Imagine a researcher conducting a focus group with healthcare workers about workplace discrimination. Before the discussion begins, participants sign consent forms and receive assurances that their responses will be handled confidentially. During the session, one participant describes an incident involving a supervisor, while another shares an experience that could reveal their identity to colleagues. Although the researcher can protect recordings and remove names from transcripts, there is no guarantee that other participants will keep those conversations private. This creates an important ethical question: How can researchers protect confidentiality when several people hear the same information?
Focus groups are widely used to understand shared experiences, attitudes, and perspectives. Unlike individual interviews, they encourage participants to respond to one another, allowing researchers to examine how opinions develop through discussion. However, this interaction introduces privacy risks that researchers cannot fully control. According to Braun and Clarke (2022), qualitative research requires careful attention to the relationship between research methods, participant experiences, and the interpretation of collected information. In focus groups, that responsibility includes recognizing that sensitive information may be shared with people outside the research team.
Confidentiality is particularly important when discussions involve health conditions, professional experiences, family relationships, discrimination, or other personal matters. Participants may disclose information they would not ordinarily share with strangers, especially when conversations become emotionally engaging. Researchers must therefore distinguish between the confidentiality protections they can provide and the behavior of other group members, which they cannot guarantee. These considerations are important during Institutional Review Board (IRB) oversight, where investigators must demonstrate how foreseeable risks will be addressed. Whether a study is reviewed by an institutional committee or an independent IRB, researchers should establish realistic confidentiality procedures before recruitment begins.
Protecting participants requires more than obtaining signed consent forms or assigning identification numbers. Researchers must consider who participates in the discussion, what information may be disclosed, how recordings are handled, and what happens if confidentiality is breached. Effective IRB review can help investigators identify these risks and assess whether proposed safeguards are appropriate. Understanding the limits of confidentiality is therefore essential for conducting focus group research that respects participants and maintains trust throughout the research process.
I. Understanding Confidentiality Risks in Focus Group Research
Confidentiality in focus groups differs from confidentiality in individual interviews because information is shared within a group. Researchers can establish rules for collecting, storing, and reporting data, but they cannot fully control what participants remember or repeat after the discussion. This distinction affects how studies should be designed and how participants should be informed about potential risks.
Why Focus Groups Create Distinct Confidentiality Challenges
In an individual interview, the researcher usually controls access to the information collected during the conversation. In a focus group, several participants hear the same discussion, including personal stories, opinions, and potentially identifying details. Even when participants agree not to share information outside the session, the researcher cannot ensure that everyone will honor that agreement. This means confidentiality depends partly on individuals who are not members of the research team.
Under 45 C.F.R. § 46.116 (2026), informed consent should provide prospective participants with information about reasonably foreseeable risks and the extent to which confidentiality will be maintained. For focus group research, this includes explaining that other participants will hear what is said during the session. Researchers should avoid suggesting that confidentiality can be guaranteed when the study design does not allow that assurance. During IRB approval, investigators should describe these limitations and explain how participants will be informed before deciding whether to join.
Recognizing Risks of Identification Within the Group
Removing names from transcripts does not necessarily prevent participants from being identified. Someone may describe a workplace incident, medical condition, or family situation that other group members recognize. In a small professional community, even a general description of a participant’s role or experience may reveal who they are. Researchers should therefore consider whether the group composition increases the likelihood that participants will recognize one another or connect statements to specific individuals.
Braun and Clarke (2022) emphasize that qualitative researchers must consider how the research context shapes the information participants provide and how that information is interpreted. In focus groups, context includes participants’ existing relationships and shared knowledge. A discussion involving employees from the same organization may create different confidentiality concerns from one involving strangers recruited from several communities. An external IRB can assess whether the proposed recruitment strategy and group composition introduce avoidable privacy risks.
When Sensitive Topics Increase the Potential for Harm
Confidentiality risks become more significant when focus groups address experiences that could expose participants to social, professional, or personal consequences. Discussions about mental health, workplace misconduct, substance use, immigration experiences, or discrimination may involve information participants would prefer to keep private. If another group member repeats a disclosure, the participant could experience embarrassment, damaged relationships, or other adverse consequences. These risks may exist even when researchers never publish identifiable information.
