Uw Data Use Agreement

Is the data for an active or pending sponsored project? In certain circumstances, it is necessary to share records containing personal data. The appropriate DTUA depends on whether your registration is covered by HIPAA or is only covered by the Common Rule. Once an LDS has been created and a HIPAA-compliant DTUA is available, the LDS can be shared in accordance with the DTUA. For more information, see the UW-Madison Directive on Creating a Limited Dataset. You can find a copy of the agreement to use here: DTUA – HIPAA Limited Data Set. Please read both Starting Point to Applying for dbGaP Data and dbGaP Individual Level Individual Data Access Request Procedures for the detailed instructions provided by NCBI to request access to data. For HIPAA purposes, your dataset contains personal data covered by HIPAA if one or more of the eighteen HIPAAA identifiers, direct or indirect, remain in the dataset. These identifiers are as follows: there are generally three types of data that can be shared by the UAB and other institutions. Notwithstanding the Directive on Data Management, Access and Retention, there are cases where federal law absolutely requires an agreement, for example.

B in the case of protected health information (PHI). At the time the university shares PHI, the Federal Health Insurance Portability and Accountability Act (PPTE) requires us to comply with certain requirements when transmitting such data, including an agreement that imposes certain obligations before the data is transmitted. Failure to comply with the HIPC may result in sanctions for the university and its staff. This type of agreement is used in situations where protected health information (PHI) is exchanged after certain identifiers are removed in order to create a limited data set (often simply referred to as “LDS”). According to HIPAA, PHI, which does not contain the following 16 identifiers, includes a limited set of data that can be shared under an agreement that meets specific requirements under the HIPC: if the provider of the dataset is a healthcare provider or health insurance and the recipient of the dataset is a non-profit or academic organization, then the DTUA is used for personally identifiable information – HIPAA MODEL. This type of agreement is used in situations where the data to be shared does not include a limited set of data under the HIPC or anonymized data of human persons. You can find a copy of the agreement to use here: DTUA – General. If researchers wish to share their datasets with for-profit organizations, it is likely that additional conditions will need to be added to cover release using an FDP model. In addition, some entities do not agree with the use of the FDP model. In these situations, please work with your Dean or hipaa Risk Executive for your campus to discuss the circumstances of the sharing. If the sharing is approved by the relevant management, you can use a UW-Madison template available through our Office of Compliance (under compliance.wisc.edu/policies-and-forms/).

Alternatively, RSP can help create terms and conditions that can be added to an FDP model or a single data sharing agreement that matches the situation. Reviews existing and new administrative requirements imposed by federal regulations and program officials for the security, retention, sharing and integrity of research data. Emphasis should be placed on harmonising requirements between federal authorities, reducing redundancies and identifying good practices. Approval of the ATF eGC1 does not imply approval or acceptance of the agreement. Many types of agreements related to research and sponsored activities are sent to principal investigators (PIs) and UW staff. A guide has been developed to determine which UW branch you should go to. If materials or intellectual property conditions appear in an agreement, it is probably not just a CDA or DUA….