The Commission shall appoint the IRB. The IRB shall consist of at least nine members of which: Each member shall have expertise in health services research and information security; and At least one member's primary expertise is ethics. The IRB shall be sufficiently qualified through the experience and diversity of its members, including consideration of race, gender, and cultural backgrounds, and sensitivity to such issues as community attitudes to promote respect for its advice and counsel. Commission members and Commission staff may not serve on the IRB. Commission staff may provide staff support to the IRB. The Commission shall solicit recommendations for appointment to the IRB from organizations and institutions whose mission is related to IRB matters, as the Commission considers appropriate. Members shall serve on a volunteer basis for a term not to exceed 3 years. A member may be reappointed. The Commission may remove a member for: Misconduct; or Dereliction of duty.