Get the free Data Use Agreement (DUA) - cms

This document outlines the instructions and requirements for completing the Data Use Agreement for access to CMS data containing individual identifiers, ensuring compliance with the Privacy Act and

How to fill out data use agreement dua

How to fill out Data Use Agreement (DUA)

1. Begin by reviewing the purpose of the Data Use Agreement (DUA) to understand the scope of the data sharing.
2. Identify the parties involved in the agreement, including the data provider and the data recipient.
3. Clearly define the data to be shared, including any specific datasets and datasets' categories.
4. Specify the permitted uses of the data, including any restrictions on usage or sharing with third parties.
5. Outline the data security and privacy measures that will be implemented to protect the data.
6. Include terms regarding data retention and destruction once the purpose of the agreement is fulfilled.
7. Specify obligations related to compliance with applicable laws and regulations regarding data protection.
8. Review the DUA for any required signatures and finalize the document.

Who needs Data Use Agreement (DUA)?

1. Researchers and academic institutions that require access to restricted data for studies.
2. Government agencies sharing sensitive data with contractors or third parties.
3. Healthcare organizations sharing patient data for research purposes.
4. Organizations that manage data repositories requiring legal agreements for data access.

People Also Ask about

What is a data usage agreement dua?

A Data Use Agreement (DUA) is a contractual document used for the transfer of data that has been developed by nonprofit, government or private industry, where the data are nonpublic or is otherwise subject to some restrictions on its use.

Do you need a dua for de-identified data?

WHEN DO I NEED A DUA? To put it simply, you need a DUA anytime you are sharing data that are not de-identified in a manner that was not explicitly covered in the consent form. Sharing a de-identified data set does not require a DUA, but limited data sets may be shared only after a DUA is in place.

Do you need a BAA for de-identified data?

Must a Business Associate Agreement or Data Use Agreement be in place before disclosing de-identified health data to a business partner? A Business Associate Agreement or Data Use Agreement does not have to be in place before disclosing de-identified health data to a business partner.

What is a data use agreement?

The DUA's basic purpose is to define the data recipient's rights and obligations related to the access, storage, protection, use, processing, and transmission of the provider's data, which may include data types such as Protected Health Information (PHI), Personally Identifiable Information (PII), Limited Data Sets,

What is a data access agreement?

Similar to a Data Use Agreement, a Data Access Agreement (DAA) is an agreement used to gain access to another party's secure data site to use the data there; no data transfer takes place.

What is the common rule for de-identified data?

Under the Common Rule a dataset is “de-identified” only when no one could “re-identify” the data: not the recipients, nor the data provider, nor anyone else. If the data were “coded,” any “key to the code” must be destroyed to “de-identify” the dataset.

Do I need consent to use de-identified data?

De-identified data may be shared without the consent required by FERPA (34 CFR §99.30) with any party for any purpose, including parents, general public, and researchers (34 CFR §99.31(b)(1)).

For pdfFiller’s FAQs

What is Data Use Agreement (DUA)?

A Data Use Agreement (DUA) is a legal document that outlines the terms and conditions governing the sharing and use of data between parties.

Who is required to file Data Use Agreement (DUA)?

Any organization or individual that intends to share, access, or use data that has restrictions on its use, such as sensitive or confidential data, is required to file a Data Use Agreement.

How to fill out Data Use Agreement (DUA)?

To fill out a Data Use Agreement, you generally need to provide details about the data being shared, the purpose of use, security measures to protect the data, and the responsibilities of both parties.

What is the purpose of Data Use Agreement (DUA)?

The purpose of a Data Use Agreement is to ensure that data is used in accordance with applicable laws and regulations, protect privacy and confidentiality, and outline the responsibilities of each party regarding the use of the data.

What information must be reported on Data Use Agreement (DUA)?

A Data Use Agreement must report information such as the names of the parties involved, description of the data, purpose of use, duration of the agreement, data security measures, and consequences of misuse.