The Agreement Said Research. The Recipient Used the Data to Build a Competing Commercial Product.

A Clarendon health services analytics company entered a data sharing agreement with a university research consortium, providing access to a de-identified longitudinal patient outcomes dataset under terms that authorized use for academic research and publication only. Eighteen months after the data transfer, the company discovered that a spinout entity connected to the consortium’s principal investigator had incorporated the dataset’s analytical structure into a commercial predictive analytics product that was being marketed directly to the health systems that were the Clarendon company’s primary customers. The data sharing agreement’s research-only restriction was unambiguous. The consortium’s position was that the spinout’s use of analytical methodologies derived from the dataset did not constitute a direct use of the dataset itself. The civil litigation required both data science expert testimony and contract interpretation analysis to establish the boundary between authorized research use and the commercial application that the spinout had built.

Data sharing disputes in Arlington County’s healthcare and technology sectors represent an emerging category of civil litigation that reflects the increasing commercial value of healthcare data assets and the imprecision with which many data sharing agreements define authorized uses and the boundaries between research-derived methodology and the underlying dataset itself. Clarendon and Rosslyn health services companies that have invested years in developing proprietary datasets face a specific category of misappropriation risk when data sharing agreements fail to anticipate how commercial applications can be constructed from research access to proprietary data.

Shin Law Office handles civil disputes involving data sharing agreements, unauthorized data use claims, and trade secret misappropriation of proprietary datasets for health services companies and technology firms throughout Arlington County. We understand both the technical dimensions of these disputes and the contract and intellectual property legal framework that governs them.

Data Sharing Agreement Drafting Failures and Their Civil Consequences

The civil disputes that arise from data sharing agreements in Arlington County’s healthcare analytics community almost always trace to the same drafting failure: insufficient specificity in defining what constitutes authorized use. A research-only restriction that prohibits commercial use of the dataset itself may or may not extend to commercial use of analytical methods developed from the dataset, to commercial use of models trained on the dataset, or to commercial products that incorporate insights derived from the dataset without directly including the underlying data. The answer to each of these questions depends on how the agreement defines the scope of the authorized use restriction, and agreements that define this scope with precision leave no room for the spinout’s argument that commercially applied methodology derived from research access is not covered by the restriction.

Trade Secret Protection for Healthcare Data Assets

Healthcare analytics datasets that Clarendon companies have assembled through years of data collection, cleaning, and validation may qualify as trade secrets under Virginia’s Uniform Trade Secrets Act when the company maintains confidentiality measures adequate to support trade secret status. The economic value of a longitudinal patient outcomes dataset that competitors cannot readily replicate, combined with access controls, confidentiality agreements, and data use agreements that limit access to defined purposes, creates a trade secret asset that unauthorized commercial use misappropriates. When the data sharing agreement’s contractual restrictions prove insufficient to capture the full scope of the unauthorized use, trade secret law provides an independent theory that may reach conduct the contract does not clearly address.

HIPAA and Civil Law: Parallel Frameworks That Both Apply

When a Clarendon health services company’s data sharing agreement involves patient health information, even if de-identified, HIPAA’s framework for permissible data use operates alongside the civil contract and trade secret law that governs the agreement itself. HIPAA violations by a data recipient who uses health information beyond the scope of the data use agreement may support both federal enforcement action and civil claims that leverage the regulatory violation as evidence of the recipient’s bad faith in the contract relationship. Understanding how the regulatory framework and the civil law framework interact is important to building the most complete case against a healthcare data misappropriator.

Injunctive Relief and Data Return in Healthcare Data Disputes

When a Clarendon health services company discovers that its proprietary dataset is being used in a competing commercial product, injunctive relief may be available to stop further use and require destruction or return of all copies of the dataset. This is the most consequential remedy in healthcare data disputes because it addresses the ongoing harm rather than simply compensating for damage that has already occurred. Getting an injunction in a data use dispute requires demonstrating both the likelihood of success on the underlying misappropriation claim and the irreparable harm that continued unauthorized use causes — the competitive harm of having your proprietary data asset embedded in a competitor’s commercial product that is now in the market. Shin Law moves quickly in these situations to preserve the option of injunctive relief before the commercial product becomes so established that equitable considerations weigh against removal.