The World Health Organization (2024) emphasizes the importance of protecting sensitive health information and considering privacy risks when health data are collected, used, and shared. Although its guidance addresses health information governance more broadly, the underlying concern is relevant to research discussions involving personal health experiences. Researchers seeking IRB services should be prepared to explain why a focus group is appropriate for a sensitive topic and whether individual interviews would offer stronger confidentiality protections. Investigators who need to find an IRB should consider whether the reviewing organization has experience evaluating qualitative studies involving sensitive disclosures.
II. Informed Consent and Confidentiality Responsibilities in Focus Groups
Informed consent is particularly important in focus group research because participants must understand the limits of the researcher’s control over shared information. Signing a consent form does not eliminate privacy risks or guarantee that participants understand what may happen during the discussion. Researchers should therefore treat consent as an ongoing communication process rather than a single administrative requirement.
Explaining Confidentiality Limits Before Participation
Participants should know that the research team will take reasonable steps to protect collected information but cannot guarantee that other group members will maintain confidentiality. This distinction should be stated clearly during recruitment and repeated before the discussion begins. Researchers should explain that participants may hear personal information from others and that their own comments may be remembered or repeated outside the session. Providing this information allows individuals to decide whether they are comfortable participating.
Under 45 C.F.R. § 46.116 (2026), informed consent must include information about reasonably foreseeable risks and, when appropriate, the extent to which confidentiality of identifiable records will be maintained. In focus group research, investigators should explain both the safeguards they control and the limitations created by group interaction. Consent materials should avoid broad promises such as assuring participants that everything discussed will remain confidential. Through IRB review, ethics committees can evaluate whether the proposed language accurately communicates the risks associated with participation.
Establishing Group Confidentiality Agreements
Researchers can ask participants to agree not to share information discussed during the focus group. Such agreements may encourage respectful behavior and reinforce the importance of protecting one another’s privacy. However, they should be presented as expectations rather than guarantees. A participant may still disclose information outside the group, and the researcher may have limited ability to prevent or remedy that disclosure.
A practical confidentiality agreement can ask participants not to repeat personal stories, identify other attendees, or share details that could reveal someone’s identity. The moderator should explain these expectations verbally and provide an opportunity for questions before recording begins. Researchers should clarify whether the agreement is a statement of group expectations or a legally enforceable arrangement, rather than implying that signing it creates absolute protection. Appropriate IRB training can help investigators understand how to communicate confidentiality expectations without overstating their effectiveness.
Supporting Voluntary Participation and the Right to Withdraw
Focus group participants may feel pressure to answer questions because other people are listening. Someone may hesitate to leave a discussion after sharing personal information or hearing sensitive disclosures from others. Researchers should explain that participants may decline individual questions, take a break, or leave the session without penalty. However, they must clarify that information already shared with other participants cannot be withdrawn from those individuals’ memories.
The U.S. Department of Health and Human Services (2024) requires informed consent to communicate that participation is voluntary and that individuals may discontinue participation without penalty or loss of benefits to which they are otherwise entitled. Researchers should explain how withdrawal affects information already recorded and whether previously collected contributions can be removed from the research dataset. In group discussions, removing one participant’s statements may not always be possible without affecting the surrounding conversation or other participants’ data. Appropriate IRB training for students can help emerging researchers understand these practical limitations and communicate them accurately during consent.
Addressing Consent for Audio and Video Recording
Recording can improve the accuracy of focus group analysis, but it introduces additional confidentiality concerns. Audio recordings may contain recognizable voices, while video recordings can reveal faces, physical characteristics, and other identifying details. Participants should understand whether recording is necessary, who will access the files, and how long recordings will be retained. Researchers should explain whether individuals who decline recording can still participate or whether an alternative arrangement is available.
General requirements for informed consent under 45 C.F.R. § 46.111 (2026) emphasize that informed consent information should be presented in language understandable to prospective participants. This principle is especially relevant when explaining recording procedures and the possibility that identifiable information may be captured. Researchers should avoid assuming that consent to participate automatically demonstrates understanding of every recording-related risk. A human subject review board may evaluate whether the consent process adequately distinguishes participation in the discussion from permission to create and retain identifiable recordings.
