Bench to Bedside
How to stand up a captive therapeutics unit inside an integrated health system that protects the data and IP moat and gets the research to the patient — because, done right, those are the same job.
The thesis #
This guide is for the executive standing up a captive translational engine: a unit that de-risks discoveries in-house to a defined value-inflection point, then licenses or partners them out. Data stays inside the system. IP gets licensed out. The unit is paid in upfront fees, milestones, royalties, and retained rights.
Protection and translation are not a trade-off. The moat is the very thing that gets the science to the patient.The thesis
Everyone arrives at this problem framing it as a trade-off. How much do we lock down the data and the IP, versus how fast do we move it to the bedside? Hold the lever too tight and translation dies in legal friction. Hold it too loose and you lose the moat and, worse, the patient trust that makes the moat possible. That framing is the trap.
Protection and translation are not opposed. Protection is the bearing the flywheel spins on. The data and IP moat is the very thing that lets your assets beat the industry's brutal base rates on the way to the bedside. Lock it down for compliance theater and you've missed the point; lock it down because it is your edge and you've found the strategy.
The rest of this guide builds that argument as an operating system: a flywheel (Chapter 02), the deal that monetizes it (03), the two protection systems that power it (04–05), and the governance and people choices that keep it from spinning into a doom loop (06–08).
The factual spine is sourced to primary references throughout — BIO/Informa on attrition, the Congressional Research Service on Bayh-Dole, FDA on real-world evidence, and the IOM on institutional conflict of interest. Two headline figures are flagged in-text as contested.
The edge: why a health system can win this game #
Start with the base rates, because they are the reason most therapeutics fail and the reason your edge matters.
Oncology is worse — roughly a 5% likelihood of approval from Phase 1. The $2.6B figure from Tufts is the number everyone quotes, but be honest about it: it capitalizes the cost of failures and the cost of capital, it's in 2013 dollars, and critics argue out-of-pocket cost is far lower. Use it as an order of magnitude, not a budget line.
The one number that should reorganize your strategy
Inside the same BIO dataset is the figure that justifies a health-system engine existing at all:
Programs that use a selection biomarker reach ~25.9% likelihood of approval from Phase 1, versus ~8.4% without one. That is roughly a three-fold improvement in the odds of reaching the bedside — driven by knowing which patients to treat.
A health system's longitudinal records, biospecimens, and bedside clinician insight are exactly the raw material for finding the right patients and the right biomarkers. So the data moat is not a defensive asset you protect out of caution. It is the mechanism by which your assets beat the base rates. That single fact reframes every protection decision downstream: you are guarding the thing that triples your probability of success.
The "valley of death" between discovery and clinic is mapped by NIH-funded policy research; the national translational infrastructure lives in NCATS' CTSA program of 60-plus academic hubs. If your system holds a CTSA hub, that network is part of your edge.
The translational flywheel #
A flywheel, in Jim Collins' sense, is a system where each turn makes the next turn easier and momentum compounds. The translational engine is a five-stage flywheel, and what powers it sits in the hub: the data and IP moat.
- Clinical reach generates proprietary data and biological insight. Patients seen become de-identified outcomes, biospecimens, and a front-row view of unmet need.
- Insight and data surface translatable discoveries. Targets, biomarkers, patient-selection hypotheses — the 3x lever from Chapter 01.
- The engine de-risks discoveries into protected assets. Invention capture plus IND-enabling work, carried to a defined handoff point.
- Protected assets attract partners and capital on favorable terms. The license-out: upfront, milestones, tiered royalties, and retained rights.
- Returns and retained rights fund more discovery and improve care — back to stage 1, now with more capital, reputation, and data.
The two doom loops
Collins' flywheel has an evil twin: the doom loop, where each turn makes the next harder. There are two ways to invert this one, and the whole strategy is about staying out of both ditches.
Notice that both ditches end the same way: the research never reaches the bedside. Over-protection kills translation just as surely as a trust-destroying breach does. That symmetry is why "protect" and "translate" are one problem, not two.
Value capture & the deal #
A captive engine does not try to own the asset all the way to market. That is a different, far more capital-intensive business. Instead it de-risks to a value-inflection point — typically IND-enabling completion or a Phase 1 readout — where the asset's value steps up and a partner can shoulder the decade-long, billion-dollar late-stage burden.
The deal architecture to insist on
The cash terms are standard: upfront payment, development/regulatory/sales milestones, and tiered royalties. Structure the milestones so you are paid for the de-risking you actually performed. The part academic deals routinely leave on the table is the retained rights:
- Field-of-use carve-outs — keep rights in indications the partner will not pursue.
