The agreement should specify how the data can be used, including any limitations on how the data can be processed or shared.