Research Data Sharing Agreement Template for England and Wales

Generate a bespoke document

What is a Research Data Sharing Agreement?

A Research Data Sharing Agreement is essential when organizations need to share research data while ensuring compliance with UK data protection laws and research governance requirements. This agreement, governed by English and Welsh law, provides a framework for secure and compliant data sharing, defining the scope of data use, security requirements, and responsibilities of all parties. It is particularly important in collaborative research projects where sensitive or personal data is involved, and where clear guidelines for data handling and protection are required.

Trusted by high-performance teams

Reviewed by

Swetha Meenal

Legal Engineer, GenieAI

Swetha Meenal profile photo

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Imad Mohammed Nazar

Legal Engineer, GenieAI

Imad Mohammed Nazar profile photo

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

England and Wales

Publisher

GenieAI

Sector

Business

Cost

Free to use

Last updated

About the Research Data Sharing Agreement

A Research Data Sharing Agreement is a legally binding contract that governs how research data is shared between organizations while maintaining compliance with UK data protection laws. When you're involved in collaborative research projects, this agreement ensures that all parties understand their obligations regarding data handling, security, and usage restrictions. The agreement is particularly crucial when dealing with personal data, sensitive research findings, or human tissue samples that require strict regulatory compliance under England and Wales law.

When do you need this document?

You need a Research Data Sharing Agreement whenever your research project involves multiple organizations sharing data. This includes university collaborations with commercial partners, multi-institutional clinical trials, international research consortiums, and partnerships between public bodies and private research foundations. The agreement is essential when sharing anonymized patient data for medical research, transferring genetic information between laboratories, or providing access to longitudinal study datasets. You'll also require this agreement when research data contains personal information that must be processed under UK GDPR, or when sharing data with organizations outside the UK that need adequate safeguards for international transfers.

Key legal considerations

Your agreement must clearly define the legal basis for data processing under UK GDPR, whether based on legitimate interests, consent, or public task provisions. You need to specify data retention periods, deletion requirements, and the circumstances under which data sharing can be terminated. The agreement should establish clear roles as data controllers or processors, outline security measures including encryption and access controls, and define breach notification procedures. You must also address intellectual property rights, publication restrictions, and any limitations on further data sharing or commercialization. Consider including provisions for data subject rights, audit requirements, and dispute resolution mechanisms to ensure comprehensive legal protection.

Legal requirements in England and Wales

Under England and Wales law, your Research Data Sharing Agreement must comply with UK GDPR and the Data Protection Act 2018, which require lawful basis for processing personal data and appropriate technical and organizational measures. If your research involves clinical trials, you must also meet Clinical Trials Regulations requirements for participant protection and data integrity. The Human Tissue Act 2004 applies when sharing human tissue samples or associated genetic data, requiring appropriate consent and ethical approval. You must ensure compliance with Privacy and Electronic Communications Regulations if your research involves electronic data collection or communication monitoring. The agreement should reference relevant research ethics committee approvals and institutional data governance policies that apply to your specific research context.

GOVERNING LAW

Applicable law

This Research Data Sharing Agreement is drafted to comply with England and Wales law. Key legislation includes:

UK GDPR and Data Protection Act 2018: Core data protection legislation in the UK that governs the processing of personal data, including research data. Sets out principles for data processing, rights of data subjects, and obligations of data controllers/processors.

Privacy and Electronic Communications Regulations (PECR): Specific rules for privacy of electronic communications, which may be relevant if research involves electronic data collection or communication methods.

Clinical Trials Regulations: Specific regulations governing clinical trials and medical research, including requirements for data handling and participant protection in medical studies.

Human Tissue Act 2004: Legislation governing the storage, use, and transfer of human tissue samples and associated data in research contexts.

Mental Capacity Act 2005: Legal framework for research involving participants who may lack capacity to consent, including safeguards and requirements for such research.

Copyright, Designs and Patents Act 1988: Primary legislation governing intellectual property rights, relevant for protecting and sharing research outputs and data.

Trade Secrets Regulations 2018: Regulations protecting confidential business information and know-how, which may be relevant to commercially sensitive research data.

Freedom of Information Act 2000: Legislation governing public access to information held by public authorities, which may affect research data sharing by public institutions.

Common Law Duty of Confidentiality: Legal principle requiring maintenance of confidentiality in professional relationships, including research contexts.

NHS Research Governance: Specific requirements and frameworks for conducting and sharing research within or involving the National Health Service.

International Data Transfer Requirements: Rules and mechanisms for transferring research data internationally, including adequacy decisions and Standard Contractual Clauses under UK GDPR.

Information Security Standards: Technical and organizational standards (such as ISO 27001) for ensuring secure handling and transfer of research data.

Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it