One is the state law concerning privacy in computer data access.
The standards of "good scientific practice" expect data access beyond the research project.
