DataTerminology.comNEW
Also known as: Data Use Agreement, Data Transfer Agreement, Data Sharing Contract
Contracts that define purposes, conditions, and safeguards for sharing data between parties.
DESCRIPTION
A data sharing agreement (DSA) is a contractual framework that defines the purpose, scope, safeguards, and responsibilities for exchanging data between organizations. It typically covers lawful basis, roles, data minimization, retention, permitted uses, onward transfers, and security controls. DSAs ensure compliance with privacy regulations and clarify accountability for data quality, breaches, and data subject rights. They are essential for cross-organizational analytics, research collaborations, and participation in data spaces.
ALTERNATIVE DEFINITIONS
Wikipedia
A data use agreement (DUA) is a contractual document used for the transfer of nonpublic data that is subject to some restriction on its use.
Defines a common form of data sharing contract for restricted data.
UK Information Commissioner’s Office
A data sharing agreement sets out the purpose of the sharing, what data will be shared and how it will be protected and managed.
Emphasizes purpose, scope, and protection requirements from a regulator’s perspective.
RELATED TERMS
Conditions-of-Use Agreements Open License Governance Data Privacy Consent Management Data Processor Agreement Data Classification Anonymization Data De-identification Data Sharing GDPR Data Controller Data Processor Data Protection Impact Assessment Access Control Data Space
COMPETING TERMS
Open Data License Data License Data Processing Agreement
KNOWLEDGE AREAS
Data Privacy & Compliance Data Governance Data Management Data Security
TARGET AUDIENCE
Data Governance Manager Chief Data Officer Chief Information Officer Data Management Consultant Enterprise Architect AI Product Manager Data Privacy Officer IT Auditor Chief Information Security Officer Data Steward
EXTERNAL SOURCES
- Wikipedia - Data use agreement
- UK Information Commissioner’s Office - Regulatory code on data sharing
- U.S. National Institutes of Health - Research data sharing guidance
- OECD - Policy perspectives on data sharing
TOP QUESTIONS
What is the primary purpose of a Data Sharing Agreement?
To define why data is shared, under what conditions, and with what protections, ensuring lawful and responsible use across parties.
Category: Definition
How do Data Sharing Agreements relate to GDPR?
They clarify lawful basis, roles (controller/processor), data subject rights, retention, and safeguards required under GDPR.
Category: Compliance
What should Data Sharing Agreements include?
Purpose, scope of data, roles and responsibilities, security controls, retention, permitted uses, onward sharing, breach procedures, and audit rights.
Category: Requirements
How do Data Use Agreements differ from open data licenses?
DUAs restrict use of nonpublic data, while open licenses grant broad reuse rights to the public, often with attribution.
Category: Distinction
When is anonymization or de-identification required in Data Sharing Agreements?
When sharing personal data or regulated data, agreements may require techniques that reduce re-identification risk before transfer.
Category: Privacy
What risks arise without a Data Sharing Agreement?
Legal noncompliance, data misuse, unclear responsibilities, and reputational harm from breaches or inappropriate disclosure.
Category: Risks
How are Data Sharing Agreements enforced?
Contractual remedies, audits, compliance attestations, and termination clauses help ensure obligations are met.
Category: Management
Do Data Sharing Agreements cover derived data?
They should specify rights and obligations for derived or aggregated outputs to prevent unintended re-identification or misuse.
Category: Scope
Who should sign a Data Sharing Agreement?
Authorized representatives of each party, often with legal, security, privacy, and data owners’ input before execution.
Category: Governance