Responsibility for Data Use Agreements

When Cardiology Medical Group is the provider of the data:

Cardiology Medical Group has drafted a Data Use Agreement form document for use by those who wish to disclose a limited data set to recipients. This template may be accessed at HIPAA IRB Form 9. When Cardiology Medical Group is providing the limited data set, if any material change is to be made to this template form, or if another party’s version of a Data Use Agreement is to be used, the office must review and approve the terms of the agreement. See HIPAA Policy template AB.9.1b.

When Cardiology Medical Group is the recipient of the data:

If an Cardiology Medical Group researcher is the recipient of a limited data set of PHI from a non-Cardiology Medical Group office source, the office researcher will most likely be asked to sign the other party’s Data Use Agreement. In such instance, the Cardiology Medical Group researcher is responsible for reviewing the Data Use Agreement and determining if it complies in material terms with the Cardiology Medical Group Data Use Agreement template. If the other party’s Data Use Agreement differs materially from the Cardiology Medical Group Data Use Agreement template, or if there is any uncertainty, the Office of Research Administration must be consulted.