Grant of Rights
Specify exactly which data is licensed, the scope of permitted use, and any restrictions on reuse or sublicensing; include purpose and territory.
A formal Participant Data License Agreement reduces legal uncertainty, defines permitted processing, and aligns expectations about privacy, security, and commercial use. Precise terms help limit liability, enable compliance with HIPAA and other laws, and document consent and attribution for downstream use.
Organizations and individuals who exchange participant data complete these agreements to set legal permissions and obligations before any sharing occurs.
Use the appropriate version depending on whether the participant is an individual, a research subject, a vendor, or an enterprise counterparty.
Specify exactly which data is licensed, the scope of permitted use, and any restrictions on reuse or sublicensing; include purpose and territory.
Define participant data, personal data, de-identified data, processing, controller, processor, and other key terms to avoid ambiguity.
Identify technical and organizational measures required, encryption standards, access controls, and breach notification timelines.
State monetary fees, royalties, or non-monetary consideration, payment schedule, and audit rights for verification.
Obligate recipients to protect confidential elements and limit disclosure to authorized personnel under written agreements.
Allocate risk for data breaches, misuse, and third-party claims; consider caps, exclusions, and insurance requirements.
| Field | Configuration |
|---|---|
| Signer Order | Sequential or parallel routing depending on internal approvals. |
| Authentication | Email link by default; use SMS or KBA for stronger identity assurance. |
| Attachments | Add exhibits and data dictionaries as locked attachments to prevent alteration. |
| Audit Trail | Enable full event logging (IP, timestamp, actions) for evidentiary support. |
Ensure the chosen platform preserves audit trails, supports optional notarization or RON where required, and retains executed records for compliance.
Enter as MM/DD/YYYY; governs start of obligations.
Specify start and end dates for data exports or API access.
Require written renewal notice at least 30 days before expiration.
Require notification within 72 hours for incidents involving personal data.
Allow 30 days to respond to audits or data subject access requests.
Final terms agreed and exhibits attached.
Legal and privacy approvals obtained; budget approved.
Signatures obtained and executed copies distributed.
Secure transfer scheduled and validated by data steward.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Free trial available | Free trial available | Free trial available | Free trial available |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
A university licenses de-identified trial data for secondary analysis
A SaaS vendor licenses participant usage logs for AI training
Typically an officer, general counsel, or other delegate with written signature authority; their title and delegation should be recorded to prove corporate authorization.
An individual participant must sign where personal consent is required; for minors or incapacitated persons, a legally appointed guardian or power of attorney may sign.