Data collection without ethics approval

Short answer

Yes. Collecting research data without the necessary ethics approval can amount to academic misconduct, and at most UK universities it is treated as a serious matter. Whether it is dealt with as academic misconduct, as a research integrity or research misconduct issue, or as a lower level “ethical breach” that can be corrected, depends on the seriousness of what happened, the harm or risk involved, the intention behind it, and the specific regulations of your institution.

Why it can be misconduct

The core principle across the sector is that ethics approval must be obtained before data collection begins. A research ethics committee cannot give retrospective approval for data that has already been gathered, because the whole point of prior review is to protect participants, ensure informed consent, and manage data protection and risk before anything happens. Once data has been collected without approval, that protective process has been bypassed and cannot be undone.

Because of this, universities generally define starting recruitment or data collection without a favourable ethical opinion, or deviating from the approved methods, as a breach of ethics. The University of Manchester, for example, expressly lists beginning recruitment or data collection for a project requiring ethics review without first obtaining a favourable opinion, and deviating from approved methods such as adding new data collection methods, participant groups, or questions, as breaches. Durham similarly treats failure to follow the ethical approval process, or to observe the limits of an approval, as research misconduct.

At the sector level, the UK Research Integrity Office lists breaching the legal, ethical and professional requirements for research, including those needed for human participants, as a form of research misconduct. So the conduct sits within recognised definitions of misconduct, not merely as an administrative slip.

Misconduct is not automatic in every case

The label attached to what happened matters, and it is not always full academic misconduct. Institutions typically have a range of possible routes. Bristol, for instance, sets out that where an examiner raises a concern that primary data was collected without evidence of ethical approval, the university may deal with it in one of several ways: report and manage it under the research misconduct regulations, refer it to an academic misconduct panel, or treat it as an ethical breach that can be managed through mitigating action.

Which route applies usually turns on factors such as:

The seriousness of the breach and the level of risk or harm to participants, for example whether vulnerable people, sensitive personal data, or health information were involved.

Whether the failure was deliberate or reckless, as opposed to a genuine misunderstanding about whether approval was needed or about the scope of an existing approval.

Whether there was any consent at all, whether data protection obligations were observed, and whether participants were misled.

Whether the researcher exceeded the limits of an approval that was granted, rather than having no approval at all.

The stage at which the problem was discovered and whether the student or researcher was open about it.

A genuine, minor, well-intentioned procedural error with low risk to participants may be managed as a correctable ethical breach. A deliberate decision to collect sensitive data with no approval, or fabricating or backdating approval, is far more likely to be treated as serious misconduct.

The distinction from an ordinary mistake

It is worth separating the legal and disciplinary characterisation from the reality of what occurred. Not every failure to have approval reflects dishonesty. Common innocent explanations include misjudging whether a project needed formal review at all, believing an existing approval covered the work, or a supervisor giving unclear or incorrect guidance. These explanations do not excuse the breach, but they are highly relevant to how it is categorised and to any penalty, and they should be explained clearly and honestly if the matter is investigated. By contrast, forging an approval reference, backdating an application, or concealing the lack of approval moves the conduct firmly into dishonest misconduct and is treated much more severely.

Practical consequences

The consequences vary widely by institution and severity. They can include the affected data being excluded from the assessment or thesis, a requirement to redo the work with proper approval, a capped or reduced mark, a formal misconduct finding, resubmission requirements, or in the most serious cases failure of the module, non-award, or degree, and referral to a fitness to practise process in regulated professions. For staff and postgraduate researchers, a research misconduct finding can also affect publication and future funding.

Practical next steps

1. Read the specific regulations that apply to you. The exact definitions, categories and penalties are set out in your own institution’s academic misconduct regulations and research ethics or research integrity policy. These govern the outcome far more precisely than the general sector position.

2. Do not collect any further data or continue analysing the affected data until the position is clarified. Continuing may worsen the breach.

3. Do not attempt to obtain approval after the event and present it as if it predated collection. Retrospective approval is not available, and any attempt to disguise the timeline would convert a procedural problem into a dishonesty allegation.

4. Be candid about the timeline and reasons. Prepare a clear, honest account of what data was collected, when, from whom, what consent and data protection steps were in place, and why approval was not obtained. Openness and prompt disclosure usually count in your favour when the seriousness is assessed.

5. Seek early advice and support. Your students’ union advice service or a personal or academic tutor can help you understand the process, and you are normally entitled to be accompanied or supported at any misconduct hearing.

6. Gather mitigating evidence. Emails or notes showing supervisor guidance, genuine confusion about scope, or steps you took to protect participants can support a lower-level categorisation or a reduced penalty.

Missing facts that would change the answer

The precise outcome depends on several things you have not stated: which institution and which regulations apply, whether this concerns a student assessment or dissertation, staff research, or a postgraduate thesis, whether any approval existed and was simply exceeded, what kind of data and participants were involved, whether there was informed consent and data protection compliance, and whether the breach was deliberate or an honest error. If you tell me these details, I can give you a more targeted assessment of how it is likely to be categorised and what to expect from the process.