The agreement should specify who will have access to the data, including any restrictions on who can view or use the data.