Damages in Healthcare Data Misappropriation Cases

Civil damages in healthcare data misappropriation disputes include the value of the unauthorized use to the misappropriator — what they would have paid for licensed access to the data for the commercial purpose they actually pursued — and the competitive harm to the Clarendon data owner from having a competitor enter the market with a product built on the owner’s proprietary assets. These damages require expert testimony from both a data valuation specialist who can establish the reasonable license value of the misappropriated dataset and a market expert who can quantify the competitive harm from the unauthorized market entry. Building this expert foundation early in the litigation produces a damages case that survives the misappropriator’s challenge on both elements simultaneously.

Frequently Asked Questions

What happens when a research data sharing agreement is used for commercial purposes? When a data sharing agreement limits use to research only, using the data or insights derived from it for a commercial product can create serious legal exposure. This may lead to breach of contract claims, trade secret claims, and requests for injunctive relief.
Can proprietary healthcare datasets qualify as trade secrets in Virginia? Yes. A proprietary healthcare dataset may qualify as a trade secret if it has independent economic value, is not readily available to competitors, and is protected through reasonable confidentiality measures such as access controls, nondisclosure agreements, and limited use agreements.
Does HIPAA matter in a civil dispute involving de identified healthcare data? Yes. Even when data is described as de identified, HIPAA issues may still matter depending on how the data was handled, shared, and used. HIPAA compliance can operate alongside contract claims and trade secret claims, and regulatory violations may strengthen a civil case.
Can a company get an injunction to stop unauthorized use of healthcare data? Yes. A company may seek injunctive relief to stop continued unauthorized use of its proprietary healthcare data, require return or destruction of the data, and prevent a competing product from continuing to benefit from the disputed information. Fast legal action is often critical.
What damages can be recovered in a healthcare data misappropriation case? Damages may include the fair market value of the unauthorized use, lost business opportunities, competitive harm, and other losses tied to the misuse of the data asset. These cases often require expert analysis to calculate both license value and market impact.

References

Virginia General Assembly. (2019). Virginia Uniform Trade Secrets Act, Code of Virginia §§ 59.1-336 through 59.1-343. https://law.lis.virginia.gov/vacode/title59.1/chapter26/

U.S. Department of Health and Human Services. (2024). HIPAA de-identification standards and data use agreements. https://www.hhs.gov/hipaa/for-professionals/privacy/special-topics/de-identification/

American Bar Association. (2023). Data licensing and the law. ABA Science and Technology Law Section.

National Institutes of Health. (2024). Data sharing policy for NIH-funded research. https://sharing.nih.gov

Restatement (Third) of Unfair Competition §§ 39–45: Trade secrets and data misappropriation (1995). American Law Institute.

Healthcare Data Dispute in Arlington County?

Shin Law Office pursues data sharing agreement violations, unauthorized data use claims, and trade secret misappropriation for health services companies in Clarendon, Rosslyn, and throughout Arlington County.

Protect Your Data Assets571.445.6565

Reproduction of any content on this site is prohibited except for individual, non-commercial, informational use. This limited permission does not allow modification, distribution, or incorporation of any content into other works or publications in any medium. You may not reproduce or distribute content from this site to any third party.

Copyright © 2026 Shin Law Office, PLC. All rights reserved.

Powered by Veridictas

Copyright © 2026 Shin Law Office, PLC. All rights reserved.

Reproduction of any content on this site is prohibited except for individual, non-commercial, informational use. This limited permission does not allow modification, distribution, or incorporation of any content into other works or publications in any medium. You may not reproduce or distribute content from this site to any third party.