The Blog

What Is An Information Transfer Agreement

(h) Information identifiable to an individual (obtained under this Agreement) will be returned, unless otherwise agreed, at the end of the project for which it was obtained and no copy of such information will be retained. To reduce confusion about what constitutes protected health information (“PHI”) (health information that contains additional information that can be used to identify the data substitute) under HIPAA, an researcher should understand that HIPAA defines identifiers as one of the following: Under the GDPR (as under the previous European data protection regime), the default position is that EU personal data is not outside the EEA, unless certain conditions are met. (b) information that is identifiable to an individual will not be disclosed to any person for any purpose unless the information has already been included in search results (and/or databases) and is disclosed on a need-to-know basis for research or statistical purposes, provided that the transfer is authorized by the person providing information under the agreement; or pursuant to ยง 22.24(e). The sharing and use of personal data is a complex issue that cannot be adequately addressed on this website. Duke researchers who wish to transfer or use data from humans should contact the ORC to initiate a discussion about the proposed data transfer or use. The parties may amend these clauses only to update the information set out in Annex B; in that case, they shall inform the Authority if necessary. This does not prevent the parties from adding additional commercial clauses if necessary. .