TRE/SDE Data Access Agreement (DAA)

If you are viewing an old DAA version, it will show as "restricted" and a link to the newest version will appear at the top of the page.

This Data Access Agreement (DAA) is freely available to use and is intended for situations where data are accessed within a Trusted Research Environment (TRE), Secure Data Environment (SDE), or Data Safe Haven, for the purposes of research and innovation in the public interest.

The DAA has been developed by the Pan UK Data Governance Steering Group, a working group of the UK Health Data Research Alliance representing data custodians and policymakers across the four nations of the UK. The Steering Group aims to streamline and harmonise governance processes to support faster, safe and secure access to data for research and innovation, while maintaining public trust and meeting legal and regulatory requirements.

The DAA clauses should not be modified. The annexes are customisable to allow for differences between Host Organisations.

Two DAA versions are available depending on the nature of the data to be accessed: Personal Data / Confidential Patient Information (CPI) or Non-Personal Data.

The Non-Personal Data version is intended for use only where both the data accessed in the TRE and any resulting Data Outputs are not considered Personal Data or Confidential Patient Information (CPI) from the perspective of the Approved User and their Approved User Organisation, who access the data on behalf of the Sponsor Organisation.

If the research involves access to data that are Personal Data or CPI, or the creation of Data Outputs that are likely to become Personal Data or CPI in the hands of the intended recipients, the Personal Data version must be used.

June 2026 addition: A Tripartite DAA where The Host Organisation has been appointed by the NHS Board.