Preparing Moderators to Respond to Sensitive Disclosures
Moderators play an important role in protecting participants during focus group discussions. They should recognize when a conversation becomes overly personal, when participants pressure one another to disclose information, or when someone appears uncomfortable. A moderator may need to redirect the discussion, remind participants that answering is voluntary, or offer a break. These actions can reduce unnecessary exposure without preventing participants from contributing meaningful information.
Braun and Clarke (2022) highlight the importance of researcher judgment and reflexivity in qualitative inquiry. In focus groups, moderators must consider how their questions, responses, and management of group interactions influence what participants disclose. Appropriate human-subject research training can help moderators recognize ethical concerns and respond consistently with approved procedures. Researchers should establish a plan for handling disclosures that may trigger mandatory reporting obligations or indicate an immediate risk of harm, where applicable.
III. Practical Strategies for Protecting Focus Group Data and Participants
Confidentiality planning should extend beyond the consent process and the discussion itself. Researchers must protect information during recruitment, recording, transcription, analysis, reporting, and eventual disposal. Each stage creates different opportunities for unauthorized access or identification. A clear data protection plan helps investigators address these risks before information is collected.
Protecting Participant Privacy During Recruitment and Group Formation
Confidentiality concerns can begin before a focus group takes place. Recruitment emails, scheduling messages, and attendance lists may reveal that someone is participating in a study about a sensitive subject. For example, an invitation sent to a shared workplace email account could expose an employee’s interest in discussing discrimination or workplace harassment. Researchers should therefore consider how potential participants are contacted and whether recruitment procedures could unintentionally reveal personal information.
Researchers can reduce these risks by using private communication channels, limiting access to recruitment records, and avoiding unnecessary disclosure of participants’ identities. Group composition deserves attention because placing supervisors and employees in the same discussion may discourage honest participation or create professional risks. Investigators should consider whether separate groups would better protect participants and support open discussion. During IRB approval, reviewers may examine recruitment methods and group arrangements to determine whether they provide reasonable protections.
Managing Audio Recordings, Transcripts, and Identifiable Information
Focus group recordings often contain more identifying information than researchers initially recognize. Participants may mention names, workplaces, neighborhoods, medical conditions, or events that could reveal their identities. Even when names are replaced with participant codes, the combination of contextual details may make identification possible. Researchers should therefore consider both direct identifiers and information that could identify someone indirectly.
The World Health Organization (2024) highlights the importance of responsible health data governance, including appropriate safeguards for sensitive information. Researchers should store recordings in approved secure systems, restrict access to authorized personnel, and establish procedures for removing unnecessary identifiers from transcripts. Transcription services should be evaluated carefully because sharing recordings with outside providers introduces additional access and confidentiality considerations. Appropriate IRB services can support researchers in preparing data management procedures, while human-subject research training can strengthen staff awareness of confidentiality responsibilities.
Using Digital Tools and Automated Transcription Responsibly
Digital transcription tools can reduce the time required to prepare focus group data for analysis. However, uploading recordings to an external platform may transfer sensitive information to systems outside the research institution’s direct control. Researchers should determine whether the service stores recordings, uses uploaded information for other purposes, or permits access by additional parties. They should verify whether institutional policies allow the proposed platform to process identifiable research data.
The National Institute of Standards and Technology (2023) identifies privacy, data governance, and information security as important considerations when organizations use artificial intelligence systems. These concerns are relevant when researchers use automated transcription or analysis tools that process identifiable recordings. Investigators should avoid uploading sensitive focus group data to unapproved services simply because they are convenient. An external IRB may assess the proposed data handling procedures, but institutional privacy and information security personnel should evaluate whether the selected technology is appropriate.
Reporting Findings Without Revealing Participants’ Identities
Protecting confidentiality during publication requires more than removing participant names. Direct quotations can contain recognizable expressions, job descriptions, or descriptions of unusual events. A colleague or community member may identify the speaker even when the publication uses a pseudonym. Researchers should therefore assess whether quotations contain enough contextual information to reveal someone’s identity.
Braun and Clarke (2022) emphasize that qualitative analysis involves thoughtful interpretation and presentation of participants’ accounts. Researchers must decide how to preserve the meaning of a contribution while avoiding unnecessary exposure of personal information. In some cases, carefully removing identifying details or presenting a summarized account may offer stronger protection than publishing a verbatim quotation. A human subject review board may consider these reporting risks during protocol review, particularly when the study involves small communities or sensitive professional settings.
