Research participant consent best practices: a practical guide for user research teams
How to handle informed consent in user research. Covers consent form best practices, plain language writing, HHS guidelines for UX research, modular opt-ins, and a ready-to-use consent template.
Informed consent is not a formality. It is the ethical foundation of every research study you run.
When a participant signs a consent form, they are trusting you with their time, their opinions, and often their personal data. A poorly written consent form, one filled with legal jargon, vague data handling language, or missing withdrawal rights, does not just create legal risk. It erodes participant trust, introduces bias (participants who do not understand what they agreed to behave differently), and can invalidate your findings.
Yet most product and UX research teams treat consent as a checkbox. They copy a template from a clinical research site, swap in their company name, and hand it to participants 30 seconds before the session starts. That is not informed consent. That is a liability shield disguised as ethics.
This guide covers how to write consent forms that participants actually understand, what the HHS guidelines require (and when UX research is exempt), and how to build a consent process that protects both your participants and your research integrity.
Key takeaways
- Informed consent requires participants to understand the study purpose, what data you collect, how you use it, and their right to withdraw at any time without penalty
- Write consent forms in plain language at an 8th-grade reading level. If a participant needs a lawyer to understand your consent form, it is not informed consent
- HHS regulations (45 CFR 46) define the legal standard for human subjects research. Most UX research qualifies as exempt or minimal risk, but following HHS best practices protects you regardless
- Use modular checkboxes for optional elements like video recording, quote attribution, and data sharing rather than bundling everything into a single signature
- Consent is ongoing, not a one-time event. If your research scope changes mid-study, re-consent participants before proceeding
- Verbal confirmation at the session start is as important as the written form. Ask participants to explain back what they consented to
What does informed consent mean in user research?
Informed consent means a participant voluntarily agrees to take part in your study after understanding what the study involves, what data you collect, how that data will be used, and their right to stop participating at any time.
The concept comes from the Belmont Report (1979), which established three ethical principles for research involving human subjects:
- Respect for persons. Treat participants as autonomous individuals capable of making their own decisions. Provide enough information for them to make a genuinely informed choice
- Beneficence. Minimize risks and maximize benefits. In UX research, this means protecting participant data and ensuring the research serves a legitimate purpose
- Justice. Distribute the benefits and burdens of research fairly. Do not recruit only from populations that are easy to access while building products for populations you never studied
These principles apply to all human subjects research, including user interviews, usability testing, surveys, and field studies.
What do HHS guidelines require for informed consent?
The U.S. Department of Health and Human Services (HHS) regulations at 45 CFR 46 define the federal standard for informed consent in human subjects research. While most commercial UX research does not require IRB approval, understanding these requirements helps you build a consent process that meets the highest ethical standard.
Required elements of informed consent (45 CFR 46.116)
HHS requires that informed consent include the following:
| Element | What it means | UX research example |
|---|---|---|
| Study purpose | Why the research is being conducted | ”We are testing a new dashboard design to improve task completion for compliance teams” |
| Procedures | What the participant will be asked to do | ”You will complete 5 tasks on a prototype while thinking aloud. The session takes 30-45 minutes” |
| Risks | Any reasonably foreseeable risks or discomfort | ”Minimal risk. You may feel mild frustration if tasks are difficult. You can skip any task” |
| Benefits | Any benefits to the participant or others | ”No direct benefit to you. Your feedback will improve the product for future users” |
| Confidentiality | How participant data will be protected | ”Your responses will be anonymized. Recordings are stored on encrypted servers and deleted after 6 months” |
| Voluntary participation | The right to decline or withdraw without penalty | ”Participation is voluntary. You may stop at any time without losing your incentive” |
| Contact information | Who to reach with questions | ”Contact [researcher name] at [email] with any questions about this study” |
| Alternatives | Other options available to the participant | ”You may choose not to participate. There are no alternative procedures” |
When is UX research exempt from IRB review?
Most commercial UX research falls under the “exempt” or “minimal risk” categories and does not require formal IRB review. However, you should follow HHS best practices regardless because:
- They protect your participants
- They protect your organization from liability
- They establish trust that improves data quality
- Some enterprise clients and regulated industries require HHS-aligned consent processes
Research that may need IRB review: Studies involving vulnerable populations (minors, people with cognitive impairments, patients), research published in academic journals, or studies conducted in partnership with universities.
How to write a consent form participants actually understand
The biggest failure in research consent is not missing a legal clause. It is writing a form that participants cannot understand.
