Closed bryangw1 closed 9 years ago
Perfect.
What is the Slack channel where we are discussing this? I want to coordinate a check-in with Chris Osgood and the Code for America fellows working with City of Sommerville ...
Dazza - do mean a channel on the CommonAccord Slack or is there another one you are referring to. If CommonAccord, I suppose this would be the contracts channel.
Hi Jim! I just made a channel on the CodeForKC Slack to try to get those folks involved. It is called "DataSharingAgreements"... Do you have or need access there?
We can do a demo with Chris Osgood and Code for America fellows stationed in Mass from SF on Data Sharing Agreements at 3pm Eastern (in about 40 minutes). Are you available then, Jim?
Sure.
On Jun 6, 2015, at 8:23 PM, Dazza Greenwood notifications@github.com wrote:
We can do a demo with Chris Osgood and Code for America fellows stationed in Mass from SF on Data Sharing Agreements at 3pm Eastern (in about 40 minutes). Are you available then, Jim?
— Reply to this email directly or view it on GitHub.
James Hazard 33.6.37.47.46.42 @commonaccord
NYC - DOT Video & Traffic Flow Data Sharing Agreement http://www.nyc.gov/html/dot/downloads/pdf/video-partnership-agreement.pdf
University of Chicago Data Sharing Agreement http://researchadmin.uchicago.edu/clinical_trials/DUA%20from%20UCMC.pdf
http://www.cityofchicago.org/city/en/depts/doit/dataset/major_streets.html City of Chicago Major Streets Data Sharing Agreement
New York Data Sharing Agreement http://gis.ny.gov/co-op/agreement.cfm
City of Houston displays all their 311 info in this Dashboard format http://performance.houstontx.gov/311Dashboards#volume
Data Use Agreement regarding HIPPA with University of California San Fransisco Health System http://hipaa.ucsf.edu/documentation/downloads/DataUseAgreement2007Dec.pdf
St. Louis University Data Sharing Plan www.slu.edu/.../Data_use_agreement_external.doc
Texas Education Agency Data Sharing Agreement http://www.isbe.net/research/data-share/TX-ED-AM1-6a.pdf
HIPPA Data Use Agreement Yale University http://hipaa.yale.edu/sites/default/files/files/5039-FR-Data-Use-Agreement.pdf
Data Sharing Agreement For the State of Washington
Kansas Department of Education Data Sharing Agreement http://www.ksde.org/Portals/0/Data%20Media%20Reports/FP%202480%20Data%20Sharing%20Agreement%20with%20Data%20Driven%20Enterprises.pdf
Florida Agency for Healthcare Administration https://www.hcup-us.ahrq.gov/datainnovations/clinicaldata/F8hospitadatasharingagrmt081108.pdf
Privacy Technical Assistance Center FERPA Data Sharing Agreement Checklist http://ptac.ed.gov/sites/default/files/data-sharing-agreement-checklist.pdf
Missouri Hwy. Patrol Data Sharing Agreement https://www.mshp.dps.missouri.gov/MSHPWeb/PatrolDivisions/CRID/documents/Mo-DExSystemUseAgreementFormSHP-997B.pdf
Data Sharing Agreement Harvard Multi-Regional Clinical Trials http://mrct.globalhealth.harvard.edu/files/mrct/files/dua_template_march_2015.pdf
State of Louisiana Department of Education
I'm starting to review the links in comments to this issue #8 and pulling the content out of PDF. I'll add the extracted pure text files to the repository directly.
Noticed - there is a broken link to this one: St. Louis University Data Sharing Plan www.slu.edu/.../Data_use_agreement_external.doc Do you have a copy of it? Or is this an unreviewed link directly from a Google search or something like that?
Here is the text of that link
INSTRUCTIONS (delete instructions upon completing the data use agreement): The Data Use Agreement template is to be used for research that exchanges limited PHI with a non-SLU entity. The PHI being shared/exchanged should qualify as a limited data set. A limited data set may be used for the purpose of research, public health, or health care operations. A limited data set is PHI that excludes direct identifiers of the individual or of relatives, employers, or household members of the individual.
If your research requires the use of a data use agreement, a copy of the signed agreement (by both parties) should be submitted to the IRB office with other research materials for review. A copy of the agreement should also be retained by both parties involved in the research as an assurance of this agreement.
DATA USE AGREEMENT
This Data Use Agreement (“Agreement”) is made and entered into as of this ________________ day of ____________, 20__ by and between Saint Louis University d/b/a/ SLUCare, a benevolent corporation located in St. Louis, Missouri (“Covered Entity”), and _____________________________ (“Data Recipient”).
WITNESSETH:
WHEREAS, Covered Entity may Disclose or make available to Data Recipient, and Data Recipient may Use, Disclose, receive, transmit, maintain or create from, certain information in conjunction with research; and
WHEREAS, Covered Entity and Data Recipient are committed to compliance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and regulations promulgated thereunder; and
WHEREAS, the purpose of this Agreement is to satisfy the obligations of Covered Entity under HIPAA and to ensure the integrity and confidentiality of certain information Disclosed or make available to Data Recipient and certain information that Data Recipient Uses, Discloses, receives, transmits, maintains or creates, from Covered Entity.
