Aresearcher wants to do a web-based survey of college students to collect information about their sexual behavior and drug use. direct identifiers will not be collected; however, ip addresses may be present in the data set. risk of harm should be evaluated by:

Severity of harm & Probability of harm

Explanation:

While evaluating the risk of harm in research, two deciding factors are:

1. Magnitude of harm (how severe is the harm)

2. Probability of harm (what are the chances of happening)

Therefore, in this case, it must be analyzed how much harm it can produce for the individual if his information gets leaked along with the chances of occurrence of this event.