A researcher who reports fabricated data gets a reasonably well-defined answer about what protects them: 42 CFR Part 93 requires the institution to take "reasonable and practical steps" to shield a good-faith complainant from retaliation, and the Office of Research Integrity (ORI) has oversight if the institution fails at that. A researcher who reports that their PI added an uninvolved co-author, demoted a contributor who refused to inflate a co-author’s role, or pressured a graduate student into ghostwriting a section without credit is in genuinely murkier territory — because coercive, honorary, and ghost authorship usually are not “research misconduct” in the regulatory sense at all. This guide maps out what protection actually applies, and where, when the underlying report is about authorship rather than fabricated data.
The threshold question: is this FFP, or isn’t it?
42 CFR Part 93 — the U.S. Public Health Service’s research-misconduct regulation, which most U.S. research institutions’ misconduct policies are built around whether or not they receive PHS funding — defines research misconduct narrowly as fabrication, falsification, or plagiarism (FFP) in proposing, performing, reviewing, or reporting research, or in reporting research results (42 CFR § 93.103, § 93.211, § 93.212, § 93.227). The regulation says explicitly that it does not include honest error or legitimate differences of opinion, and long-standing ORI guidance is that authorship and credit disputes, on their own, sit outside that definition. Adding a department chair as an author who did not meet ICMJE or CRediT contribution criteria is a serious integrity problem — but it is not, by itself, fabrication, falsification, or plagiarism of research data or results. Neither is demoting or dropping a contributor’s name to avoid sharing credit, nor ghostwriting a paper for an author who did not disclose the writer’s involvement.
That distinction is not a technicality. It determines which whistleblower-protection framework, if any, formally applies to the person reporting it. CASRAI covers the FFP-specific track in detail in Research Misconduct Whistleblower Protections: What Retaliation Looks Like and How ORI Investigates It — that guide’s 42 CFR § 93.300(d) protection (institutions must take "reasonable and practical steps" to protect the positions and reputations of good-faith complainants, witnesses, and committee members from retaliation) applies squarely when the underlying allegation is FFP. It does not automatically extend to a report that is purely about who is or isn’t listed as an author, because that report, standing alone, isn’t a research-misconduct allegation under the regulation’s own definition.
There is an important exception worth flagging precisely because it’s easy to miss: authorship problems and FFP are not mutually exclusive. If a coerced or fabricated authorship claim also involves misrepresenting who actually generated or verified data (for example, a coerced "author" is credited specifically to obscure that no qualified person actually reviewed or produced the results, or a fabricated contribution statement is submitted to a funder or journal as if it were a factual research record), the falsification piece can bring the whole matter inside 42 CFR Part 93 — and inside its whistleblower protection — even though the authorship dispute alone would not. Whether a specific case clears that bar is a judgment call for the institution’s Research Integrity Officer (RIO), not something a complainant can assume either way going in.
Where reporting authorship misconduct or coercion actually goes, when it isn’t FFP
If the underlying conduct doesn’t independently meet the FFP threshold, a report of coercive, honorary, or ghost authorship typically routes through one or more of the following instead of a 42 CFR Part 93 misconduct proceeding:
- The institution’s own authorship policy and dispute-resolution process. Most research institutions maintain an authorship policy separate from their research-misconduct policy, with its own escalation ladder — informal discussion, department-level mediation, then a formal committee review. See CASRAI’s How Authorship Disputes Get Resolved: The Institutional Process for how that ladder typically works, and Formal Mediation for Authorship Disputes for the mediated-resolution track specifically. Neither process is a misconduct investigation, and neither carries the 42 CFR § 93.300(d) retaliation-protection obligation by default — though a well-designed institutional policy may extend comparable non-retaliation language to authorship-committee proceedings voluntarily. Check the specific policy rather than assuming.
