If you’ve ever submitted an application for IRB review, you’ve perhaps crossed your fingers and hoped that your IRB holds an FWA.
“Do you have an FWA?” is one of the most common questions we get from researchers, nonprofit staff, and first-time applicants and it’s also one of the most commonly misunderstood parts of the human subjects research process.
The short answer is: an FWA isn’t something your IRB has, it’s something your institution has. The IRB is just one piece of it.
Let’s untangle what a Federalwide Assurance is, why it exists, who needs one, and how your organization and your IRB fit together under it.
What Is A Federalwide Assurance (FWA)?
A Federalwide Assurance is a formal, written agreement between an institution and the U.S. Department of Health and Human Services’ Office for Human Research Protections (OHRP). By filing an FWA, an institution commits — on paper, to the federal government — that it will comply with the Common Rule (45 CFR 46) whenever it conducts or supports nonexempt human subjects research funded by HHS or by any other federal agency that has adopted the Common Rule.
But the FWA is not a promise about a single study; it’s an institution-level promise. When your organization holds an FWA, it’s telling OHRP, “Whatever human subjects research we do under this funding, we’re going to do it ethically, and here’s the oversight structure we’re using to make sure that happens.”
That oversight structure is where the IRB comes in.
The IRB’s Role in an FWA + Why It’s Not the Same Thing
An FWA has to name at least one IRB that the institution relies on to review its research. That IRB has to be separately registered with OHRP; IRB registration and the FWA are two different filings that work together.
This is the distinction we walk our applicants through: the institution holds the assurance; the IRB provides the review. An IRB doesn’t “have” an FWA of its own the way an institution does. Instead, institutions name or “designate” a specific IRB (or several) on their FWA as the body that will conduct ethical review for their research.
If your organization works with an independent IRB like VIRB, that relationship gets documented as part of your FWA, whether through direct designation or a formal IRB Authorization Agreement.
In practical terms, that means your organization can hold its own FWA while relying entirely on an outside IRB for the actual protocol review. You don’t need to build an internal review board just because you need federal-level assurance. That’s the gap independent IRBs like VIRB were built to fill, and it’s a big part of why we believed in the advantages of using an independent IRB for risk management. Outsourcing review doesn’t mean outsourcing your compliance obligations, but it does mean you don’t have to build ethics review infrastructure from scratch.
Who Needs An FWA?
Not every organization doing research needs a Federalwide Assurance.
You generally need one if your institution:
- Conducts or supports nonexempt human subjects research that is funded — even partially! — by HHS or another federal agency that has adopted the Common Rule
- Receives federal funding (directly or as a subrecipient) for a project involving human subjects research that isn’t exempt
- Is required by a specific funder, grant mechanism, or federal contract to demonstrate this kind of institutional commitment
You typically do not need an FWA if your research is entirely privately funded, foundation-funded, or self-funded, and doesn’t involve federal money at all, though you may still need IRB review for ethical, publication, or internal policy reasons. Universities, hospitals, and large research institutions almost always hold one. Nonprofits, community-based organizations, and smaller evaluation shops often don’t … until the moment a federal grant requires it, and then it becomes a scramble.
The good news is, that scramble is avoidable. If your organization is pursuing federal funding, or even thinking about it down the road, it’s worth having the FWA conversation early, alongside decisions about your IRB application timeline and your broader research compliance infrastructure.
How to Get an FWA
Filing an FWA happens through OHRP’s Electronic Submission System (ESS).
At a high level, the process involves:
- Naming a Signatory Official — someone with the institutional authority to legally bind the organization to the assurance
- Naming a Human Protections Administrator (HPA) — the person responsible for the day-to-day human subjects protection program
- Designating at least one OHRP-registered IRB to conduct review for the research covered by the assurance
- Submitting the application electronically to OHRP for approval
Once approved, an FWA isn’t a “set it and forget it” document. It’s issued for a defined term — currently a five-year cycle — and it has to be updated within 90 days of certain triggering changes, like a change in your institution’s legal name, Signatory Official, or the IRB(s) you rely on.
It’s also worth knowing that OHRP updated the FWA form itself in March 2026, streamlining the assurance to align with the 2018 Common Rule requirements and reduce administrative burden on institutions.
One notable change: the form removed the long-standing option for U.S. institutions to voluntarily “check the box” and extend Common Rule protections to all of their nonexempt human subjects research, regardless of funding source. If your institution previously relied on that voluntary extension, it’s a good moment to review your internal human subjects research policy. That protection can still exist, but now it has to live in your institution’s own policy rather than in the FWA itself. If you’re renewing or filing for the first time, expect the current form to look a little different than it did a year ago.
Getting the FWA And IRB Relationship Right
The most common breakdown we see is in the handoff between an institution’s FWA and the IRB it names. Applicants assume the IRB carries the assurance; institutions assume the IRB will flag it if something’s missing; and in the gap, research moves forward without a clean paper trail connecting the two.
If your organization needs to sort out its FWA status, figure out which IRB to designate, or just needs a straightforward, affordable path to ethical review once that assurance is in place, we help organizations work through these things every day. You can start the conversation here or take a closer look at how VIRB works as your designated IRB.
An FWA and an IRB aren’t the same thing but they’re supposed to work together. Getting that relationship right, from the very first application, saves everyone the scramble later.