A Data Use Agreement (DUA, learn more) is a contract that governs the exchange of specific data between two parties. DUA’s establish who is permitted to use and receive a unique data set, along with the allowable uses and disclosures of the data by the recipient. A DUA also assigns appropriate responsibility to the researcher and recipient for using the data.
Common terms of a DUA provide that the recipient will:
- not use, disclose, or destroy the data set other than as permitted by the DUA, or as required by law;
- use appropriate administrative, technical, and physical safeguards to prevent unauthorized uses or disclosures of the data set, including specific data transfer/access/disposition instructions;
- report to the provider any uses or disclosures of the data set that are in violation of a DUA;
- ensure that anyone to whom it provides the data set agree to the same requirements that apply to the recipient for receiving or accessing the data; and
- not re-identify or contact the data subjects (for data related to a human subject).
Use the Data Use Agreement decision tree!
- DUA with government or non-profit entities are handled by the Office of Sponsored Research (OSR) Pre-Award Team. Submit a request by emailing osr_intake@stanford.edu the OSR Data Use Agreement Request form. Agreements for data associated with a sponsored project are handled by your OSR Contract & Grant Officer (In Dept of Pediatrics contact Allison Ramos and Sarah Makarchuk). Agreements not associated with a specific sponsored project are handled by your OSR Business Contract Officer (In Dept of Pediatrics contact Neil Morimoto).
- DUA with industry should be sent to the Industrial Contracts Office.
- DUA to purchase or store data are handled by the Procurement Office.
Additional guidance for Faculty on Data Agreements: Memo from Ann Arvin dated February 5, 2015.