Navigating data sharing agreements in multi-site research

Multi-site studies, and increasingly studies planning to make their data available for secondary research, depend on data sharing agreements that spell out who can access what, for what purpose, and under what protections. Recent work looking at the current state of data sharing in research makes a point worth taking seriously: the practical difficulty of navigating these agreements has become a genuine barrier to research, not just an administrative step on the way to it.

Why this has become harder, not easier

It's tempting to assume data sharing gets simpler over time as norms mature and institutions gain experience. In practice, several forces are pulling in the opposite direction:

• Increasingly divergent jurisdictional requirements. Different countries, and in some cases different regions within a country, have adopted meaningfully different rules about health data transfer, meaning a single multi-country study may need distinct agreements tailored to each jurisdiction's specific requirements.
• Growing sensitivity to genomic and other highly identifiable data types. Data that's harder to fully de-identify draws more scrutiny and more conservative agreement terms, which is appropriate but adds real complexity for studies working with this kind of data.
• A proliferation of institution-specific templates and requirements. Without a widely adopted standard agreement, each new institutional partner can bring its own preferred template, multiplying the negotiation effort for a study spanning several sites or institutions.

What a well-structured data sharing agreement actually needs to cover

Regardless of jurisdiction, a handful of elements consistently show up in agreements that hold up well in practice:

• Precise scope of permitted use, specific enough to be meaningful, broad enough not to require renegotiation for every minor variation in planned analysis.
• Clear data security and access control requirements, including who at a receiving institution is actually permitted to access the data, not just which institution holds the agreement.
• Explicit provisions for what happens at the end of the agreed period, destruction, return, or continued retention under what conditions, decided in advance rather than left ambiguous.
• A defined process for amendments, since research questions and collaborations evolve, and a rigid agreement that can't accommodate a reasonable scope change becomes an obstacle rather than a protection.
• Clarity on publication and attribution rights, agreed before data starts flowing, to avoid disputes once results are ready to share.

Practical steps for reducing the friction

1. Start data sharing agreement negotiations early, in parallel with other study setup activities, rather than treating it as a final step once everything else is settled.
2. Use existing, well-tested template agreements where they exist, rather than drafting from scratch for every new collaboration, adapting rather than reinventing.
3. Involve institutional data protection or legal expertise from the outset, rather than after a draft has already been negotiated informally between researchers.
4. Document data flows explicitly as part of study design, so the agreement reflects what will genuinely happen to the data, rather than a generic description that doesn't match actual practice.

Why this is worth getting right, not just getting done

A rushed or poorly scoped data sharing agreement doesn't just create legal risk. It can quietly constrain what a study is actually able to do with its own data later, an agreement that didn't anticipate a specific secondary analysis, or that expires before a planned follow-up study, can leave genuinely valuable data unusable for research it was collected to support. Treating the data sharing agreement as a document worth real attention at the design stage, rather than paperwork to clear before the interesting work starts, protects the value of the data long after the agreement itself is signed.