CINXE.COM

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" version="XHTML+RDFa 1.0" dir="ltr" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/terms/" xmlns:foaf="http://xmlns.com/foaf/0.1/" xmlns:og="http://ogp.me/ns#" xmlns:rdfs="http://www.w3.org/2000/01/rdf-schema#" xmlns:sioc="http://rdfs.org/sioc/ns#" xmlns:sioct="http://rdfs.org/sioc/types#" xmlns:skos="http://www.w3.org/2004/02/skos/core#" xmlns:xsd="http://www.w3.org/2001/XMLSchema#"> <head profile="http://www.w3.org/1999/xhtml/vocab"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="Generator" content="Drupal 7 (http://drupal.org)" /> <link rel="canonical" href="/mobile-medical-apps-other-digital-health-technologies" /> <link rel="shortlink" href="/node/1921" /> <link rel="shortcut icon" href="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/favicon.ico" type="image/vnd.microsoft.icon" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /> <meta property="og:image" content="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/img/img-metatag.jpg" /> <meta property="og:image:width" content="940" /> <meta property="twitter:image" content="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/img/img-metatag.jpg" /> <meta property="twitter:card" content="summary" /> <meta property="og:site_name" content="Human Research Protection Program (HRPP)" /> <meta property="twitter:url" content="https://irb.ucsf.edu/mobile-medical-apps-other-digital-health-technologies" /> <meta property="og:url" content="https://irb.ucsf.edu/mobile-medical-apps-other-digital-health-technologies" /> <meta property="twitter:title" content="Mobile Medical Apps &amp; Other Digital Health Technologies | Human Research Protection Program (HRPP)" /> <meta property="og:title" content="Mobile Medical Apps &amp; Other Digital Health Technologies" /> <title>Mobile Medical Apps & Other Digital Health Technologies | Human Research Protection Program (HRPP)</title> <style type="text/css" media="all"> @import url("https://irb.ucsf.edu/modules/system/system.base.css?smabd7"); @import url("https://irb.ucsf.edu/modules/system/system.messages.css?smabd7"); @import url("https://irb.ucsf.edu/modules/system/system.theme.css?smabd7"); </style> <style type="text/css" media="all"> @import url("https://irb.ucsf.edu/modules/comment/comment.css?smabd7"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/fences/field.css?smabd7"); @import url("https://irb.ucsf.edu/modules/node/node.css?smabd7"); @import url("https://irb.ucsf.edu/modules/search/search.css?smabd7"); @import url("https://irb.ucsf.edu/modules/user/user.css?smabd7"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/views/css/views.css?smabd7"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/ckeditor/css/ckeditor.css?smabd7"); </style> <style type="text/css" media="all"> @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/ctools/css/ctools.css?smabd7"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_b1gfoot_admin_menu/css/ucsf_b1gfoot_admin_menu.css?smabd7"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_b1gfoot_sitewizard/css/ucsf_b1gfoot_sitewizard.css?smabd7"); </style> <style type="text/css" media="all"> <![CDATA[/*> </style> <link type="text/css" rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/hopscotch/0.2.5/css/hopscotch.min.css" media="all" /> <link type="text/css" rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css" media="all" /> <style type="text/css" media="all"> @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/vendor/slick/slick.css?smabd7"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/css/screen.css?smabd7"); </style> <style type="text/css" media="all"> <![CDATA[/*> </style> <style type="text/css" media="all"> @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/css/colors/primary/primary-navy.css?smabd7"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/css/colors/secondary/secondary-teal.css?smabd7"); </style> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/jquery_update/replace/jquery/1.12/jquery.min.js?v=1.12.4"></script> <script type="text/javascript" src="https://irb.ucsf.edu/misc/jquery-extend-3.4.0.js?v=1.12.4"></script> <script type="text/javascript" src="https://irb.ucsf.edu/misc/jquery-html-prefilter-3.5.0-backport.js?v=1.12.4"></script> <script type="text/javascript" src="https://irb.ucsf.edu/misc/jquery.once.js?v=1.2"></script> <script type="text/javascript" src="https://irb.ucsf.edu/misc/drupal.js?smabd7"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/jquery_update/js/jquery_browser.js?v=0.0.1"></script> <script type="text/javascript" src="https://irb.ucsf.edu/misc/form-single-submit.js?v=7.101"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/entityreference/js/entityreference.js?smabd7"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_b1gfoot_admin_menu/js/ucsf_b1gfoot_admin_menu.js?smabd7"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_eds_profiles/ucsf_eds_profiles_tweaks.js?smabd7"></script> <script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/hopscotch/0.2.5/js/hopscotch.min.js"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/y3ti_help/js/y3ti_help.js?smabd7"></script> <script type="text/javascript"> <![CDATA[//><!]]