Is IRB oversight necessary?

Yes.