The Data Use Ontology (DUO) provides a helpful framework for gating access to data managed by Sage Bionetworks on the Synapse platform.
DUO was developed by members of the Global Alliance for Genomic Health (GA4GH): "DUO allows [users] to semantically tag datasets with restriction about their usage, making them discoverable automatically based on the authorization level of users, or intended usage".
At Sage, we extended DUO modifiers for our use cases and incorporated derived annotations as a way of scaling governance support on projects by assigning access requirements (ARs)* to entities based on its DUO annotation.
*ARs are applied in the form of a clickwrap (i.e., the user must agree to terms) and/or a managed access requirement (i.e., the user must provide evidence). Managed ARs may require evidence in the form of Authentication (e.g., training certification, profile validation, two-factor authorization) and/or Authorization (e.g., intended data use (IDU) statement, data use certificate (DUC), ethics approval letter from an institutional review board (IRB) or independent ethics committee (IEC)).