Federalwide Assurance (FWA)

A Federalwide Assurance (FWA) is a written, time-limited agreement that a research institution files with the U.S. Department of Health and Human Services’ Office for Human Research Protections (OHRP), committing the institution itself — not any single study or investigator — to comply with the Common Rule (45 CFR 46) for the nonexempt human-subjects research it conducts or supports. Holding a current, active FWA number is a precondition for federal funding to flow to human-subjects research at that institution from HHS or from any other U.S. federal department or agency that has adopted the Common Rule and relies on OHRP’s assurance system. An FWA is filed and signed by an institutional official (the Signatory Official) and must name a Human Protections Administrator as the ongoing point of contact; OHRP assigns the institution a unique FWA number once the assurance is approved.

Who needs one

Any institution — a university, hospital, health system, independent research institute, or other organization — that is engaged in nonexempt human-subjects research conducted or supported by HHS, or by another federal department or agency that has adopted the Common Rule and uses OHRP’s FWA system, is generally required to hold one. “Engaged” is doing real work in that sentence: an institution can be engaged in a federally supported study — and so need an FWA — even when it is a subrecipient or collaborating site rather than the direct grantee, if its own staff obtain data or biospecimens through intervention or interaction with subjects, or obtain identifiable private information.

Before OHRP will approve a new FWA, the institution must first put an IRB of record in place — either its own internal IRB (already separately registered with OHRP) or an external IRB operated by another organization, under a written reliance agreement. An FWA cannot exist without at least one registered IRB designated under it; the FWA is the institutional promise, the IRB is the body that actually carries it out study by study.

A notable, and frequently misunderstood, historical feature of the FWA was a checkbox letting a U.S. institution voluntarily extend Common Rule protections to all of its nonexempt human-subjects research, not just the portion that happened to be federally funded — commonly discussed as the “unfunded research” extension. As part of a March 2026 OHRP revision to the FWA form (implementing burden-reducing provisions tied to the 2018 Common Rule requirements at 45 CFR 46.103), that voluntary extension option was removed from the FWA itself: an institution can no longer use its FWA to place its own unfunded human-subjects research under OHRP oversight. An institution may still choose, as a matter of internal policy, to apply Common-Rule-equivalent protections to research that has no federal funding or FDA nexus — but that choice now sits outside the FWA and outside OHRP’s regulatory oversight, rather than being part of what OHRP itself formally assures. Institutions and IRB offices that still describe the FWA as covering “all human-subjects research regardless of funding source” by default should confirm against their own current FWA filing, since that used to be an available option and, for institutions that checked it before the form changed, may still describe an assurance filed under the older terms.

Federalwide Assurance vs. IRB registration

These are related but distinct OHRP filings, and conflating them is a common source of confusion in research-compliance offices:

• The FWA is the institution’s own compliance commitment — a promise by the institution, as a legal entity, that it will follow the Common Rule for the human-subjects research it conducts or supports.
• IRB registration is a separate OHRP filing for the specific review board (or boards) doing the actual protocol-level review. Any IRB reviewing HHS-conducted-or-supported research, or research subject to FDA jurisdiction, must be registered with OHRP in its own right.

An FWA has to designate at least one already-registered IRB before OHRP will approve it, and a single FWA can designate multiple IRBs (an institution’s own internal board plus one or more external boards under reliance agreements). Conversely, one registered IRB can be designated under several different institutions’ FWAs at once — this is exactly the arrangement independent commercial IRBs and single-IRB (sIRB) reliance models depend on for multi-site studies. The FWA number and the IRB registration number are always separate identifiers, both issued by OHRP, and both are commonly requested together on federal grant applications, ethics-approval statements, and multi-site reliance agreements — but they answer different questions: the FWA answers “which institution promised to comply,” the IRB registration answers “which committee actually reviewed this.”

Filing, renewal, and updates

FWAs are not permanent once approved. OHRP requires an institution to renew its FWA on a periodic basis (currently five years) even when nothing about the institution has changed, and to update the FWA within 90 days of specific triggering changes — most notably a change to the institution’s legal name, its Signatory Official, or its Human Protections Administrator. New and renewal FWA submissions are filed electronically through OHRP’s online assurance system rather than on paper. An expired or lapsed FWA is an active compliance risk for a research office, not a paperwork formality: federal funding agencies and collaborating institutions routinely check FWA status before releasing funds or executing a reliance agreement, and a lapsed assurance can stall an active award.

References

• OHRP, Federalwide Assurances (FWAs) — hhs.gov/ohrp/register-irbs-and-obtain-fwas/fwas
• OHRP, Terms of the Federalwide Assurance for the Protection of Human Subjects — hhs.gov/ohrp/register-irbs-and-obtain-fwas/fwas/fwa-protection-of-human-subjecct
• Common Rule, 45 CFR 46.103 (assurance requirements) and Subpart A generally
• OHRP, Assurance Process FAQs — hhs.gov/ohrp/regulations-and-policy/guidance/faq/assurance-process