Scope of Sharing
Defines data categories, data fields, permitted purposes, and allowed recipients to limit use and reduce ambiguity.
A clear Data Sharing Agreement reduces legal uncertainty, clarifies responsibilities for data protection, and documents the technical and organizational measures required to safeguard shared information. It also provides an evidentiary record for compliance reviews and incident responses.
Organizations that exchange regulated or sensitive information use a DSA to document permissions, security controls, and liabilities.
Use this template as a starting point and add industry addenda (for example, HIPAA) or jurisdictional clauses as needed.
The Chief Privacy Officer or equivalent typically reviews and approves DSAs for privacy and regulatory alignment, then signs when expressly authorized. Their approval confirms technical and policy controls meet contractual promises and internal risk thresholds.
An authorized executive such as General Counsel, CFO, or delegated director signs where legal authority is documented. Ensure board or corporate delegation rules permit the signatory to bind the organization.
Defines data categories, data fields, permitted purposes, and allowed recipients to limit use and reduce ambiguity.
Specifies technical and organizational controls such as encryption, access controls, logging, and vulnerability management.
Sets retention periods, deletion protocols, and secure disposal obligations after the purpose ends.
Outlines timelines and responsibilities for notifying the other party and affected individuals in the event of a compromise.
Provides rights to audit or require certifications and details scope, frequency, and remediation steps.
Allocates risk, caps damages where appropriate, and sets indemnity obligations for misuse or negligence.
| Field | Configuration |
|---|---|
| Signature Field | Required; capture name, title, date |
| Initials / Checkboxes | Use for clause acknowledgements |
| Conditional Sections | Show additional clauses for regulated data types |
| Authentication | Use email+SMS or stronger methods as needed |
Ensure the chosen eSignature platform supports required authentication, audit trails, and archival formats before sending the DSA for signature.
Verify platform compliance needs (for example, HIPAA BAA or 21 CFR Part 11) and retention/export requirements before execution.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day trial | Varies | Varies | Varies | Varies |
| Bulk Send | Yes (Business Premium) | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
| Envelope Cap | No cap | 100 envelopes/user/year | Varies by plan | Varies by plan | Varies by plan |