All units receiving requests from researchers, whether employees or external to the University, for access to personally-identifiable data in the unit's custody will ensure that the researcher signs the standard Researcher Agreement.  The Researcher Agreement is required whenever a research project will involve the University's disclosure of personally-identifiable information.  The Researcher Agreement is available from the University Privacy Officer.  It should be retained by the unit granting access to the data in its custody.