The Pan UK Data Governance Steering Group[1] of the UK Health Data Research Alliance has identified that confusion around “legal” definitions of roles can cause a lack of clarity around which party is practically responsible for compliance and can cause protracted negotiating and delay in contracting. To provide structure and clarity, roles and responsibilities for all parties involved in data access in SDEs have been mapped against UK GDPR and can be found below in Table 1, with further obligations in Table 2. [1] Data Access and Governance | UKHDRA