> </script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_b1gfoot_sitewizard/js/ucsf_b1gfoot_sitewizard.js?smabd7"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/vendor/slick/slick.js?smabd7"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/vendor/icheck.min.js?smabd7"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/build/main.js?smabd7"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/vendor/responsive-nav/responsive-nav.min.js?smabd7"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/script.js?smabd7"></script> <script type="text/javascript"> <![CDATA[//><!]]> </script> </head> <body class="html not-front not-logged-in page-node page-node- page-node-1921 node-type-page slider-secondary ucsf-b1gfoot font--header--granjon slider-secondary-no-image profile--expanded sidebar sidebar--right sidebar-color--grey" > <div id="skip-link"> <a href="#main-content" class="element-invisible element-focusable">Skip to main content</a> </div> <div id="page-wrapper"> <div id="page"> <div class="ucsf-top-header row-full-width no-logo"> <div class="inside"> <ul class="menu"> <li class="first"><a href="https://www.ucsf.edu">University of California San Francisco</a></li> <li><a href="https://www.ucsfhealth.org/">UCSF Health</a></li> <li><a href="https://www.ucsf.edu/search" title="">Search UCSF</a></li> <li><a href="https://www.ucsf.edu/about">About UCSF</a></li> </ul> </div> </div> <div id="header" class="row-full-width"> <div class="inside clearfix"> <h1 id="site-name"> <a href="/" title="Home" rel="home"> Human Research Protection Program (HRPP) </a> </h1> <div class="region region-header"> <div id="block-search-form" class="block block-search"> <div class="content"> <form onsubmit="if(this.search_block_form.value=='Search'){ alert('Please enter a search'); return false; }" action="/mobile-medical-apps-other-digital-health-technologies" method="post" id="search-block-form" accept-charset="UTF-8"><div><div class="container-inline"> <h2 class="element-invisible">Search form</h2> <div class="form-item form-type-textfield form-item-search-block-form"> <label class="element-invisible" for="edit-search-block-form--2">Search... </label> <input title="Enter the terms you wish to search for." placeholder="Search..." class="text-input fa fa-search form-text" aria-hidden="" type="text" id="edit-search-block-form--2" name="search_block_form" value="" size="40" maxlength="128" /> </div> <div class="form-actions form-wrapper" id="edit-actions"><input type="submit" id="edit-submit" name="op" value="" class="form-submit" /></div><input type="hidden" name="form_build_id" value="form-J1EBafAPB3CrVdtM42JWJ6J6zKjYMWC44fEYysGsSws" /> <input type="hidden" name="form_id" value="search_block_form" /> </div> </div></form> </div> </div> <div id="block-ucsf-b1gfoot-tweaks-header-socialmedia" class="block block-ucsf-b1gfoot-tweaks"> <div class="content"> <div class="nav-social"></div> </div> </div> <div id="block-menu-block-1" class="block block-menu-block"> <div class="content"> <div class="menu-block-wrapper menu-block-1 menu-name-main-menu parent-mlid-0 menu-level-1"> <ul class="menu"><li class="first expanded menu-mlid-3061"><a href="/program-description">About Us</a><ul class="menu"><li class="first leaf menu-mlid-3686"><a href="/contact-us">Contact Us</a></li> <li class="leaf menu-mlid-4061"><a href="/our-team" title="">Our Team</a></li> <li class="last leaf menu-mlid-4911"><a href="/hrpp-job-opportunities">Careers</a></li> </ul></li> <li class="expanded active-trail menu-mlid-3691"><a href="/our-services" class="active-trail">Our Services</a><ul class="menu"><li class="first leaf has-children active-trail menu-mlid-3826"><a href="/device-and-technology-guidance" class="active-trail">Device and Technology Guidance</a></li> <li class="leaf has-children menu-mlid-3836"><a href="/training">Education & Training</a></li> <li class="leaf has-children menu-mlid-3751"><a href="/irb-review">IRB Review</a></li> <li class="leaf has-children menu-mlid-3721"><a href="/welcome-iris">iRIS</a></li> <li class="leaf has-children menu-mlid-3786"><a href="/reporting">Post-Approval Reporting/Quality Improvement</a></li> <li class="leaf has-children menu-mlid-3861"><a href="/stem-cell">Stem Cell</a></li> <li class="leaf has-children menu-mlid-3696"><a href="/submissions">Submissions</a></li> <li class="last leaf has-children