WHEREAS, User agrees to limit its use of the Limited Data Set and protect the Limited Data Set in accordance with the terms of this Agreement and the HIPAA Privacy and Security Rules.
THEREFORE, in consideration of the mutual agreements, terms and conditions herein contained, Covered Entity and User agree as follows:
A. DEFINITIONS
Terns used but not otherwise defined in this Agreement shall have the same meaning as those terms in the Privacy Rule.
1. Individual shall have the same meaning as the term “individual” in 45 CFR Sect. 164.501 of the Privacy Rule and shall include a person who qualifies as a personal representative in accordance with 45 CFR Sect. 164.502(g) of the Privacy Rule.
2. Limited Data Set shall have the same meaning as the term “limited data set” in 45 CFR 164.514(e) of the Privacy Rule.
3. Privacy Rule shall mean the Standards for Privacy of Individually Identifiable Information at 45 CFR Part 160 and Part 164, Subparts A and E, as amended from time to time.
4. Protected Health Information or PHI shall have the same meaning as the term “protected health information” in 45 CFR Sect. 164.501 of the Privacy Rule, to the extent such information is created or received by Data Recipient from Covered Entity.
5. Required by Law shall have the same meaning as the term “required by law” in 45 CFR Sect. 164.501 of the Privacy Rule.
B. SCOPE AND PURPOSE
1. This Agreement sets forth the terms and conditions pursuant to which Covered Entity will Disclose certain PHI to the Data Recipient.
Except as otherwise specified herein, Data Recipient may make all Uses and Disclosures of the Limited Data Set necessary to conduct the research described herein: _(include a brief description of the research and/or IRB protocol number)¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬___ (“Research Project”).
C. OBLIGATIONS AND ACTIVITIES OF DATA RECIPIENT
D. TERM AND TERMINATION
Term of this Agreement shall be effective as of the date entered above and shall terminate when all of the Limited Data Set provided by Covered Entity to Data Recipient is destroyed or returned to Covered Entity. If it is infeasible to return or destroy the Limited Data Set, protections of this Agreement shall extend to such information, in accordance with the termination provisions in Section 2(b).
(a) Except as provided in paragraph (b) of this subsection, upon termination of this Agreement or upon request of Covered Entity, whichever occurs first, User shall return or destroy the Limited Data Set received from Covered Entity. This provision shall apply to a Limited Data Set that is in the possession of subcontractors or agents of User. Neither User nor its subcontractors or agents shall retain copies of the Limited Data Set.
(b) In the event that User determines that returning or destroying the Limited Data Set is not feasible, User shall provide to Covered Entity notification of the conditions that make return or destruction infeasible. Upon mutual agreement of the Parties that return or destruction of the Limited Data Set is infeasible, User shall extend the protections of this Agreement to such Limited Data Set and limit further uses and disclosures of such Protected Health Information to those purposes that make the return or destruction infeasible, for so long as User maintains such Limited Data Set.
E. MISCELLANEOUS
IN WITNESS WHEREOF, the parties have executed this Agreement effective upon the Effective Date set forth above.
COVERED ENTITY: DATA RECIPIENT:
SAINT LOUIS UNIVERSITY
______________________________
Name: Name:
Title: Title:
Thanks. Glad to see this in pure text format. O
Yes! It is very clean. See Slack channel for the steps in taking this from text to Cmacc. Here is where the current version will be displayed: http://datashare-commonaccord.herokuapp.com/index.php?action=source&file=/H4KC/Form/Master_DSA.md.
It's great to see all these precedents being accumulated! As you do this, you might keep track of the top level headings of the documents. These will be the basis of organizing a master document and form a rough index of the subject matter. E.g. like http://my.commonaccord.org/index.php?action=source&file=/NDA/Form/NDA_Form.md
I think our tentative plan is to begin populating the clause bank folder with different clauses (FERPA, HIPPA) that might be triggered by system rules once those are written. The way the clause bank folder is set up is in a way that indexes everything a lot better. Our team is meeting tomorrow for a few hours to begin populating the clause bank with what we have in the top-level doc, and then with FERPA/HIPAA clauses.
Great! Eager to see your work.
http://www.co.berks.pa.us/Dept/Planning/Documents/GIS/berks_gis_sharing_agreement.pdf Berks County, PA - Internal GIS Data Sharing Agreement
are all of these captured in standard content forms in the repository or wiki etc? Can you link to them if so and then close this issue?
Ya. Will do, I was using this as a place to refer back to, when I should have just been compiling them in either the repo in a standardized manner, or in the wiki.
This is the last link I'll post in here: http://research.med.umich.edu/honest-broker-office/data-sharing-agreements
University of Michigan set of Agreements DSA: Limited Protected Health Information Dataset DSA: De-identified Dataset DSA: Full Protected Health Information Dataset
Location to compile different data sharing agreements