- General institutional whistleblower or non-retaliation policy. Most universities maintain a whistleblower policy that is broader than research-misconduct regulation — typically covering good-faith reports of any violation of law, regulation, or institutional policy, not just FFP. Authorship coercion, if it violates the institution’s own authorship or academic-integrity policy, can usually be reported under this broader umbrella even where it falls outside 42 CFR Part 93. The protection here comes from institutional policy and, in many cases, from state whistleblower or public-employee protection statutes (which vary significantly by state and by whether the institution is public or private), not from the federal research-misconduct regulation.
- HR, Title IX, or an ombuds office, when the coercion has a power-imbalance or harassment dimension. Coercive authorship is fundamentally an abuse of evaluative power — a supervisor, PI, or thesis committee member using control over a junior researcher’s career (reference letters, thesis approval, funding, lab access, contract renewal) to compel an authorship outcome the junior researcher would not otherwise agree to. Where that pattern overlaps with broader abusive supervision, retaliation for declining, or (in some cases) discrimination or harassment tied to a protected characteristic, it may also be reportable through HR, a Title IX office, or a research-integrity ombudsperson — channels with their own confidentiality and anti-retaliation protections independent of the research-misconduct process. CASRAI’s Student-Advisor Authorship Disputes: Navigating Power Imbalance in Co-Authored Work covers the underlying power dynamic in more depth.
- The journal or publisher, after publication. If the coerced or honorary authorship already made it into a published paper, a report can also go to the journal, which handles it as an authorship-correction matter under COPE guidance rather than as an institutional whistleblower case — a separate track with its own confidentiality norms and its own limits (a journal can correct or retract the record; it generally cannot investigate or discipline the individuals involved, and it does not offer the reporter employment-retaliation protection, since that’s outside its authority).
The practical upshot: a person reporting authorship coercion should expect to be told, correctly, that the matter is being handled outside the formal misconduct-investigation track — and should not read that as the institution declining to take it seriously. It’s a routing decision driven by how narrowly 42 CFR Part 93 defines misconduct, not a judgment about the underlying conduct’s severity.
What protection actually looks like on the non-FFP tracks
Because these reports typically don’t carry the specific 42 CFR § 93.300(d) obligation, the practical protections a complainant can expect vary more than they do on the FFP track, and are worth checking case by case rather than assuming:
- Confidentiality is policy-dependent, not regulation-guaranteed. Institutional authorship-dispute and whistleblower policies commonly commit to limiting disclosure of the reporter’s identity to those who need it to investigate, but this is a matter of the specific policy’s text, not a federal floor the way 42 CFR § 93.108 functions for misconduct cases.
- Retaliation protection generally still exists, but through a different instrument. A general institutional non-retaliation or whistleblower policy, a state whistleblower statute (for public employees especially), or — where the coercion also implicates federal grant integrity, such as a funder application misrepresenting who did the work — the False Claims Act’s anti-retaliation provision (31 U.S.C. § 3730(h)) can all apply depending on the facts. None of these is automatic; each has its own trigger conditions.
- An anonymous report is usually possible but comes with a real trade-off. Most institutional whistleblower hotlines and many authorship-dispute intake processes accept anonymous reports. An anonymous authorship complaint is harder for a review committee to substantiate, however, since evidence of who contributed what, and of the coercion itself, often depends on records or testimony only the reporter can supply. A reporter weighing anonymity against the report’s practical chance of resulting in a correction should factor that trade-off in, not just the retaliation risk.
- Escalating to a funder or federal agency rarely applies here the way it does for FFP. ORI’s jurisdiction is FFP in PHS-supported research; a purely authorship-credit complaint that never rises to falsification generally isn’t something ORI will open a case on. Where a federal funder is involved and the misrepresentation touches the funding record itself (for example, a fabricated contributor role reported to justify a budget or personnel line), the funder’s own research-integrity or grants-compliance office, or an Office of Inspector General, becomes the more relevant escalation point — but that’s a narrower fact pattern than authorship coercion alone.
