Navigating Data Use Agreements (DUA)

A key part of this support includes reviewing the security requirements outlined in DUAs and determining whether the University can meet those obligations without disrupting the research. To do this effectively, the Principal Investigator must provide detailed information about their project to Information Assurance, University Research Administration, and Institutional Review Boards, including the following:

• data classification

• source organization

• whether the project is a renewal

• storage plans

• potential use of generative AI

The expertise of the Information Assurance team in assessing regulatory risk, secure data handling, and technical infrastructure is essential to protecting research and ensuring that agreements are properly vetted.