menu-mlid-4001"><a href="/working-other-institutions">Working with Other Institutions</a></li> </ul></li> <li class="expanded menu-mlid-3891"><a href="/recruitment-consent-and-hipaa">Recruitment, Consent, HIPAA</a><ul class="menu"><li class="first leaf has-children menu-mlid-3901"><a href="/consent">Consent</a></li> <li class="leaf menu-mlid-3916"><a href="/experimental-subjects-bill-rights">Experimental Participants Bill of Rights</a></li> <li class="leaf menu-mlid-4066"><a href="/fda-part-11-compliance-assurances">FDA Part 11 Compliance Assurances</a></li> <li class="leaf menu-mlid-3911"><a href="/federalwide-assurance">Federalwide Assurance (FWA)</a></li> <li class="leaf menu-mlid-3896"><a href="/hipaa">HIPAA</a></li> <li class="last leaf has-children menu-mlid-3906"><a href="/recruitment">Recruitment</a></li> </ul></li> <li class="leaf menu-mlid-3136"><a href="/news" title="">News</a></li> <li class="last expanded menu-mlid-3921"><a href="/irb-resources" title="">Resources</a><ul class="menu"><li class="first leaf menu-mlid-4111"><a href="/bch-oakland-faqs">BCH Oakland FAQs</a></li> <li class="leaf menu-mlid-3931"><a href="/irb-covid-19-faqs-resources">COVID-19 FAQs</a></li> <li class="last leaf menu-mlid-3926"><a href="/guidance">Guidance A to Z</a></li> </ul></li> </ul></div> </div> </div> </div> </div> </div> <div id="breadcrumb" class="row-full-width"><div class="inside"><h2 class="element-invisible">You are here</h2><div class="breadcrumb"><a href="/">Home</a> > <a href="/our-services">Our Services</a> > <a href="/device-and-technology-guidance">Device and Technology Guidance</a> > <span class="breadcrumb-page-title">Mobile Medical Applications</span></div></div></div> <h1 class="title" id="page-title">Mobile Medical Apps & Other Digital Health Technologies</h1> <div class="content-top"> </div> <div id="main-wrapper"> <div id="main" class="clearfix"> <div id="content" class="column"> <div class="inside"> <a id="main-content"></a> <div class="tabs"></div> <div class="region region-content"> <div id="block-system-main" class="block block-system"> <div class="content"> <div id="node-1921" class="node node-page slider-secondary clearfix" about="/mobile-medical-apps-other-digital-health-technologies" typeof="sioc:Item foaf:Document"> <span property="dc:title" content="Mobile Medical Apps & Other Digital Health Technologies" class="rdf-meta element-hidden"></span><span property="sioc:num_replies" content="0" datatype="xsd:integer" class="rdf-meta element-hidden"></span> <div class="content"> <div class="field field-name-field-body field-type-text-long field-label-hidden"><div class="field-items"><div class="field-item even"><ul> <li><a href="#overview">Overview</a></li> <li><a href="#digitalhealth">Digital Health Technologies</a></li> <li><a href="#submission">IRB Submission and Reporting Requirements</a></li> <li><a href="#checklist">UCSF Device Checklist</a></li> <li><a href="#nih">NIH Funded Studies</a></li> <li><a href="#versa">Versa</a></li> <li><a href="#resources">Resources</a></li> </ul> <h1><a id="overview" name="overview"></a>Overview</h1> <p>Proposed research involving mobile medical applications (apps) may require additional regulatory determinations if the intended use of the app meets the <a href="https://www.fda.gov/medical-devices/classify-your-medical-device/how-determine-if-your-product-medical-device">FDA’s definition of a medical device</a>. The guidance below provides the following:</p> <ul> <li>FDA Regulatory background for these requirements.</li> <li>Steps to take before submitting your proposal for IRB review.</li> <li>Best practices for submitting your application for review.</li> </ul> <p>Per the FDA’s <a href="https://www.fda.gov/medical-devices/digital-health-center-excellence/device-software-functions-including-mobile-medical-applications">guidance</a>, and specifically per the FDA’s <a href="https://www.fda.gov/media/80958/download">Policy for Device Software Functions and Mobile Medical Applications (9/27/2019)</a>:</p> <p>A “mobile medical app” is a mobile app that incorporates device software functionality that meets the definition of device in section 201(h) of the FD&C Act11; and either is intended:</p> <ul> <li>to be used as an accessory to a regulated medical device; or</li> <li>to transform a mobile platform into a regulated medical device.</li> </ul> <p>The intended use of a mobile app determines whether it meets the definition of a “device.” As stated in 21 CFR 801.4,12, intended use may be shown by labeling claims, advertising materials, or oral or written statements by manufacturers or their representatives. When the intended use of a mobile app is for the diagnosis of disease or other conditions, or for the cure, mitigation, treatment, or prevention of disease, or is intended to affect the structure or any function of the body of man, the mobile app is a device under section 201(h) of the FD&C Act if it is not a software function excluded from the device definition by section 520(o) of the FD&C Act.