- Right to treat your own patients — guaranteed access for your system's population.
- Manufacturing or co-development options — for capabilities you want to build in-house.
- Reach-through governance — so a platform discovery is not quietly signed away inside a single-product deal.
The highest-value academic IP in history has often been horizontal — an enabling method the whole field must license — not a single vertical product. A captive engine should consciously hunt for platform/enabling IP: a method, a manufacturing process, a biomarker panel. One horizontal layer can out-earn any single asset and keeps paying as the entire field grows around it.
The real-world template for the structure exists in public view: an academic immunotherapy discovery licensed to a large pharma partner, which supplied the manufacturing scale and global commercialization to carry it to the first FDA-approved gene therapy for cancer (2017). Bench discovery, exclusive license, partner-run late stage. That is the captive-engine deal.
IP architecture #
The mandate and the mechanics come from the Bayh-Dole Act (1980). An institution may retain title to inventions made with federal funds, but in exchange must disclose them, try to commercialize them, share royalties with inventors, and grant the government a nonexclusive license plus march-in rights.
March-in rights have never been successfully exercised by any agency in 40-plus years. The 2023–24 proposal to let price trigger march-in is unsettled, contested policy — do not plan as if it is settled law.
Four design principles
1 · Make capture frictionless, not bureaucratic
The most common translation-killer is a scientist who publishes before filing. The U.S. grants a one-year grace period, but most foreign jurisdictions apply absolute novelty — a conference abstract or preprint can destroy ex-US patentability the day it posts (Finnegan on the AIA grace period). The rule is simple: file before public disclosure. Embed tech-transfer liaisons in the labs so the answer is "file Tuesday, present Thursday," never "choose one."
2 · Layer the protection
Stack the rights: composition-of-matter patent (the crown jewel) → method-of-use → formulation → manufacturing know-how held as trade secret. Then add regulatory exclusivity on top — orphan (7 years), new chemical entity (5 years), biologics (12 years).
3 · Patents for the molecule, trade secrets for the data and process
Therapeutics must be disclosed to win FDA approval, so patent them. But proprietary datasets, cell-line know-how, and models are often better held as trade secrets — protection with no disclosure and no clock. This is the under-used lever that turns your data moat into licensable IP.
4 · Keep the chain of title clean
Settle inventorship — a legal fact about who conceived the claims, distinct from ownership — early; named-inventor errors can invalidate a patent. Govern material transfer agreements so shared samples don't create reach-through claims by another institution. IP fragmented across many owners is what blocks freedom-to-operate later, when it is expensive to fix.
AUTM's annual Licensing Activity Survey is the standard yardstick for disclosures, licenses, patents, and startups — use it to set targets for the IP function.
Data architecture & the three postures #
This is the central knob of the whole strategy: how much, and how, do external partners touch patient data?
First, the lawful tiers you are working within. Under HIPAA, data can be fully de-identified (Safe Harbor's 18 identifiers removed, or Expert Determination), shared as a Limited Data Set under a Data Use Agreement, or used identifiably under broad consent plus IRB review (the 2018 Common Rule). On top of that sits privacy-preserving technology — trusted research environments, federated queries, tokenization, differential privacy, synthetic data — which turns sharing from an on/off switch into a dial.
Three postures on the dial
| Dimension | A · Fortress | B · Governed Gateway | C · Marketplace |
|---|---|---|---|
| Mechanism | Data never leaves; partners run federated queries / TRE only | Privacy-preserving default; deeper access case-by-case via data-use committee | Broad de-identified licensing & data deals |
| Speed to bedside | Slowest | Medium (tunable) | Fastest |
| Value capture | Lowest near-term | Medium, compounding | Highest near-term |
| Partner appeal | Low (friction) | Medium–High | High |
| Trust / reputational risk | Lowest | Low–Medium | Highest |
| Moat durability | Highest | High | Erodes (data leaves) |
| Optionality | Medium | Highest | Lowest |
Game it out
Model it as a repeated game with two counterparties: patients and partners. Fortress maximizes the trust payoff but forgoes the deal payoff. Marketplace inverts that. The decisive structural fact: the game with patients is repeated, and one breach or one steering scandal is a defection that ends every future round — losing data access drains the flywheel's fuel for good.
