Data Use Agreement A data use agreement (DUA) is an agreement that is required under the Privacy Rule and must be entered into before there is any use or disclosure of a limited data set…to an outside institution or party. – Stanford University Privacy Office