Glossary

Research Operations (ResearchOps)

Research operations is the work of organising people, processes and tools around research, from recruiting and consent to data storage.

By Jitendra Kumar Nirala, Founder · Updated 24 Oct 2026

Also called ResearchOps

On this page
  1. 01Definition
  2. 02Quick facts
  3. 03Introduction
  4. 04What does research operations (ResearchOps) mean?
  5. 05What is research operations often confused with?
  6. 06Which participant tasks should a ResearchOps team keep, and which can a recruitment partner run?
  7. 07What does the DPDP Act change for recruiting, consent and paying participants?
  8. 08Where do teams go wrong when they buy participant recruitment?
  9. 09How Qualfacto handles it
  10. 10Example
  11. 11Related terms
  12. 12Frequently asked

What is research operations (ResearchOps)?

Research operations (ResearchOps) is the set of roles, tools and processes that set research in motion, so researchers can concentrate on the research itself.

Key takeaways

  • Recruiting, screening, scheduling and paying participants are the tasks easiest to hand to a partner. Audience definition, consent wording, data terms and incentive amounts stay with you.
  • Under the DPDP Rules 2025, notice and security duties start eighteen months after publication, in 2027 unless the period is shortened, which has been proposed but not notified as of October 2026. Build your consent text and partner contracts before then.
  • Costs depend on method, audience, city and recruitment difficulty. Ask any provider to split its quote into recruiting, screening, replacements and incentives, because per-session fees usually exclude incentives.

Quick facts

Also known as
ResearchOps
Six focus areas (NN/g)
Participants, governance, knowledge, tools, competency and advocacy
Focus areas where India differs
Participants and governance
Indian law that applies
Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025
When notice and security duties start
Eighteen months after the Rules' 13 November 2025 notification, in 2027 unless shortened

Introduction

Research operations covers the work around participants, and in India that work is regulated by the Digital Personal Data Protection Act, 2023 (DPDP Act). Standard ResearchOps frameworks, such as the six focus areas in the Nielsen Norman Group (NN/g) study guide, do not cover Indian data law.

That matters because the part of research operations that touches real people (recruiting, screening, consent and payment) is the part the DPDP Act and its 2025 Rules regulate. They set dated duties for anyone who collects participants' personal data.

This entry defines the term, separates it from the look-alikes that clutter the search results, and gives a table showing which participant tasks stay with your team and which a recruitment partner can run, with a test for whether each is done.

What does research operations (ResearchOps) mean?

Research operations, shortened to ResearchOps, is the roles, tools and processes that set research in motion, so researchers can concentrate on the research itself. NN/g defines it as "the orchestration and optimization of people, processes, and craft in order to amplify the value and impact of research at scale."

NN/g splits the work into six focus areas:

  • participants (recruiting, screening, scheduling and compensating);
  • governance (consent, privacy and information storage);
  • knowledge;
  • tools;
  • competency;
  • advocacy.

This entry takes the first two, participants and governance, because that is where India differs.

What is research operations often confused with?

Research operations is confused with operations research, with the researcher's own job, and with DesignOps. Operations research is a separate field of mathematical decision-making. Clinical research operations is another separate discipline, run in trials and hospitals. Neither has anything to do with running participant studies.

A ResearchOps specialist manages the surrounding work so that researchers can focus on conducting studies. The researcher still designs the study and runs the sessions. DesignOps is the sibling discipline for design teams.

Related terms you will meet in this work are the research panel, the research screener and informed consent.

Which participant tasks should a ResearchOps team keep, and which can a recruitment partner run?

Keep the decisions and hand over the legwork. Your team should own the audience, the consent wording, the data terms and the incentive amount. A recruitment partner can source, screen, identity-check, schedule and pay participants against those decisions. The table gives each task, who owns it, and a test for whether it is done.

Decisions you keep, legwork you hand overA two-column diagram showing four decisions a research team keeps and five tasks a recruitment partner can run against them.

For a full recruitment sequence, see how to recruit participants for a study in India. For incentive amounts, see what to pay focus group participants.

Task
Audience and quotas
Who owns it
Your team
Pass test
A stranger could screen against it: behaviour, city, language and exclusions are each written down. Fail if it says only "urban millennials".
Task
Screener
Who owns it
Your team writes, partner runs
Pass test
You can see why each person was screened out. Fail if you only get a final list.
Task
Sourcing and identity check
Who owns it
Partner
Pass test
Every invited person was identity-checked before the invitation.
Task
Scheduling and backups
Who owns it
Partner
Pass test
Each hard quota cell (a group you must fill, such as four people in one city) has a named floater (an extra recruited participant who steps in if someone drops out), as NN/g recommends.
Task
Consent notice
Who owns it
Your team or legal writes, partner delivers
Pass test
The notice itemises the data collected, states the purpose, and says how to withdraw and complain.
Task
Data handover
Who owns it
Your team
Pass test
Every recipient of recordings and contact details is named, with a retention period.
Task
Incentive
Who owns it
Your team sets, partner pays
Pass test
Amount, method and timing are shown to the participant before they commit.
Task
Deletion
Who owns it
Your team sets policy
Pass test
The partner states in writing who deletes, how, and how it is confirmed.
Task
Repository, tools, training
Who owns it
Your team
Pass test
Fail if recordings and notes sit in personal drives; pass if one named person owns a shared, access-controlled repository.