Now stress each posture against the scenarios that actually arrive: a breach event, a competitor's splashy data deal, a sudden regulatory tightening, a blockbuster discovery you would hate to have given away cheaply. The posture that survives the most of these is the one that preserves optionality — the Governed Gateway. It lets governance, not a one-time architectural bet, do the work of matching exposure to opportunity.
The subtle, correct answer: do not set one institutional posture. Highly re-identifiable, sensitive data (germline genomics, psychiatric, reproductive) → Fortress. Aggregated, low-risk de-identified outcomes → Marketplace. Everything between → Governed Gateway. Leaders who pick one posture for the whole institution either strangle value (Fortress everywhere) or overexpose trust (Marketplace everywhere).
Posture is per-asset, not per-institution. One blunt institutional setting either strangles value or overexposes trust.Chapter 05 · The executive insight
Operationalize this with a data-asset register that tags every asset with a posture, a lawful basis, and a re-identification risk tier — governed by a standing committee that can move an asset between tiers as risk and opportunity shift. Run every asset through the same two-question tree:
Two things have to be written down in your institution's language: (a) your bright lines — the data uses that are never okay regardless of the deal; and (b) your default posture per asset class. Rather than leave these as blanks, Chapters 15–16 derive both from what MD Anderson, Memorial Sloan Kettering, and St. Jude have actually done — a starting policy you adjust, not a blank page.
The privacy-preserving tooling is real and buyable today: trusted research environments and federated EHR networks let analysis run on the data in place. And the FDA's Real-World Evidence framework means this data can support new indications and post-market evidence — though note the substantial-evidence bar for approval is unchanged.
Governance & the COI counterweight #
A health system that both treats patients and profits from therapies manufactures an institutional conflict of interest by design — royalties on investigational products, equity in sponsors, officials with financial stakes.
The same Bayh-Dole statute that mandates you commercialize and share royalties is what creates the conflict. So conflict-of-interest management is not friction bolted onto the model. It is the structural counterweight the model requires in order to stay legitimate. Treat it as load-bearing, not as compliance overhead.
Structure
- Separate the commercialization entity's governance from clinical and research oversight — a subsidiary or LLC with its own board insulates clinical decisions from the commercial interest.
- Firewall the clinical decision from the commercial interest: independent IRB review and independent trial monitoring wherever the system holds a financial stake, with transparent disclosure to patients.
- Three standing committees: a Data-Use Committee (governs Chapter 05), an IP Committee (disclosure, ownership, licensing), and Joint Steering Committees per partnership.
- Explicit decision rights: name who can approve a data deal, sign a license, and kill a program.
The perception that patients are steered toward the system's own products is the single fastest trigger of the over-share doom loop. Govern as if a journalist will read the minutes.
Steering the people without stifling them #
The governing principle for people is the same one used for data: bright lines and fast lanes. Bright lines are the few things that are never okay — anything that breaks trust. Fast lanes are pre-cleared paths for everything else, so the default answer is "yes, here's how," not "no." Three constituencies, three failure modes to steer around.
1 · BU leadership & strategy — own the flywheel, not every shiny asset
Their failure modes are chasing every discovery and over-indexing on near-term licensing revenue, which starves stage 5. Steer with a portfolio thesis, hard stage-gates with kill criteria, and a metric that rewards flywheel velocity (assets reaching the inflection) over raw deal count.
2 · Scientists & clinician-investigators — a fast lane, not a gauntlet
They are driven by discovery, publication, patients, and autonomy. Heavy IP and legal process kills curiosity and speed, and they will route around it. Steer by making IP capture frictionless (embedded liaisons, fast disclosure, "publish and patent — file before you present"), aligning incentives (inventor royalty share, recognition), and teaching the one-year-bar discipline without policing academic freedom.
3 · Cross-functional (legal / compliance / BD / commercial) — enable velocity within bounds
Their failure mode is becoming the "department of no" that brakes the flywheel. Reframe the job as clearing the path: standard deal templates, pre-cleared data-access SOPs, tiered playbooks so routine cases never need a bespoke negotiation. They own the bright lines; they should automate the fast lanes.
Bright lines and fast lanes is the same answer as the flywheel thesis, applied to humans. Protect the few things that would break trust; make everything else fast. That is how you protect without stifling.
Gates, metrics & the board's decision checklist #
Stage gates — kill early, kill cheap
It is a portfolio, and most assets should die. That is not failure; it is the design.
