Data sharing agreements: who needs them?