Darren’s comment illustrates some of the “localness” of the IRB process. He was asked to investigate the social media outlet policies but, I am assuming, was not asked to do the same with security polices of online survey tools. This is common…IRBs, like all regulatory activities, are reactive. If you run into walls with your research approval you need to teach the IRB about your research and how your research should be administered. Statements like the AoIR Ethics policy help as does making connections with other academics who have give good advise. Find out your local rules and then move it forward…remember you have to talk their talk…they won’t talk yours.