A Data Use Agreement (DUA) is a formal document that outlines the conditions under which PHI can be shared between entities for research purposes. The DUA must specify the permitted uses of the data, establish who is allowed to use or receive the data, and provide assurances that the data will be protected in accordance with HIPAA standards.