Discovery → Target validation → IND-enabling → Phase 1 → LICENSE
└ each gate: explicit go/kill criteria + a named decision-owner ┘
Metrics that match the thesis
- Flywheel velocity — assets advanced per year to the inflection point.
- Biomarker-attach rate — % of programs with a selection biomarker. This is the 3x lever; make it an explicit, resourced target.
- Disclosure-to-filing time — a proxy for fast-lane health.
- Retained-rights value — not just upfront cash per deal.
- Trust ledger — breaches, COI incidents, patient-consent rates. Leading indicators of doom-loop risk.
The board's seven-question checklist
- Are we hunting platform/enabling IP, or only single-product assets?
- Is our biomarker-attach rate an explicit, resourced target?
- Do we have a data-asset register with per-asset postures — or one blunt institutional posture?
- Is IP capture a fast lane (file-before-present) or a gauntlet scientists route around?
- Is the commercialization entity's governance separated from clinical and research oversight?
- Could a journalist read our COI minutes and conclude patients are not steered toward our own products?
- Do our metrics reward flywheel velocity and retained rights, or vanity deal count and upfront cash?
If the answers trend "no," the unit is drifting toward a doom loop regardless of how good the science is. Keep the flywheel turning; stay out of both ditches; protect the moat because it is how the bench reaches the bedside.
The two funnels #
Everything up to here was strategy. From here down is how you actually run the thing, because this is a new business line and the org has no muscle memory for it yet. Start with the single most important operational fact: a captive engine runs two funnels at once, joined by the development pipeline in the middle.
Track licensable assets on the shelf ÷ active partner conversations. Too many assets, too few conversations → you're under-investing in BD and assets are aging on the shelf. Too many conversations, too few assets → BD is writing checks the science can't cash, and you'll burn partner credibility. A healthy new unit keeps both funnels filling in rough proportion.
The deal funnel & funnel-math #
Out-licensing is B2B enterprise sales. The "customer" is a pharma or biotech partner; the "product" is a de-risked asset plus its data dossier; the sales cycle runs 6–18 months. Run it with the same rigor a SaaS company runs new logos: defined stages, exit criteria per stage, a CRM, and backward funnel-math.
The seven stages
| Stage | Exit criterion (how it advances) | Owner | Artifact |
|---|---|---|---|
| 1 · Target / account map | Partner fits the asset's ideal-partner profile (therapeutic area, modality, pipeline gap, deal appetite) | BD + strategy | Target list, ICP |
| 2 · Outreach / first meeting | Partner takes a non-confidential meeting (warm intro or conference) | BD | Non-conf one-pager / deck |
| 3 · CDA / NDA | Confidentiality executed; confidential data can flow | BD + legal | CDA template |
| 4 · Evaluation / diligence | Partner's eval team works the data room and validates the asset | BD + science + IP | Data room, dossier |
| 5 · Term sheet | Non-binding agreement on economics & structure | BD + finance | Term-sheet template |
| 6 · Definitive agreement | Legal redlines closed; the long pole | Legal + BD | License agreement |
| 7 · Signed / closed | Executed; transition to alliance management | Alliance mgmt | Joint steering charter |
Funnel-math — work backward from the goal
You can't manage what you don't quantify. Pick the annual deal target, apply stage conversion rates, and the top-of-funnel volume you need falls out. Illustrative shape (calibrate to your own data — these are planning heuristics, not benchmarks):
Every opportunity carries a stage, a probability-weighted deal value, a next action, and an owner. Forecast = Σ(deal value × stage probability). Review the weighted pipeline monthly. Two leading indicators predict a dry year a quarter early: stage-2→4 conversion falling (your story isn't landing) and aging in stage 6 (legal is the bottleneck — staff it).
Stage 2 lives or dies on a non-confidential one-pager — enough to excite without disclosing patentable detail (remember the file-before-disclose rule from Chapter 04). Conferences (the big January healthcare investor week, the major biotech convention) are where stage-2 volume is sourced. Treat them as your top-of-funnel events and prep the target list weeks ahead.
Stage-gate project management #
The development pipeline is a project-management system. Each asset is a project; the stage-gate (phase-gate) method governs how it advances. Borrowed from new-product development, adapted to therapeutics.
Gates and decisions
Each stage has defined entry deliverables, an owner, a budget envelope, and a timeline. Each gate has explicit criteria, a named gatekeeper (or gate committee), and a cadence. The discipline is that a project cannot skip a gate, and a gate review must be able to say "kill" without it being a career event for anyone.
