Tech

Why does a signed data use agreement not stop the queries it forbids?

Oportunidad

Federated data networks in healthcare, research, and finance rely on data use agreements to specify what recipients may do with shared data. These agreements are written in legalese and enforced after the fact through audits and legal action, not at the moment a query runs. Nothing at the data access layer checks a live query against the constraints a recipient signed up to. An ACM FAccT 2025 paper on data intermediary system design identified this gap directly: technical work on data sharing has focused on access control, meaning who can query, rather than use control, meaning what any given query may actually ask. A 2026 Royal Society paper on federated computing under sovereignty constraints confirmed that translating legal data-sharing policies into enforceable computational constraints remains an open research problem with no deployed solution.

Por qué importa

Shifting enforcement from signed agreements to runtime policy checks is the missing primitive that would make broad federated data sharing viable without trusting every downstream actor.

Cómo evalúo la oportunidad

La Puntuación de Oportunidad es mi propia lectura, no una medición: cuánto duele, con qué frecuencia aparece y qué tan poco existe para resolverlo hoy. Un valor más alto significa que creo que vale más la pena construirlo.

Gravedad8/10

Cuánto dolor causa cuando aparece.

Frecuencia7/10

Con qué frecuencia la gente se topa con ello.

Espacio en blanco9/10

Qué tan pocas herramientas buenas existen para ello hoy.