</p> <p>FDA defines a medical device as "an instrument, apparatus, implement, machine, contrivance, implant, in vitro reagent, or other similar or related article, including a component part, or accessory which is</p> <ul> <li>Recognized in the official National Formulary, or the United States Pharmacopoeia, or any supplement to them,</li> <li><strong>Intended for use in the diagnosis of disease or other conditions, or in the cure, mitigation, treatment, or prevention of disease, in man or other animals, or</strong></li> <li>Intended to affect the structure or any function of the human body or other animals, and which does not achieve any of its primary intended purposes through chemical action within or on the human body or other animals and which is not dependent upon being metabolized for the achievement of any of its primary intended purposes.”</li> </ul> <p>Medical devices may include software applications that run on a desktop computer, laptop computer, remotely on a website or “cloud,” or on a handheld computer, and would be subject to these regulations.</p> <p>If the mobile app is intended to be used in the diagnosis of disease or other conditions, or in the cure, mitigation, treatment, or prevention of disease, it likely meets the definition of a mobile medical app.</p> <p>If you are unsure whether the app meets the definition of a Mobile Medical App, contact UCSF’s Regulatory Support Office at <a href="/cdn-cgi/l/email-protection#1c5a585d7f73726f6970686f5c697f6f7a32797869"><span class="__cf_email__" data-cfemail="70363431131f1e03051c040330051303165e151405">[email protected]</span></a> or submit a <a href="https://ucsf.co1.qualtrics.com/jfe/form/SV_a96z3s2MMpbxc3j?Q_JFE=qdg">Consultation Request Form</a> for a consultation with Regulatory Support.</p> <p>See “Appendix C. Examples of Software Functions that are the focus of FDA’s regulatory oversight (Device Software Functions and Mobile Medical Apps),” starting on page 24 of <a href="https://www.fda.gov/media/80958/download">Policy for Device Software Functions and Mobile Medical Applications</a>.</p> <p><a id="checklist" name="checklist"></a>Please review the <a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/device-checklist.pdf">UCSF Device Checklist</a> to determine what regulatory determinations your mobile health app needs.</p> <h2><a id="digitalhealth" name="digitalhealth"></a>Digital Health Technologies</h2> <p>The FDA defines <a href="https://www.fda.gov/science-research/focus-areas-regulatory-science-report/focus-area-digital-health-technologies">digital health technologies</a> (DHTs) as systems that use computing platforms, connectivity, software, and/or sensors for healthcare and related uses. These technologies span a wide range of uses, from applications in general wellness to applications as a medical device. They include technologies intended for use as a medical product, with, or as an adjunct to other medical products (devices, drugs, and biologics). They may also be used to develop or study medical products. Some DHTs may meet the definition of a medical device, while others do not.</p> <p>To understand whether FDA regulatory requirements apply to a <a href="https://www.fda.gov/medical-devices/digital-health-center-excellence/what-digital-health" title="What is Digital Health?">digital health</a> product, Investigators must understand whether the digital health or software product is a device. </p> <h4>Determining regulatory applicability:</h4> <p>If you are unsure whether the app or digital health technology must comply with FDA regulatory requirements, contact UCSF’s Regulatory Support Office at <a href="/cdn-cgi/l/email-protection#e5a3a1a4868a8b9690899196a590869683cb808190"><span class="__cf_email__" data-cfemail="195f5d587a76776a6c756d6a596c7a6a7f377c7d6c">[email protected]</span></a> or submit a <a href="https://ucsf.co1.qualtrics.com/jfe/form/SV_a96z3s2MMpbxc3j?Q_JFE=qdg">Consultation Request Form</a> for a consultation with Regulatory Support.</p> <p>See “Appendix C. Examples of Software Functions that are the focus of FDA’s regulatory oversight (Device Software Functions and Mobile Medical Apps),” starting on page 24 of <a href="https://www.fda.gov/media/80958/download">Policy for Device Software Functions and Mobile Medical Applications</a>.</p> <p>Please review the <a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/device-checklist.pdf">UCSF Device Checklist</a> to determine what regulatory determinations your mobile health app needs.