03 · What You Need to Know
Accessibility concerns entry; research ethics concerns the entire journey
What does “publicly accessible” mean?
At its simplest, publicly accessible information can be obtained by members of the public without obtaining individualized authorization from the person to whom it relates or from someone controlling private access.
Examples may include public government records, unrestricted websites, published articles, public speeches, open online profiles, publicly displayed notices, and observations of certain activities in genuinely public settings.
Exactly what qualifies as public information depends on the applicable regulatory, legal, and institutional framework. Researchers should therefore use formal definitions where those definitions determine whether review, consent, or another requirement applies.
“Ethically public” is an analytical distinction, not a magic regulatory category
Researchers should be careful with terminology. “Ethically public” is useful shorthand for asking whether treating accessible information as public for a particular research use is ethically defensible. It is not necessarily a formal category appearing in the regulation that governs a study.
The distinction helps prevent a common reasoning error:
Publicly accessible
Can the researcher obtain the information without breaching a meaningful access restriction?
Ethically public for the proposed use
Does the context support the proposed collection, analysis, linkage, retention, quotation, and dissemination without protections that would ordinarily accompany more private information?
The first question concerns access. The second concerns use.
Authoritative guidance itself cautions against treating publicity mechanically
UKRI's guidance on internet-mediated research states that information in internet spaces intentionally made public would be considered in the public domain. Yet it also says that researchers should always critically examine the public nature of internet or social media communication. It highlights privacy, informed consent, identifiability, legal requirements, and platform regulations among the issues researchers need to consider.
That combination is important. Ethical caution does not require denying that public information exists. It requires asking what follows from its public status.
Context can survive accessibility
Information is usually produced within a social context. A speaker addresses a particular audience. A forum member participates in a community. A patient writes in a support space. A teenager posts for friends. A professional publishes a statement specifically intended to circulate widely.
Digital systems can flatten these differences because all of the resulting material may ultimately appear as rows in the same dataset.
Scholarly work on sensitive social media research has consequently argued that researchers should understand platform norms and genres when deciding whether they are studying material intended for widespread dissemination or conversations that happen to occur in technically public spaces.
Ethical analysis tries to restore some of the context that data extraction removes.
Observation and documentation can exceed ordinary exposure
Public information often has practical limits on who encounters it. A conversation may be audible to twenty people. A public notice may be seen by residents of one neighborhood. An old forum post may technically remain accessible but receive almost no traffic.
Research can remove those practical limits.
A researcher can search, copy, aggregate, classify, archive, translate, quote, publish, and redistribute information to audiences far beyond its original exposure. Online public appearances are especially persistent and searchable compared with many ephemeral public interactions, and automated analytics can transform scattered public information into structured profiles.
The ethical question is therefore not always whether someone else could have encountered the information. It may be whether the research substantially changes the nature, persistence, or audience of that exposure.
Aggregation can create information that was never publicly disclosed
Imagine that a person publicly posts photographs of restaurants, comments on local weather, follows several organizations, and occasionally mentions commuting problems. Each item appears innocuous.
Combining those traces may allow a researcher to infer where the person lives, where they work, their daily schedule, social network, socioeconomic circumstances, or other characteristics they never explicitly disclosed.
AoIR's Internet Research: Ethical Guidelines 3.0 specifically encourages researchers to examine whether people can be identified indirectly through inference, whether sensitive characteristics can be reconstructed, whether data are necessary and proportionate, and whether unnecessary information should be deleted.
This is why large-scale collection can become ethically problematic even when each individual datum appears harmless.
Identifiability can change after collection
A dataset may appear anonymous when each record is considered alone. Linkage can change that.
Locations, dates, occupations, distinctive phrases, demographic characteristics, photographs, social connections, and external datasets can sometimes make people identifiable. Ethical analysis therefore needs to consider what the research process can infer or reconstruct, not merely what the source explicitly names.
This problem is particularly visible when researchers use public social media posts as research data. Removing an account name may do little if a verbatim quotation leads directly back to the original profile.
Sensitivity is not erased by publicity
Information about health, violence, sexuality, immigration, political activity, religious beliefs, financial hardship, illegal conduct, or stigmatized experiences may be intentionally disclosed publicly.
Researchers should not automatically redefine that information as private against the author's expressed choice. At the same time, intentional disclosure does not make potential harm irrelevant.
The ethically relevant questions include why the information was disclosed, to whom, how the research changes its exposure, whether the individual remains identifiable, and what consequences could follow from research dissemination.
People can misunderstand the practical reach of public settings
Researchers should not automatically assume that users perfectly understand platform architectures or the future uses of publicly available information.
UKRI specifically notes that some social media users, including children, may not understand the implications of what they are doing online. It therefore recommends critical scrutiny rather than automatic reliance on the assumption that social media material is simply public-domain data.
That does not mean researchers should paternalistically declare every user's public choice invalid. It means technical configuration should be interpreted alongside the context and foreseeable consequences of research reuse.
Accessibility can change over time
Information may move between public and restricted states. A social media account can become private. A webpage can disappear. A forum can close. A post can be deleted. A public database can change its access rules.
Researchers who retain copies can effectively preserve a version of information that the original source no longer exposes.
This creates the separate ethical problem of how to handle content that was public when collected but later removed.
Technical access methods can create additional responsibilities
Public accessibility also does not mean every method of collection is ethically equivalent.
Manually reading a publicly accessible page, making thousands of automated requests, circumventing rate limits, collecting every available profile field, and linking records across platforms all involve different effects and risks.
Researchers conducting web scraping of publicly available information should therefore examine collection methods, platform conditions, proportionality, security, legal requirements, and potential effects on the systems or communities being studied.
Formal exemption and ethical responsibility are not synonyms
Some forms of research involving public information may fall outside formal research ethics review or qualify for an exemption under the applicable framework. That determination matters and should not be casually ignored.
But “formal review not required” does not mean “no ethical decisions remain.” Researchers still make decisions about data minimization, identification, quotation, security, interpretation, and dissemination.
AoIR's guidance reflects this broader lifecycle approach by asking ethical questions about collection, existing datasets, analysis, storage, and derivative uses rather than treating ethics as a single permission obtained before data collection.