vaulytica

Data Use Agreement for a Limited Data Set (HIPAA) review

The agreement a HIPAA covered entity must have before it discloses a limited data set for research, public health or health care operations. The checks read for the seven terms the Privacy Rule requires it to contain: the permitted uses, who may use or receive the data, and the recipient's five commitments — no other use, safeguards, reporting, the same terms for agents, and no re-identification or contact.

Review your document — free → See a sample report

What it checks

Permitted uses, within research, public health or health care operations

Critical · DUA-001

Who may use or receive the limited data set

Critical · DUA-002

No use or disclosure beyond the agreement, except as required by law

Critical · DUA-003

Appropriate safeguards

Critical · DUA-004

Report of any use or disclosure the agreement does not provide for

Critical · DUA-005

Agents held to the same restrictions

Critical · DUA-006

No identifying the information or contacting the individuals

Critical · DUA-007

Every run also applies 112 general checks that belong to any agreement: structure, parties and signatures, defined terms, cross-references, dates, amounts, and one-sided terms.

Often reviewed with

How it works

  1. Open vaulytica.com — no account, nothing to install.
  2. Drop your PDF or DOCX, or paste the text. The document type is detected and only the checks that belong to it run, inside your browser tab.
  3. Get a Word report in which every finding quotes the clause and cites the rule and source behind it — one of 1,887 checks across 278 document types.
Review your document — free →

More healthcare documents

Every document type →