</p> <h2><a id="submission" name="submission"></a>IRB Submission and Reporting Requirements</h2> <p><u><strong>Before you submit to the IRB:</strong></u></p> <p>For apps and DHTs that transmit or receive UCSF patient data, please submit the software to the ITS Data Security Group for approval prior to submitting your IRB application. Review the <a href="http://it.ucsf.edu/service/it-security-risk-assessment">instructions</a> to begin the ITS data security submission process</p> <p>Please take the following into consideration when submitting research involving mobile health apps and DHTs for IRB review:</p> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>Risk Assessment and Data Sharing Review</p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>A data security Risk Assessment and Data Sharing Review must be completed by UCSF IT and the Office of Sponsored Research, Industry Contracts Division if your study involves: the collection, transmission, or storage of information when that <strong>data will be</strong> <strong>shared with or be accessible to any non-UCSF entity or individual </strong>(including use of third-party or vendor-hosted applications). </p> <p>To initiate a security risk assessment, please contact the intake team at <a href="/cdn-cgi/l/email-protection#5b3f3a2f3a283e382e29322f221b2e38283d753e3f2e" target="_blank"><span class="__cf_email__" data-cfemail="1e7a7f6a7f6d7b7d6b6c776a675e6b7d6d78307b7a6b">[email protected]</span></a>. More information about the assessment process is available at <a href="https://it.ucsf.edu/service/it-security-risk-assessment" target="_blank">https://it.ucsf.edu/service/it-security-risk-assessment</a>. </p> <p>For Information Sharing Review: <a href="https://data.ucsf.edu/edrp" target="_blank">https://data.ucsf.edu/edrp</a> and <a href="https://icd.ucsf.edu/material-transfer-and-data-agreements" target="_blank">https://icd.ucsf.edu/material-transfer-and-data-agreements</a>.</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>IRB Study Application</p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>The IRB Study Application Form utilizes dynamic branching to include additional applicable sections and/or questions based on answers provided earlier in the form. Because of this, section numbers after Section 5.0, “Funding” will vary from study to study. The instructions below reference the section name only since that will not vary.</p> </div> </div> <div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>Research Plan and Procedures Section</p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <div>Common Research Activities question:</div> <ul> <li>Depending on the details of your project, check the box for “Use of mobile health apps or other apps and DHTs,” “Collection of data from wearable tech such as Fitbit, Apple Watch, Garmin, motion actigraphs, etc.)” or both.</li> </ul> <p>Procedures/Methods question:</p> <ul> <li>Provide the name of the app/DHT and indicate whether it is commercially available or being developed for the current study</li> <li>Identify the type of device(s) where the technology will be supported (iOS, Android, Windows mobile)</li> <li>Indicate how the participant is accessing the app or software. For example, are participants using their own device (<em>e.g.,</em> phone, tablet, computer) or does the study team provide it? If the study provides the device, explain what happens to the device when the study is complete.</li> <li>Provide detailed information about what the app does, how the participant interacts with the app, and the app’s role in the study</li> <li>Include the name and institutional affiliation of the software developer. (Note: If it is a non-UCSF developer, contact the Office of Research as a <a href="https://icd.ucsf.edu/">Data Use Agreement</a> or contract may be required)</li> <li>If applicable: If any of the results from the app are returned to participants, discuss:</li> </ul> <p>-What results will be returned?</p> <p>-What is the justification for sharing these results with participants?</p> <p>-When will results be returned?</p> <p>-Discuss what is being communicated to participants about the meaning and reliability of the information provided to them.</p> <ul> <li>If applicable: Discuss whether use of the app is mandatory or optional for all participants in the study, or if it is only applicable to various subject populations or secondary study aims apart from using/testing the application. If optional, state whether there are alternatives to using the app.</li> </ul> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>Drugs and Devices Section</p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>If your completed Device checklist meets the FDA definition of a medical device, please list the <strong>device in this section.