Managing Small Groups and Recognizable Communities
Confidentiality can be particularly difficult in studies involving small populations. A focus group with five senior employees from one organization may allow readers to identify participants based on their positions, experiences, or statements. Even broad demographic descriptions may become identifying when combined with other information. Researchers should consider whether reporting the group’s location, organizational affiliation, or participant characteristics is necessary to support the study’s findings.
The World Health Organization (2024) emphasizes that privacy protections should account for the risks associated with using and sharing health information. In qualitative research, these risks may depend on the size of the community and how easily readers can connect published details to identifiable individuals. Researchers should review quotations and descriptive information before dissemination and consider whether additional masking is necessary. Appropriate IRB review can help investigators anticipate these concerns, although responsibility for protecting confidentiality continues through publication.
Planning for Confidentiality Breaches and Data Retention
Even carefully designed studies can experience confidentiality problems. A participant may share information outside the group, a recording may be sent to the wrong recipient, or an unauthorized person may gain access to stored files. Researchers should establish procedures for identifying and responding to these incidents. The response should reflect the nature of the information involved, the potential consequences for participants, and applicable institutional reporting requirements.
A data management plan should explain how long recordings and transcripts will be retained and how they will be securely destroyed when retention is no longer required. Researchers should not assume that deleting a file from a personal device necessarily removes every stored copy, especially when cloud synchronization or shared systems are involved. The National Institute of Standards and Technology (2023) emphasizes the importance of managing risks throughout the lifecycle of information systems. Appropriate IRB training can help researchers understand reporting responsibilities, while IRB training for students can introduce early-career investigators to practical confidentiality safeguards before they begin collecting sensitive data.
Conclusion
Focus group research can provide valuable insights into experiences, attitudes, and decisions that may be difficult to understand through individual interviews alone. However, the same interaction that makes focus groups useful creates confidentiality risks that researchers cannot fully eliminate. Participants may recognize one another, remember sensitive disclosures, or share information after the discussion ends. Responsible researchers must therefore explain these limitations honestly while taking reasonable steps to protect information under their control.
Effective confidentiality planning begins before recruitment and continues through publication and data disposal. Researchers should establish clear consent procedures, consider group composition, prepare moderators to manage sensitive discussions, and protect recordings and transcripts throughout the research process. Appropriate human-subject research training can strengthen awareness of these responsibilities, while IRB training for students helps emerging researchers understand why confidentiality in group settings requires additional attention. When these safeguards are included from the beginning, participants can make more informed decisions about the information they choose to share.
For researchers preparing qualitative studies, BeyondBound IRB offers IRB services to support ethical research planning and participant protection. Whether investigators need assistance preparing for IRB review, guidance from an independent IRB, or clarification of IRB approval requirements, early consultation can help identify confidentiality concerns before data collection begins. Through IRB Heart, researchers can strengthen their understanding of ethical research practices and develop greater confidence in managing participant protections.
Confidentiality in focus group research cannot depend entirely on a signed agreement or a promise made at the beginning of a discussion. It requires careful study design, honest communication, secure data handling, and continued attention to the risks participants may face. By recognizing what they can control and clearly explaining what they cannot guarantee, researchers can conduct meaningful group discussions while respecting the privacy and dignity of everyone involved.
References
Braun, V., & Clarke, V. (2022). Thematic analysis: A practical guide. SAGE Publications.
Criteria for IRB approval of research, 45 C.F.R. § 46.111 (2026). https://www.ecfr.gov/current/title-45/section-46.111
General requirements for informed consent, 45 C.F.R. § 46.116 (2026). https://www.ecfr.gov/current/title-45/section-46.116
National Institute of Standards and Technology. (2023). Artificial intelligence risk management framework (AI RMF 1.0) (NIST AI 100-1). U.S. Department of Commerce. https://doi.org/10.6028/NIST.AI.100-1
U.S. Department of Health and Human Services, Office for Human Research Protections. (2024). Informed consent FAQs. https://www.hhs.gov/ohrp/regulations-and-policy/guidance/faq/informed-consent/index.html
World Health Organization. (2024). WHO data principles. https://data.who.int/about/data/who-data-principles