Tech

Why does a signed data use agreement not stop the queries it forbids?

Oportunidade

Federated data networks in healthcare, research, and finance rely on data use agreements to specify what recipients may do with shared data. These agreements are written in legalese and enforced after the fact through audits and legal action, not at the moment a query runs. Nothing at the data access layer checks a live query against the constraints a recipient signed up to. An ACM FAccT 2025 paper on data intermediary system design identified this gap directly: technical work on data sharing has focused on access control, meaning who can query, rather than use control, meaning what any given query may actually ask. A 2026 Royal Society paper on federated computing under sovereignty constraints confirmed that translating legal data-sharing policies into enforceable computational constraints remains an open research problem with no deployed solution.

Por que importa

Shifting enforcement from signed agreements to runtime policy checks is the missing primitive that would make broad federated data sharing viable without trusting every downstream actor.

Como avalio a oportunidade

A Pontuação de Oportunidade é minha própria leitura, não uma medição: o quanto dói, com que frequência aparece e o quanto pouco existe para resolvê-lo hoje. Quanto maior, mais vale a pena construir, na minha opinião.

Gravidade8/10

O quanto de dor causa quando aparece.

Frequência7/10

Com que frequência as pessoas realmente se deparam com isso.

Lacuna9/10

O quanto pouco de boas ferramentas existe para isso hoje.