If personal data is required by federal law, the institute has no discretion – it must share. An institution of the federal government may, for many reasons, have to share or exchange personal data with one of the following government organizations or agencies: Retention of personal data: In accordance with paragraph 6, paragraph 1, of the Data Protection Act and in subsection 4, paragraph 1, of the regulation, personal data used by a public institution for administrative purposes is retained by that public institution at least two years after the regulation last use of information. unless the individual accepts his previous order. The law also requires that, when a request for access to personal data has been received, the institution must retain the information until the person has the opportunity to exercise all rights under the law (for example. B rights of appeal, judicial review, etc.). The requirement to keep personal records would apply even if the records are relevant to a request for access to the Information Act. Under the Access to Information Act and the Privacy Act, information provided confidentially by other governments is subject to a mandatory exemption, which is subject to a disclosure discretion with authorization or where the government that received the information makes the information public. It is therefore strongly recommended that a consultation procedure be put in place by the agreement to respond to access to information requests or the Data Protection Act. The agreement could contain, for example. B, a provision requiring parties to consult with each other when they receive a request for access from the person entitled to the information to determine whether the party who provided the information would agree to disclose it. In the absence of strong intellectual property rights to protect data and databases in the United States, data-sharing agreements work best if they are part of a broader agreement among research partners. An individual agreement on data sharing is not intended to supplant the greater agreement between the partners, but to complement and support a particular aspect of the broader agreement.