Write in plain language
Target an 8th-grade reading level. The average American adult reads at a 7th-8th grade level. A consent form written at a college level excludes a significant portion of your participant pool and violates the spirit of “informed” consent.
Before (legalese):
“The Principal Investigator reserves the right to utilize audio-visual recording apparatus for the purposes of subsequent qualitative analysis of participant interactions with the designated software prototype.”
After (plain language):
“We will record your screen and voice during the session. We use the recording to review your feedback later. You can ask us to stop recording at any time.”
Plain language checklist
- Sentences average under 20 words
- No jargon, acronyms, or technical terms without explanation
- Active voice throughout (“We will record” not “Recording will be conducted”)
- Study duration, tasks, and time commitment stated in the first paragraph
- Participant rights stated clearly and early, not buried at the bottom
- A non-researcher colleague can read and understand it in under 2 minutes
Use modular checkboxes for optional elements
Do not bundle everything into a single “I agree” signature. Participants should be able to opt in or out of specific elements:
- I consent to participate in this research study
- I consent to audio recording of this session
- I consent to video/screen recording of this session
- I consent to anonymized quotes being used in internal reports
- I consent to anonymized quotes being used in published case studies
- I consent to being contacted for future research studies
This approach respects participant autonomy and produces cleaner data permissions for your team.
Consent form template for UX research
Here is a consent form structure that meets HHS best practices and works for user interviews, usability testing, and survey research.
Section 1: Study overview
Who is conducting this study? [Your name], [Your role] at [Company name].
What is this study about? We are researching how [target users] use [product/tool type] to [complete specific task]. Your feedback will help us improve the product.
What will I be asked to do? You will [describe tasks: complete tasks on a prototype / answer interview questions / complete a survey]. The session takes approximately [duration].
Will I be compensated? Yes. You will receive [incentive amount and type] within [timeframe] after the session, regardless of whether you complete all tasks.
Section 2: Data handling
What data do we collect?
- Your responses to interview questions or task observations
- [If applicable] Audio and/or video recordings of the session
- [If applicable] Screen recordings showing how you interact with the prototype
- Basic demographic information you provided during screening
How will my data be used? Your responses will be combined with other participants’ feedback to identify patterns and inform product decisions. Individual responses are never shared with anyone outside the research team without your explicit permission.
How is my data protected?
- All data is stored on encrypted, access-controlled systems
- Recordings are deleted after [timeframe, e.g., 6 months]
- Your name and identifying information are removed from all reports and findings
- Data is never sold to third parties
Section 3: Your rights
- Voluntary participation. Your participation is entirely voluntary. You may decline to answer any question or skip any task
- Right to withdraw. You may stop participating at any time for any reason. You will still receive your full incentive
- Right to ask questions. You may ask questions about the study at any time before, during, or after the session
- Right to review. You may request a copy of this consent form for your records
Section 4: Consent
- I have read and understood this consent form
- I consent to participate in this research study
- I consent to audio recording (optional)
- I consent to video/screen recording (optional)
- I consent to anonymized quotes in internal reports (optional)
- I consent to being contacted for future studies (optional)
Participant name: _______________ Signature: _______________ Date: _______________
Researcher name: _______________ Signature: _______________ Date: _______________
Section 5: Contact
Questions about this study? Contact [researcher name] at [email/phone]. Concerns about your rights as a participant? Contact [company privacy officer or legal team] at [email].
How to handle consent during the research session
The written form is only half of informed consent. The session itself requires active consent management.
Before the session
- Send the consent form at least 24 hours before the session so participants can review it without time pressure
- Include a brief summary email: “Attached is the consent form for our session on [date]. Please review it before we meet. Happy to answer any questions”
- For remote sessions, use digital signature tools (DocuSign, HelloSign) or collect verbal consent on recording
At the start of the session
Do not jump straight into tasks. Spend 2-3 minutes on consent:
- Ask if they reviewed the consent form and have any questions
- Summarize the key points verbally: what you will do, how long it takes, that they can stop anytime, and how the data will be used
- Ask them to confirm consent verbally on the recording: “Can you confirm that you have reviewed and agree to the consent form?”
- Remind them they can skip any question or task and stop at any time
During the session
- If the participant appears uncomfortable, pause and remind them they can skip the task or stop entirely
- If the research direction shifts (you want to ask about a topic not covered in the original consent), acknowledge it: “This was not in the original study scope. Are you comfortable discussing this?”