</strong></p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>Confidentiality, Privacy, and Data Security Section</p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <div>Address risks associated with use of the app, including:</div> <ul> <li><strong>Potential Breaches in Confidentiality</strong> – Consider the implications for potential breaches of confidentiality, given the identifiability and sensitivity of the data</li> <li><strong>Address the risk of a 3rd party</strong> accessing and/or intercepting research and non-research data. A 3rd party includes makers of the research app, other installed apps and DHTs, other users of the device, and any other outside actors.</li> <li>Discuss how participating in the research may impact the participants <strong>Data Usage Plan</strong>. Will participants incur expenses if using their personal device?</li> <li>Discuss if there are any risks associated with the app not working as intended. Examples: If the app is designed to transmit important vitals or labs but does not function as intended, or if the app fails to accept participant input or transmit as intended. Describe what participants are expected to do and any risks associated with this type of system malfunction.</li> </ul> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>In the Minimizing Risks section</p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>Enter content.</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>In the Extra Confidentiality Measures section: </p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>If not already discussed in the minimizing risks section, please discuss other precautions and security controls used to maintain the confidentiality of identifiable information during collection, transmission and storage (encryption methods).</p> <p>If data are transmitted immediately, where are they being transmitted and what confidentiality protections are in place? If a participant withdraws their participation, what mechanisms are in place to protect or withdraw already collected data?</p> <p> </p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>Informed Consent Form:</p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <div>The consent form should provide enough details about the mobile app/digital health technology and potential risks to allow for an informed decision. This is especially important if the participant is asked to download an app to their personal device. The Informed Consent Form should reflect many of the elements of the application (Methods, Risks, Minimizing Risks, Costs, and how participant privacy and confidentiality will be maintained).</div> <p>Suggested information to add to the “What will happen” section:</p> <ul> <li>Discuss if participants will be loaned a device to download the app, or if they will need to download the app on their personal devices</li> <li>If participants will be loaned a device, discuss logistics for returning the device (if applicable) and what to do if the device is not working</li> <li>As indicated above, address whether participants should anticipate incurring data usage fees</li> <li>If results are being returned to participants, provide details on what information is being shared, when it will be shared, and with whom it will be shared</li> </ul> <p>If they are asked to sign a terms of use or privacy policy or end user license agreement, add a statement such as the following: “While using the app, information about you, including personal health information, location, and internet usage, will be collected and transmitted to the researchers and may also be shared with people outside of the research study. A complete description of this data collection and sharing is found in the Terms of Use. The Terms of Use provide instructions on how to request deletion of your personal data if you decide to do that in the future. While the Terms of Use may include statements limiting your rights if you are injured in this study, you do not release the investigator, sponsor, institution, or its agents from responsibility for negligence and these statements do not apply to the use of the app in this research study.” Note: Who the information will be shared with, and for what purposes, should be specified.</p> <p>Suggested language to add to the <strong>“What side effects or risks can I expect from being in the study?” section</strong>: “Although every reasonable effort has been made, confidentiality during internet communication procedures cannot be guaranteed and it is possible that additional information beyond that collected for research purposes may be captured and used by others not associated with this study.”</p> <p>Include instructions that should be followed when participants choose to withdraw their participation and data from the device/app. This should be added for when the study ends as well.