Data Use Agreement (DUA)/Data Transfer Agreement (DTA) – MSIP

A Data Use Agreement (DUA) refers to a legal contract concerning the transfer of human subject data which includes PHI (typically but not exclusively in the form of a Limited Data Set). It is required to obtain satisfactory assurances that the recipient of the Limited Data Set will use or disclose the PHI in the data set only for specified purposes. DUAs are subject to HIPAA regulations and usually require IRB approval.

A Data Transfer Agreement (DTA) is a legal contract governing the transfer of non-human subject data or completely de-identified human subject data. It sets out the related protections, rights, and obligations of both parties and delineates the specific purpose(s) for which the data may be used.

(Source: http://www.ip.mountsinai.org/request-an-agreement/#1522693814954-71e70692-f4f9)