The per-asset project kit
For cell and gene therapies the bottleneck is almost always GMP manufacturing — transferring an academic bench process to a compliant production process. It is the item that most often blows the timeline and is the reason many academic assets need a pharma partner's scale (the canonical immunotherapy deal turned on exactly this). Map the long pole at the charter stage, not at the gate where it surprises you.
RACI for a translational project
Ambiguous ownership is the quiet killer of a new unit. A simple RACI per decision class removes it:
| Decision | Responsible | Accountable | Consulted | Informed |
|---|---|---|---|---|
| Science / experiments | PI / project scientist | Scientific lead | Tech-transfer | PM |
| IP filing / strategy | Tech-transfer | IP committee | PI, outside counsel | BD |
| Gate go/kill | PM (convenes) | Gate committee | Science, BD, finance | All |
| Data access / sharing | Data steward | Data-use committee | Privacy, legal | PM, BD |
| Deal terms | BD | BU head / board | Finance, legal, science | PI |
Portfolio scoring & kill discipline #
You cannot fund everything, and the temptation in a new unit is to spread thin to look busy. Resist it with an explicit scoring model that ranks assets and a culture that makes killing normal.
The scoring rubric
Score each asset 1–5 on each dimension, weight, and rank. Weights are yours to set — they encode the unit's strategy — but a defensible starting set:
| Dimension | Question | Weight |
|---|---|---|
| Translatability | Is there a selection biomarker / clear patient population? (the 3x lever) | 20% |
| Unmet need / market | How big is the gap this fills? | 15% |
| IP strength & FTO | Defensible claims, clean freedom-to-operate? | 15% |
| Partnerability | Will a partner pay for it at the inflection? | 15% |
| Scientific merit | Is the biology real and reproducible? | 15% |
| Strategic fit | Does it match the system's clinical strengths? | 10% |
| Capital & time to inflection | What will it cost, how long to the handoff? | 10% |
Most assets should die — that is the portfolio working, not failing. Pre-commit kill criteria before a project starts, so killing is executing a prior decision, not making a fresh painful one. "Fast fail, fail cheap" frees capital for the winners. A new unit that can't kill clogs its pipeline and starves its best assets — the over-hoard doom loop in miniature.
Portfolio balance: diversify across risk and time horizon, but concentrate around the clinical areas where your data moat is deepest. A focused portfolio in two or three therapeutic areas beats a scattered one — focus is what compounds the flywheel's data advantage.
Standing it up: the first 18 months #
A new business line needs a launch sequence, not a big-bang. Build credibility with early wins while the machinery comes online.
| Phase | Focus | Key moves |
|---|---|---|
| 0 · Found (mo. 0–3) | Mandate & scaffolding | Charter, entity structure (subsidiary/LLC), governance + COI framework, seed budget, hire the BU head. |
| 1 · Build the funnels (mo. 3–9) | Machinery + first portfolio | Invention-disclosure intake & triage; first portfolio scored; hire core team (BD, IP/tech-transfer, PM, scientific lead); stand up the data-use committee + data-asset register; deploy the tooling stack. |
| 2 · First deals (mo. 9–18) | Proof + credibility | First IND-enabling projects through gates; first partner conversations → first term sheet; metrics dashboard live; first board review; land a marquee partnership or a first license, however small. |
The founding team — hire in this order
- BU head — translational + commercial fluency; carries the thesis and the quality bar.
- BD lead — runs the demand funnel; comes with a partner rolodex.
- IP / tech-transfer lead — runs capture; the file-before-disclose discipline lives here.
- Scientific / translational lead — runs the supply funnel and triage.
- Portfolio PM — runs the gates and the cadence; the operating backbone.
- Then: alliance manager, data steward, finance partner, regulatory advisor (often fractional at first).
Nothing buys a new unit institutional permission like a visible early result — a first signed license, a named pharma partnership, a marquee grant. Deliberately pick one near-term, winnable asset to chaperone to a public milestone in the first 18 months. Credibility is capital, and the flywheel needs a first push.
Operating cadence & tooling #
The meeting cadence (the heartbeat)
| Rhythm | Meeting | Purpose |
|---|---|---|
| Weekly | Project stand-ups + BD pipeline review | Unblock the critical path; advance opportunities a stage. |
| Monthly | Portfolio review | Re-score, reallocate, surface kills early. |
| Quarterly | Gate reviews + board update | Formal go/kill/hold/recycle; governance. |
| Annual | Strategy & posture review | Re-set the portfolio thesis and the per-asset data postures. |
The tooling stack
One source of truth per object (one CRM, one portfolio tool) — no shadow spreadsheets. One page per asset — a living summary anyone can read in two minutes. A decision log — every go/kill/hold and every posture change, dated and owned, so the unit learns instead of re-litigating. Stage-gate discipline — no skipped gates, and "kill" is always on the table. These four are cheap to start and brutally expensive to retrofit; install them in month one.
