ContractData Use Agreement (Dua) • January 25th, 2022
Contract Type FiledJanuary 25th, 2022You need to use a Data Use Agreement (DUA) anytime you are sharing data that are NOT de- identified in a manner that was not explicitly covered in the consent form. Sharing of de- identified data does not require a DUA. A limited data sets (LDS), applied to only HIPAA covered private health information may be shared only after a DUA is in place. The first step is to determine what type of data you are working with. DUAs are most used for the sharing of HIPAA covered information such as identifiable private health information (PHI) but may be used for other types of personally identifiable data, such as student educational records. This document is specific to PHI. Contact the IRB Office if your data is not PHI for further instructions.