A strict data use agreement signed by a real person with tangible assets and reputation at stake, outlining the acceptable and unacceptable uses of the data and

A strict data use agreement signed by a real person with tangible assets and reputation at stake, outlining the acceptable and unacceptable uses of the data and well as appropriate data handling rules. Until/unless patients agree otherwise. I.e., the status quo.