Two funnels feeding one shelf, governed by gates, sold through a pipeline, protected by a moat that is also the edge — and a flywheel that turns because protection and translation were built as one job, not two.
What worked: three cancer centers #
The strategy above is not theory — three premier cancer centers have run it, and between them they form a natural experiment in the three postures. St. Jude shares by default but governs in tiers; MD Anderson monetizes governed access without letting data leave; Memorial Sloan Kettering is the field's most successful IP monetizer and the source of its sharpest cautionary tale. Each row below is posture-tagged — Fortress, Governed Gateway, Marketplace — and cited.
MD Anderson — build the moat in-house, sell governed access
| Move | Year | What it teaches | Posture |
|---|---|---|---|
| APOLLO + Translational Research Accelerator | 2015– | A Moon Shots platform standardizes longitudinal biopsies + genomic profiling into a secure internal warehouse (~250k patients). Build the consented data moat in-house first — own the warehouse, not a vendor. src | Fortress |
| EMD Serono APOLLO access | 2016 | First external partner granted committee-governed, time-boxed access to APOLLO for its I-O compounds — data never leaves. Monetize access, not the data. src | Gateway |
| AACR Project GENIE (founding member) | 2017 | Pooled clinical-grade tumor-genomic data released openly through a neutral consortium. Commoditize the low-re-id-risk de-identified layer; keep the assay and patient relationship. src | Market |
| IACS / Therapeutics Discovery → Ipsen (GLS1 inhibitor IPN60090) | 2018 | The captive engine in the flesh: an internal small-molecule discovery group de-risks to the clinic, then licenses to Ipsen at the inflection while retaining a collaboration role. src | IP |
| IACS-010759 Phase 1 discontinued | 2022 | The flagship OXPHOS inhibitor was killed — narrow therapeutic window, dose-limiting toxicity — and published honestly. Kill cheaply; a discovery win is not a clinical win. src | IP |
| IBM Watson for Oncology | 2012–17 | Bright line. ~$62M, never reached clinical use; a UT audit found procurement violations and a related-party leader who structured spend under the board-approval threshold. Validate AI on structured data before scaling; never let related parties evade oversight. src | — |
| NIH foreign-influence terminations | 2019 | Bright line. Faculty removed partly for breaching the confidentiality of NIH grant peer review. Enforce confidentiality of third-party data even against star faculty — and without profiling, a trap of its own. src | — |
Note: ORIEN / Total Cancer Care / M2Gen belong to Moffitt and Ohio State, not MD Anderson — a common misattribution. MD Anderson's analogs are APOLLO, GENIE, and the Institute for Data Science in Oncology.
Memorial Sloan Kettering — the IP machine, and the bright line it taught the field
| Move | Year | What it teaches | Posture |
|---|---|---|---|
| cBioPortal + MSK-IMPACT public release | 2017 | Released ~10,000 prospectively sequenced tumor profiles openly via a platform MSK built. Open the layer with no exclusivity value (sets the assay as field standard); keep the proprietary layer. src | Market |
| AACR Project GENIE (major contributor) | 2015– | Safe-Harbor de-identified, click-through terms that prohibit re-identification and redistribution. Govern by terms-of-use, not just by enclave. src | Gateway |
| Paige.AI exclusive slide license | 2018 | The bright line. ~25M patient pathology slides licensed exclusively to a startup in which MSK insiders and board members held equity — no arm's-length valuation, no competitive process, and patients were never told. Three lines crossed at once. src | F→M misused |
| Juno Therapeutics (CAR-T spinout on the SKI patent) | 2013→ | Foundational CD19 CAR-T IP licensed exclusively to a well-capitalized spinout; Juno → Celgene → BMS (~$9B). Retain the foundational patent at the institute so you can enforce it. src | IP |
| Kite/Gilead patent verdict | 2019–20 | Jury found willful infringement; award grew to >$1.1B + ongoing royalty — later reversed by the Federal Circuit on validity (2021). Foundational patents only pay if you litigate, and a verdict isn't cash until appeals end. src | IP |
| Y-mAbs / DANYELZA (naxitamab) | 2020 | Antibody licensed to a single-asset spinout; when Y-mAbs sold its Priority Review Voucher, MSK took 40% of net proceeds. Capture ancillary value events, not just product royalties. src | IP |
