Data Use Agreement For Research Template for England and Wales

A Data Use Agreement For Research is a specialized contract that governs how data can be shared, used, and protected when organizations collaborate on research projects. Under England and Wales law, these agreements are essential for ensuring compliance with data protection legislation while enabling valuable research activities that benefit society.

When do you need this document?

You need this agreement whenever your organization plans to share data for research purposes with external parties. This includes collaborations between universities and pharmaceutical companies for clinical trials, sharing anonymized patient data between NHS trusts and academic institutions, or when contract research organizations access proprietary datasets from sponsors. The agreement is particularly crucial when handling personal data, commercially sensitive information, or data subject to specific regulatory requirements. Research institutions increasingly require these agreements before approving data sharing proposals, and funding bodies often mandate their use as a condition of grant approval.

Key legal considerations

The agreement must clearly define the scope of permitted data use, ensuring it aligns with the original purpose for which data was collected under data protection principles. Purpose limitation clauses prevent data being used beyond agreed research objectives, while data minimization provisions ensure only necessary data is shared. Security obligations must specify technical and organizational measures for protecting data, including encryption, access controls, and breach notification procedures. Intellectual property clauses should address ownership of research outputs and any resulting publications or patents. The agreement should include provisions for data retention periods, secure deletion requirements, and procedures for handling data subject rights requests. Liability and indemnification clauses protect parties from potential breaches or misuse of shared data.

Legal requirements in England and Wales

Under UK GDPR and the Data Protection Act 2018, data sharing for research purposes requires a lawful basis, typically legitimate interests or explicit consent depending on the data type. The agreement must demonstrate compliance with data protection principles, including lawfulness, fairness, transparency, and accountability. Special category data, such as health information, requires additional safeguards and may need explicit consent or substantial public interest grounds. The Freedom of Information Act 2000 may apply to publicly funded research, requiring consideration of transparency obligations. Common law duty of confidentiality applies when sharing confidential information, particularly in healthcare research contexts. For clinical trials, compliance with Clinical Trials Regulation and Good Clinical Practice guidelines is mandatory. The agreement should specify the legal basis for processing, include privacy impact assessment requirements, and ensure appropriate technical and organizational measures meet UK standards for data security and protection.