What does the DPDP Act change for recruiting, consent and paying participants?

Most DPDP duties start eighteen months after the Rules were published, on a notification dated 13 November 2025, which is 13 May 2027 by the usual count. Check the Gazette before you rely on May 2027. Rules 3 and 5 to 16 are among those waiting for that date, according to Rule 1(4) of the Gazette notification.

Four rules matter most for participant operations:

  • Rule 3, notice. The notice must stand alone, in clear and plain language. It must itemise the personal data, state the purpose, and give a link and other means to withdraw consent "with the ease of doing so being comparable to that with which such consent was given", to exercise rights and to complain to the Data Protection Board.
  • Rule 6, security. Safeguards include encryption, obfuscation (scrambling data so it cannot be read directly), masking or virtual tokens, access control, logs and monitoring, and backups. Where a processor (a company that handles data on your behalf) is involved, the contract must carry security terms.
  • Rule 8(3), retention. Personal data, traffic data (records of when and how the data was handled) and logs must be kept for at least one year for the Seventh Schedule purposes, such as enabling the Government to call for information in specified circumstances. This may cut across a promise to delete data after the study, so check the wording with counsel. This is general information, not legal advice.
  • Rule 16 and section 17(2)(b), research exemption. The Act does not apply to research processing that follows the standards listed in the Second Schedule (such as limiting data to what is necessary and keeping it only until the purpose is met) and where the data is not used to take any decision specific to the individual participant, as set out in section 17(2)(b) of the Act and Rule 16 of the Gazette notification. Do not assume a commercial study qualifies. Get legal advice first.

See the informed consent guide for a consent form. The Ministry of Electronics and Information Technology (MeitY) publishes the data protection page.

Where do teams go wrong when they buy participant recruitment?

Teams compare the recruiting fee and forget the study cost. A per-session fee usually excludes incentives, replacements and fieldwork, so a low headline fee tells you little.

Costs depend on method, audience, participant profile, sample size, geography and recruitment complexity. Ask any provider to split its quote into recruiting, screening, replacements and incentives. The recruitment budget worksheet shows the lines.

How Qualfacto handles it

Qualfacto provides recruitment services. It runs the recruitment and participant coordination for a study while the client keeps the decisions in the table above. It recruits by city, supplies moderators, runs sessions in languages other than English, checks participant identity before invitation, and targets by household and demographic profile.

Clients send a research brief covering objective, method, audience, geography, sample size and timelines. Qualfacto assesses feasibility and returns a tailored proposal, and prices each project by proposal with no fixed rate card, because the price depends on method, audience, sample, geography and recruitment difficulty. Its approach to consent and privacy is guided by Market Research Society of India (MRSI) and ESOMAR (the global market research association) principles. It processes incentives after participation is completed and validated.

A free pilot is available. Email the brief to support@qualfacto.io, Monday to Friday, 10:00 to 18:00 Indian Standard Time (IST); the aim is to reply within one business day. If you are choosing a partner, see how to choose a qualitative research agency.

Example

A study with a hard quota of four people in one city recruits a fifth as a named floater, so a drop-out does not leave the cell empty. Each invited person is identity-checked first, and the consent notice itemises the data collected and states whether recording, client viewing and future contact are agreed separately. Incentive amount, method and timing are shown before anyone commits.

Frequently asked

Research operations supports research teams with recruiting, consent, tools and knowledge storage. Operations research is a mathematical field for optimising decisions. They share two words and little else, so check which one a job title or article means before you read further.
Not always. NN/g describes research managers, senior researchers or dedicated specialists doing this work. A sensible start is to give one named person the participant focus area, and to hire for it only when scheduling, consent and payments are slowing studies down.
Yes, ask for it and ask for it separately from the main agreement. When the DPDP notice rule starts, the notice must itemise the data and state its purpose. Recording, client viewing and future contact are best ticked separately, with a note of who sees the files.
A partner can collect consent and pay incentives, but you set the terms. Give the partner the notice text, the amount, the method and the timing. Put security and deletion duties in the contract, since Rule 6 requires security terms where a processor handles data.

Sources

  1. 1.ResearchOps 101, NN/g, Nielsen Norman Group, 16 August 2020
  2. 2.ResearchOps study guide on participant management and governance, NN/g, Nielsen Norman Group, published 9 January 2022, reviewed 27 August 2024
  3. 3.About ResearchOps, ResearchOps Community, ResearchOps Community
  4. 4.Digital Personal Data Protection Rules, 2025, Gazette of India notification G.S.R. 846(E) (PIB copy), Government of India, 13 November 2025
  5. 5.The Digital Personal Data Protection Act, 2023, Ministry of Electronics and Information Technology
  6. 6.Data protection, Ministry of Electronics and Information Technology

Questions about research operations?

Email your research brief to the team and ask how participant recruitment for your study in India would work.
Talk to our team