</p> <p>Suggested language to add to the <strong>Risks</strong> section if there are potential data use expenses: “Participating in the research may impact your mobile device’s Data Usage Plan. You may incur expenses for which you are responsible.</p> <p>Other potential risks to consider:</p> <p>Indicate whether there is any anticipated risk of discomfort or risk of injury (i.e. Wristband causing skin irritation)</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>Other Study Documents:</p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <div>If participants are asked to agree to any end user license agreements, privacy policies or terms of use in order to download or access the app, please attach copies of those documents to your IRB application.</div> <p>If you are requesting an IDE exemption or NSR determination, please attach a completed copy of the device checklist.</p> </div> </div> <h2><a id="nih" name="nih"></a>NIH Funded Studies</h2> </div> <p>Recipients of NIH funds are reminded of their vital responsibility to protect sensitive and confidential data as part of proper stewardship of federally funded research, and take all reasonable and appropriate actions to prevent the inadvertent disclosure, release or loss of sensitive personal information. NIH advises that personally identifiable, sensitive, and confidential information about NIH-supported research or research participants not be housed on portable electronic devices. If portable electronic devices must be used, they should be encrypted to safeguard data and information. These devices include laptops, CDs, disc drives, flash drives, <em>etc.</em> Researchers and institutions also should limit access to personally identifiable information through proper access controls such as password protection and other means. Research data should be transmitted only when the security of the recipient’s systems is known and is satisfactory to the transmitter. Refer to the links below for more information.</p> <h2><a id="versa" name="versa"></a>Versa</h2> <p><a href="https://ai.ucsf.edu/platforms-tools-and-resources/versa-chat-and-api">UCSF Versa</a> – a UCSF IT-supported Artificial Intelligence (AI) ecosystem that connects AI tools with UCSF data and systems. </p> <p>For initial applications:</p> <ul type="disc"> <li>If the investigator expects to analyze data on the Versa platform, we’d like to know, but just so we have an idea of how widespread the use is. </li> <li>Not applicable to new aims</li> </ul> <p>Already Approved Protocols Now Using Versa Platform:</p> <ul> <li>There is no need to submit a modification if the study is approved to collect and analyze Electronic Health Record (EHR) or Personally Identifiable Information (PII) data and subsequently the investigator decides to leverage Versa for additional analyses.</li> </ul> <h1><a id="resources" name="resources"></a>Resources</h1> <h3>Regulatory Guidance and Policies</h3> <ul> <li>Federal Trade Commission: <a href="https://www.ftc.gov/tips-advice/business-center/guidance/mobile-health-apps-interactive-tool#what">Developing a Mobile Health App?</a></li> <li>US. Food and Drug Administration (FDA): <a href="https://www.fda.gov/medical-devices/digital-health-center-excellence/what-digital-health">What is Digital Health? </a></li> <li>U.S. Food and Drug Administration (FDA): <a href="https://www.fda.gov/medical-devices/digital-health-center-excellence/digital-health-criteria">Digital Health Criteria</a> </li> <li>U.S. Food and Drug Administration (FDA): <a href="https://www.fda.gov/medical-devices/digital-health-center-excellence/digital-health-frequently-asked-questions-faqs">Digital Health Frequently Asked Questions</a></li> <li>U.S. Food and Drug Administration (FDA): <a href="https://www.fda.gov/regulatory-information/search-fda-guidance-documents/digital-health-technologies-remote-data-acquisition-clinical-investigations">Digital Health Technologies for Remote Data Acquisition in Clinical Investigations</a></li> </ul> <h3>Resources on Design Considerations and Privacy Protections</h3> <ul> <li><a href="https://sagebionetworks.org/tools_resources/privacy-toolkit-for-mobile-health-research-studies/">Sage Bionetworks – Privacy Toolkit for Mobile Health Research Studies</a></li> <li><a href="https://eureka.ucsf.edu/">Eureka Research Platform - UCSF's Resource for Online, Mobile, and Hybrid Studies</a></li> </ul> </div></div></div> </div> </div> </div> </div> <div id="block-views-last-updated-block" class="block block-views"> <div class="content"> <div class="view view-last-updated view-id-last_updated view-display-id-block view-dom-id-dc0f2cc385e0d5247783b9ffe25cd37b"> <div class="view-content"> <div> <p class="updated-date"> <span>Last updated: </span> February 