A related but legally separate track: export-control and other statutory whistleblowing
It’s worth being precise about scope here, because CASRAI covers several whistleblower tracks that are easy to conflate. Reporting an authorship-integrity problem is not the same legal animal as reporting, say, an unlicensed export of controlled technical data or a falsified end-user certification — see Whistleblower Protections for Reporting Export Control (EAR/ITAR) Violations in Research for that entirely separate statutory framework (41 U.S.C. § 4712, the False Claims Act, and related statutes). The two only intersect when a single set of facts happens to implicate both tracks at once — they are otherwise adjudicated through completely different channels, with different agencies and different remedies.
Practical steps for someone considering a report
- Identify which policy actually governs the conduct before reporting. Read the institution’s authorship policy and its research-misconduct policy side by side. If the concern is purely about who is credited, and there’s no accompanying fabrication or falsification of data or contribution records, expect the authorship-dispute or general whistleblower track, not a 42 CFR Part 93 investigation.
- Document contemporaneously. Emails, drafts showing who wrote what, meeting notes, and any explicit or implicit statement tying authorship to a career consequence (a reference letter, a renewal, thesis sign-off) are the kind of evidence that makes a coercive-authorship claim reviewable, regardless of which track it’s reported through.
- Ask about confidentiality and anti-retaliation coverage explicitly, before reporting, rather than assuming it matches the FFP track. Since the protection isn’t automatically the 42 CFR § 93.300(d) standard, it’s reasonable to ask the intake office (ombuds, HR, research-integrity office, or whistleblower hotline) directly what protection applies to this specific type of report at this specific institution.
- Consider an ombudsperson or informal consultation first if the institution has one. An ombuds office typically operates outside the formal reporting chain and can help a prospective complainant understand which track fits the facts, and what to expect, before a formal report locks in a specific process.
- If the case also involves federal funding misrepresentation, get institutional compliance or legal counsel involved early. The False Claims Act’s anti-retaliation and qui tam provisions are powerful but procedurally specific, and are easy to compromise by acting on them incorrectly or too late.
Frequently asked questions
Does 42 CFR Part 93 protect someone who reports honorary or ghost authorship?
Not automatically. 42 CFR Part 93’s protection is tied to reporting fabrication, falsification, or plagiarism. Honorary authorship (crediting someone who didn’t meet contribution criteria) and ghost authorship (omitting someone who did the writing without disclosure) are authorship-integrity problems, but they are not, on their own, FFP under the regulation’s definition — so the specific 42 CFR § 93.300(d) protection generally does not apply unless the facts also involve falsifying the underlying research record.
Is coercive authorship the same thing as research misconduct?
Not under the federal FFP definition, though it is a serious violation of most institutions’ own authorship and research-integrity policies, and of ICMJE authorship guidance. See CASRAI’s Coercive Authorship definition for how the mechanism differs from gift and ghost authorship. Some institutions choose to define their own misconduct policies more broadly than 42 CFR Part 93 requires and may formally treat severe or repeated coercive authorship as an integrity violation with its own investigation process — check the specific institutional policy rather than assuming the federal definition is the only one in play.
Can a graduate student report their advisor for authorship coercion anonymously?
Usually, through the institution’s general whistleblower hotline or ombuds office, yes — but anonymity limits how far an investigation can go, since evidence of the coercion and of actual contributions often has to come from the reporter. A student weighing this should also consider that many institutions have non-retaliation policies specifically protecting students in supervisory relationships, separate from and often broader than the research-misconduct-specific protection.
What if the coerced authorship already appears in a published paper?
The institutional and journal tracks aren’t mutually exclusive. A report can go to the institution (for the underlying conduct and any retaliation risk) and, separately, to the journal (to correct the published author list) via COPE-aligned authorship-correction procedures. The journal process addresses the public record; it doesn’t provide the reporter employment protection, which is why the institutional report generally still matters even after a correction is filed.
Does the False Claims Act ever apply to an authorship-coercion report?
Only in a narrower fact pattern than authorship coercion by itself — specifically where a misrepresented contributor role or fabricated authorship record was submitted to, or relied on by, a federal funder in a way that implicates the funding relationship itself (for example, misrepresenting who actually performed funded work). Plain authorship-credit disputes without that federal-funding misrepresentation element don’t trigger FCA anti-retaliation coverage.