| 2019 COI overhaul (post-Baselga/Paige) | 2019 | The remedy. After a CMO's undisclosed ~$3.5M in industry payments, MSK barred execs from drug-company boards, prohibited board members from investing in startups MSK helped found, and banned personal equity for representing MSK on a board. src | — |
St. Jude — share by default, govern in tiers
| Move | Year | What it teaches | Posture |
|---|---|---|---|
| St. Jude Cloud | 2018– | The per-asset blueprint: an open visualization tier, a free registered tier, and a controlled tier for raw genomic data behind per-cohort data-access committees — and raw germline data is vended into a private workspace, never downloaded out. One institution, three postures, by data type. src | Gateway+open |
| Pediatric Cancer Genome Project (with WashU) | 2010–15 | $65M WGS effort that released validated results openly at no cost while gating raw reads. Interpreted results to the field; identifiable raw reads to the committee. src | Market/Gate |
| WHO Influenza Collaborating Center | decades– | Shares viral material under the WHO PIP Framework's standard MTAs and benefit-sharing. You can share the most sensitive material on earth — if the transfer terms and benefit flows are pre-negotiated. src | Gateway/MTA |
| St. Jude Global / GICC | 2018– | $15M to co-found the WHO childhood-cancer initiative; open sharing of knowledge and care protocols. Low-re-id-risk aggregate knowledge defaults to open. src | Market |
| 4-1BB CAR-T → Juno (and the Penn/Novartis dispute) | 2003/13 | A single foundational design (4-1BB costimulation, behind Kymriah) fragmented across institutions and licensees produced years of litigation, settled 2015. Keep the chain of title clean; platform IP earns across a whole class. src | IP |
| MB-107 (XSCID) → Mustang Bio | 2018 | License-at-inflection after in-house human proof-of-concept: ~$1M upfront, up to $13.5M milestones, mid-single-digit royalties — with the manufacturing cell line licensed as a separate IP layer. src | IP |
| ALSAC funding + $200M medicines platform | 2021 | Bright line. ~89% philanthropy funding structurally mutes the incentive to steer patients toward its own products. The asset St. Jude guards is donor and patient trust — the thing that would collapse the flywheel if breached. src | Trust |
Read together, the three agree on more than they differ. Open the de-identified research layer (it builds standing at near-zero exclusivity cost). Keep raw, re-identifiable data in an enclave and vend compute to it. Retain foundational patents at the institution so you can enforce them, and license exclusively to well-capitalized spinouts. And the one that detonates when ignored: never let institutional fiduciaries hold equity in the party you sell patient-derived assets to.
Bright lines & posture defaults #
Here are the two decisions the data chapter left open, now answered from the precedent in Chapter 15. Treat these as a starting policy you adjust to your institution, not a finished rulebook — but every line traces to something a peer learned, often the hard way.
Decision 1 · Your bright lines — the "never" list
- No exclusive license of a patient-derived data or IP asset to any party in which institutional fiduciaries hold equity. (Paige.AI; MSK 2019 reform.)
- No exclusive grant of a patient-derived asset without an independent, arm's-length valuation and a competitive process. (Paige.AI — no valuation, no bidding.)
- No commercialization of patient data without consent transparency. Patients are told their data and tissue can be used for research/commercial work, and opt-outs are honored. (Paige.AI — patients never told; ~30–40% routinely decline.)
- No personal equity or compensation for representing the institution on a company board; mandatory disclosure of all industry ties. (MSK 2019; Baselga.)
- No deployment of AI/analytics on clinical data that isn't structured and validated; competitive procurement, no related-party spend structured under board thresholds. (IBM Watson.)
- Re-identifiable raw genomic / germline data never leaves the enclave — vend compute to the data, don't ship data to the partner. (St. Jude Cloud.)
- Share biological materials and sensitive data only under pre-negotiated transfer terms and benefit-sharing (MTAs/SMTAs); protect confidential third-party data (peer review, others' unpublished work). (WHO PIP; MD Anderson 2019.)
- Never steer patients toward the institution's own products. Donor and patient trust is the load-bearing asset; protect it above any single deal. (St. Jude; Chapter 06.)
