This paper summarizes the rules and regulations under which educational researchers are expected to operate. The role of the Institutional Review Board (IRB) in ensuring protection of research participants from unethical procedures or investigators is discussed, as is the general exemption of specific types of educational research from the IRB review process. Among the issues discussed are maintenance of subject anonymity and/or confidentiality in the light of data processing capabilities of current technology; implications of the proposed Grassley Amendment requiring parental consent for seven types of research, and the Family Privacy Protection Act of 1995. Responses of the IRB at Illinois State University (ISU) to these issues is reviewed, noting development of a set of procedures. Specific issues addressed by the ISU Board include: what it means to be "exempt"; distinguishing between teaching and research when research is conducted in conjunction with a class; the use of audio and video technologies; and the impact of new legislative restrictions. (DB)