- If a participant accidentally shares sensitive information (names, confidential data), note it for deletion and remind them gently
After the session
- Send a follow-up thanking them and confirming incentive delivery
- If you want to use a specific quote or clip, get explicit permission referencing the exact content
- Honor data deletion requests promptly. If a participant asks you to delete their data after the session, do it
Common consent mistakes in UX research
| Mistake | Why it happens | How to fix it |
|---|---|---|
| Consent form is too long | Copied from clinical research templates designed for higher-risk studies | Keep to 1-2 pages. UX research is minimal risk and does not need 10-page forms |
| Legal jargon throughout | Legal team drafted or reviewed without plain language editing | Have a non-researcher read it. If they struggle, rewrite |
| Consent collected only at signup | Researchers assume screening consent covers the study | Consent for the study is separate from consent to be contacted. Collect study-specific consent before each session |
| No verbal confirmation | Researchers assume the signature is sufficient | Always verbally confirm at session start. Some participants sign without reading |
| Bundled opt-ins | ”I agree to everything” as a single checkbox | Use modular checkboxes for recording, quotes, future contact |
| No re-consent when scope changes | Mid-study pivots add new questions or methods not in original consent | If scope changes materially, send an updated consent form and get fresh signatures |
| Consent form not provided in advance | Handed to participants at session start with no review time | Send 24 hours before. Allow questions before the session |
| Incentive tied to completion | ”You must complete all tasks to receive payment” | Pay full incentive regardless of completion. Tying payment to completion is coercive |
Consent considerations for specific research methods
Different research methods require different consent approaches.
User interviews. Standard consent plus audio recording opt-in. Emphasize that the participant controls what they share and can decline any question.
Usability testing. Add screen recording consent and clarify that you are testing the product, not the participant. This framing reduces anxiety and produces more natural behavior.
Surveys. Consent is typically embedded at the survey start. Include a brief overview of purpose, data handling, and voluntary participation before the first question. Allow exit at any point without losing partial responses.
Diary studies. Consent must cover the extended time period, multiple data submissions, and any photo/video capture the participant does on their own. Re-consent if the study extends beyond the original timeline.
Contextual inquiry. Requires organizational consent (the employer) in addition to individual consent. Clarify what the observer will and will not look at, especially when observing in workplaces with confidential information.
Focus groups. Add a confidentiality clause where participants agree not to share what other participants said outside the session. You cannot guarantee confidentiality in a group setting, so disclose this in the consent form.
Frequently asked questions
Does UX research require IRB approval?
Not typically. IRB (Institutional Review Board) review applies to federally funded research, academic research, and clinical trials. Commercial UX research to improve products is operational, not academic. However, if you are partnering with a university, publishing in academic journals, or researching vulnerable populations (minors, patients, people with cognitive impairments), consult with your legal team about IRB requirements. The HHS OHRP guidance provides detailed criteria for when IRB review is required.
Can participants withdraw consent after the session?
Yes. Participants have the right to withdraw consent and request data deletion at any time, including after the session is complete. Your consent form should state this clearly, and your team should have a process for honoring these requests promptly. In practice, this means being able to locate and delete a specific participant’s recordings, transcripts, and any quotes used in reports.
Do you need written consent for remote research?
Written consent is best practice but not always legally required for minimal-risk UX research. For remote sessions, you have several options: digital signature (DocuSign, HelloSign), email confirmation (“Reply YES to confirm you agree to the attached consent form”), or verbal consent recorded at the session start. Whatever method you use, document it and keep the record.
What about consent for research with minors?
Research with participants under 18 requires parental or guardian consent in addition to the minor’s assent (their agreement to participate). The consent form goes to the parent. A simplified assent form, written at the child’s reading level, goes to the minor. Both must agree before the session proceeds. HHS provides specific guidance under 45 CFR 46 Subpart D for research involving children.
How long should you keep consent records?
Keep signed consent forms for at least 3 years after the study concludes. This is the standard retention period recommended by most IRBs and aligns with common data protection regulations. Some organizations require longer retention. Check with your legal team for company-specific requirements.
Is verbal consent sufficient?
Verbal consent is acceptable for minimal-risk research when documented on recording. Start the recording, state the key consent elements (study purpose, voluntary participation, recording permission, data handling), and ask the participant to confirm verbally. This is common in phone interviews and remote sessions where digital signatures are impractical. Keep the recording as your consent record.
What is the difference between consent and assent?
Consent is given by someone with full legal capacity to make decisions (adults, legal guardians). Assent is agreement from someone who cannot legally consent on their own (minors, individuals with certain cognitive impairments). In UX research, you need consent from the legally authorized person and assent from the participant when they are not the same person.