Plan confidentiality exceptions before collecting sensitive disclosures
Studies involving abuse, suicide, threats, illegal behavior, or other sensitive information should identify applicable confidentiality protections and their limits before enrollment.
For U.S. studies covered by Certificates of Confidentiality, researchers and institutions have defined responsibilities for protecting identifiable sensitive information and informing participants about Certificate protections.
The broader question of when confidentiality gives way to a duty to act or report should therefore be answered for foreseeable scenarios at the protocol stage, not first debated while a participant is waiting for the researcher's response.
Safety procedures need to work outside office hours
A protocol saying “contact the principal investigator” is incomplete if the principal investigator cannot be reached when an urgent risk arises.
Studies capable of identifying time-sensitive threats should consider staffing, escalation outside normal hours, remote participation, participant location, emergency contacts, and what happens if the first designated person does not respond.
This is particularly important for digital research. If researchers cannot monitor data in real time, participants should not be given the impression that submitting a questionnaire response will summon immediate assistance.
Training is part of the plan
A beautifully written protocol does little good if the interviewer facing the disclosure has never seen it.
Research staff should know the relevant triggers, their own role, whom to contact, what they should not promise, and what they should not attempt themselves. Training should match the kinds of situations the study may realistically encounter.
Staff do not all need to become clinicians, safeguarding investigators, or lawyers. They need enough preparation to recognize when responsibility moves to someone who has that expertise.
What if the finding genuinely was not foreseeable?
No protocol can anticipate everything. TCPS guidance recognizes this explicitly. When material incidental findings were not reasonably foreseeable, researchers are encouraged to have a process in mind even if a detailed plan was not required at the outset. When an unexpected potentially material finding appears, the researcher should report it to the research ethics board and develop an appropriate management plan.
Where participant welfare could be harmed and time is critical, TCPS guidance also recognizes that necessary protective action may precede formal reporting to the ethics board.
The lesson is not that every response must have been scripted word for word. It is that even the unscripted case needs an established route to expertise and oversight.
Plans should evolve when experience reveals a new recurring problem
An event may be genuinely unforeseeable the first time. If it then happens repeatedly, continuing to call it unforeseeable becomes difficult to defend.
TCPS guidance places management of incidental findings within continuing ethics review and expects researchers to communicate with the research ethics board and develop plans further as findings and circumstances emerge.
A protocol should therefore be treated as a controlled plan capable of ethical amendment, not a document frozen on the day approval was granted.
Watch Out
Do not add an incidental-findings paragraph to the consent form without building the operational system behind it. If participants are told that important findings will be returned, someone must be able to recognize, validate, communicate, document, and appropriately refer those findings.
