Data Agreement Reviews

What is a Data Transfer and Use Agreement?

Data agreements, including Data Transfer and Use Agreements (“DTUA”, “DUA”, or “DTA”) are contracts that govern the exchange of specific data between two parties. A data agreement establishes the permitted disclosure of a unique data set, allowable uses, and any privacy or security requirements necessary for receiving and handling the data.  A data agreement also assigns appropriate responsibilities to the researcher(s) and recipient(s) using the data.

Who should I submit my Data Agreement to?

How to Request Contracting Services?

To request contracting services from Sponsored Program Services, please complete the Data Transfer and Use Request Form and submit a Data Transfer and Use Agreements via PERA.

To request contracting services from Office of Legal Counsel, please complete the New Matter Intake Form.

How long will it take to execute a data agreement?

We are committed to providing timely, accurate, and courteous assistance to our faculty, and other University personnel. Negotiation times for data agreements vary widely depending on the data type and requirements of the data provider. To reduce delays, please request a draft contract from the data provider before submitting a data request or submitting a protocol application to the IRB.

SPS Data Agreement Review Process for Sponosored Research

Steps for requesting a Data Transfer or Use Agreement from SPS.

To commence the negotiations of Data Transfer and Use Agreements, SPS first requires the Data Transfer and Use Request Form to be completed by the Purdue Principal Investigator and submitted via PERA.*  The form helps to determine legal, regulatory, data security, and contractual compliance terms and conditions.

*Please note: A current Purdue faculty member must certify the Data Transfer and Use Request From and submit the request for a data agreement.  SPS will not accept data requests from students or external parties.  If you are a current or former student, a faculty member must serve as the Principal Investigator for the data agreement and submit the request to the Office of Legal Counsel.  Any request with incomplete information will be returned for additional information before processing your request.

Is Purdue receiving data or providing data for research?

-If Purdue is receiving data from an outside entity:

1. Request an agreement from the data provider before submitting a request to SPS
2. Complete the Data Transfer and Use Request Form
3. Submit the Data Transfer and Use Request Form and draft agreement obtained from the data provider PERA.

Please note if Purdue is receiving data, SPS is not responsible for determining the data type or if an agreement is required.  An authorized official of the outside entity provider must make this determination.  Data requests submitted without a draft agreement can lead to significant delays and lengthy negotiations. Purdue will use the agreement provided by the outside entity to begin negotiations.

-If Purdue is providing data to an outside entity:

Complete the Data Transfer and Use Request Form and  Form and submit a Data Transfer and Use Agreements via PERA. 

Please note Purdue will use its template DUA when providing Purdue owned Data to an outside entity.

Frequently Asked Question and other Data Transfer Resources

When should I submit a protocol application to the IRB for review?  Coming Soon

Data Protection:

Resources from Purdue Libraries (http://guides.lib.purdue.edu/DataStorage) and Secure Purdue (https://www.purdue.edu/securepurdue/) may be useful to assist researchers with proper data protections.

HIPAA and Protected Health Information Guidelines and Resources

https://www.purdue.edu/legalcounsel/HIPAA/index.html

Family Educational Rights and Privacy Act (FERPA) Resources

https://www.purdue.edu/registrar/FERPA/index.html