14, 2024 </p> </div> </div> </div> </div> </div> </div> </div> </div> <div id="sidebar" class="column"> <div class="sidebar"> <div class="section"> <div class="region region-sidebar"> <div id="block-block-16" class="block block-block"> <h3>Quicklinks </h3> <div class="content"> <p><a class="btn--large btn--more--reverse btn--full-width" href="https://ucsf.co1.qualtrics.com/jfe/form/SV_06qk41JwVXpOdMx"><font color="yellow">Questions? </font><font color="lightseagreen">Ask Andy</font> (<font color="lightseagreen">An</font>alyst of the <font color="lightseagreen">D</font>a<font color="lightseagreen">y</font>)</a></p> <p> </p> <p><a class="btn--large btn--more--reverse btn--full-width" href="https://iris.ucsf.edu/">Log into iRIS ↗️</a> </p> <p><a class="btn--large btn--more--reverse btn--full-width" href="https://iris-help.ucsf.edu/irb-iris">iRIS Help site</a></p> <p> </p> <p><a class="btn--large btn--more--reverse btn--full-width" href="/submissions">Submissions</a></p> <p> </p> <p><a class="btn--large btn--more--reverse btn--full-width" href="/sites/g/files/tkssra6501/f/where%20is%20my%20study_0.pdf"> check your study status</a></p> <p> </p> <p><a class="btn--large btn--more--reverse btn--full-width" href="/participating-research">Participating in UCSF Research</a></p> <p> </p> <p><a class="btn--large btn--blue btn--full-width" href="https://ucsf.co1.qualtrics.com/jfe/form/SV_3z3mGySSIA907k1?Q_JFE=qdg">iRb SATISFACTION SURVEY</a></p> </div> </div> <div id="block-block-26" class="block block-block"> <h3>Top Resources </h3> <div class="content"> <ul> <li><a href="/quick-guide-activities-requiring-irb-review" target="_blank">Activities Requiring IRB Review</a></li> <li><a href="/news">Bulletins</a></li> <li><a href="https://cancer.ucsf.edu/clinical-research/conducting-cancer-research">Cancer Research Activation Workflow</a></li> <li><a href="/citi-human-subjects-training">CITI Human Subjects Training </a></li> <li><a href="/consent-and-assent-form-templates">Consent Form Templates</a></li> <li><a href="/contact-us">Contact Us</a></li> <li><a href="/irb-covid-19-faqs-resources">COVID-19 FAQ's</a> </li> <li><a href="/guidance">Guidance A to Z</a></li> <li><a href="/hipaa">HIPAA Authorization Form </a></li> <li><a href="/irb-rosters-meeting-dates">IRB Rosters & Meeting Dates</a></li> <li><a href="/hrpp-job-opportunities">Job Opportunities</a></li> <li><a href="/participating-research">Participating in Research</a> </li> <li><a href="/sites/g/files/tkssra6501/f/post-approval-reporting-summary-sheet.pdf">Post-Approval Reporting Requirements</a></li> <li><a href="/reporting-research-concerns-and-complaints">Reporting Research Complaints</a></li> <li><a href="/submissions">Submit to the IRB</a></li> <li><a href="/when-ucsf-can-serve-irb-record" target="_blank">UCSF IRB of Record</a></li> <li><a href="/working-other-institutions">Working with Other Institutions</a></li> </ul> </div> </div> </div> </div> </div> </div> </div></div> <div id="footer"> <div class="section"> <div class="region region-footer"> <div id="block-block-21" class="block block-block"> <div class="content"> <div class="wysiwyg_twocols layout--50-50"> <div class="wysiwyg_twocols--first bg--transparent"> <p>Human Research Protection Program<br /> 490 Illinois Street, Floor 6<br /> San Francisco, CA 94143<br /> Phone: (415) 476-1814</p> <p>Fax: (415) 353-4418<br /> Email: <a href="/cdn-cgi/l/email-protection#5b1209191b2e38283d753e3f2e"><span class="__cf_email__" data-cfemail="4a0318080a3f29392c642f2e3f">[email protected]</span></a> </p> </div> <div class="wysiwyg_twocols--second bg--transparent"> <p style="text-align: right;"><a class="btn--small btn--more--white" href="https://ucsf.co1.qualtrics.com/jfe/form/SV_8k8x8jRnFhOJ6Xr">Website Feedback </a></p> </div> </div> <p> </p> </div> </div> </div> <div class="footer-bottom"> <nav aria-label="Footer Navigation" class="footer--navigation"> <ul> <li><a href="/contact-us">Contact Us</a></li> <li><a href="https://www.ucsf.edu/accessibility-resources">Accessibility</a></li> <li><a href="https://www.ucsf.edu/website-privacy-policy">Privacy Policy</a></li> <li><a href="https://websites.ucsf.edu/website-terms-use">Terms of Use </a></li> <li><a href="https://websites.ucsf.edu/azlist">A-Z Website List</a></li> </ul> </nav> <div class="footer--copyright"> <p>© 2024 The Regents of the University of California</p> </div> </div> </div> </div> </div> </div> <script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script type="text/javascript"> /*<![CDATA[*/ (function() { var sz = document.createElement('script'); sz.type = 'text/javascript'; sz.async = true; sz.src = '//siteimproveanalytics.com/js/siteanalyze_8343.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(sz, s); })(); /*]]>*/ </script> </body> </html>