Which is why their compliance process wasn’t rigorous enough.
As others have said, requiring evidence of University IRB review (which it doesn’t sound like they did) would have been a way to require more safeguards. Yes, bad actors could and maybe would have still abused the system, it makes their work harder and more visible.
As others have said, requiring evidence of University IRB review (which it doesn’t sound like they did) would have been a way to require more safeguards. Yes, bad actors could and maybe would have still abused the system, it makes their work harder and more visible.