It's quoted in another comment but 42 USC 289(a) requires the establishment of an IRB in any institution applying for federal grants, among other things. So it is a law that there exist some sort of IRB for any "biomedical or behavioral research" and my guess is most institutions see 99% of their research falling under behavioral.