Decision 2 · Default posture per asset class
Run each asset through the Chapter 05 decision tree, but start from these evidence-based defaults:
| Data / asset class | Default posture | Why — and who proved it |
|---|---|---|
| Identifiable EHR / direct PHI | Fortress | Lives in the internal warehouse; access is the dial. (MD Anderson APOLLO.) |
| Raw germline / whole-genome & exome sequence | Governed Gateway | Controlled tier, per-cohort data-access committee, compute vended to the data. (St. Jude Cloud.) |
| De-identified somatic tumor-genomic + outcomes | Marketplace | Open via consortium under no-re-ID / no-redistribution terms. (AACR GENIE; MSK cBioPortal.) |
| Aggregate / visualization-level results | Marketplace / open | No exclusivity value; open it to build standing. (St. Jude PeCan; PCGP results.) |
| Whole-slide pathology image archive | Fortress → Gateway only if non-exclusive | Fortress by default; share only non-exclusively, consented, arm's-length. (Paige.AI lesson.) |
| Biospecimens / biological materials | Governed Gateway | Under MTA/SMTA with benefit-sharing. (WHO PIP Framework.) |
| Real-world clinico-genomic for a pharma R&D partner | Governed Gateway | Time-boxed, purpose-limited, committee-approved access; data stays inside. (MD Anderson–EMD Serono.) |
| Clinical knowledge / care protocols | Marketplace / open | Low risk, high mission value. (St. Jude Global.) |
Two mechanisms operate the whole table: a data-asset register that tags every asset with a class, posture, lawful basis, and re-id risk tier; and a data-access committee (per cohort or per class, the St. Jude model) that approves access and can move an asset between tiers. Bolt on two hard preconditions before any exclusive grant — an insider-equity firewall and an independent valuation (the MSK reforms) — and the Paige.AI failure cannot recur by construction.
Decisions 1 and 2 are now answered with precedent rather than left blank. Adjust the bright lines to your institution's risk appetite and the posture defaults to your data classes — then write them into the data-asset register and the committee charter, and the strategy stops being a document and becomes how the unit operates.
The TDIE model #
If Chapter 15 asked what worked, this chapter is the how — the single clearest working template for the IP-capture function your engine needs. St. Jude's Technology Development & Industrial Engagement (TDIE) office is worth copying almost line for line, because one office owns the entire stack — patenting, licensing, material-transfer agreements, and industry engagement — and is the sole party authorized to bind the institution. No fragmentation between legal, contracts, and business development, which is exactly the IP-fragmentation failure Chapter 04 warns about.
The signal is in the rename and the hire. The old Office of Technology Licensing became TDIE, and in early 2024 St. Jude created its first-ever SVP of Technology Commercialization and filled it with Lisa Jordan — a life-science VC and entrepreneur (Wharton MBA, prior Executive-in-Residence at a university commercialization center), not a career licensing attorney. Her brief: recruit seasoned entrepreneurs and build an accelerator to de-risk assets toward regulatory approval. The move is from "license what walks in the door" to "build and de-risk companies" — the captive-engine thesis, staffed.
The disclosure-to-commercialization workflow
How the office is built
Two structural choices make it work. First, one mandate, one signatory: TDIE alone negotiates and authorizes every technology-transfer agreement and every material transfer into or out of the institution. Second, a two-layer leadership stack: a VC/operator SVP on top to drive company-building and de-risking, sitting over career licensing counsel (JD/MBA) who run patent prosecution and deal mechanics — and the SVP reports near the very top (to a deputy director), not buried three levels down. Keep the lawyers for the deals; add the operator for the companies.
The disclosure-timing gate — the core control
This is the mechanism to copy first. At intake, TDIE asks two questions: (1) the funding source (any federal money triggers Bayh-Dole — elect title, government keeps a non-exclusive license); and (2) whether the invention has already been publicly disclosed, because prior disclosure can destroy patentability. The rule is file before the scientist publishes. And patenting is selective and instrumental — in TDIE's own framing, "patents are the glue that brings us together" with an industry partner, so where eligibility law makes a patent futile (U.S. diagnostics, software) they skip it or file abroad first. The patent is a means to a partnership, not an end. This is how an open-science institution that shares genomic data by default (St. Jude Cloud) still captures the IP that matters: openness is the default; patenting is the deliberate exception on translatable assets, governed at the disclosure gate.
Two value levers most offices miss
What the office has shipped
| Deal | Year | The lever it teaches |
|---|---|---|
| 4-1BB CAR-T → Juno | 2003 filed / 2013 licensed | File the costimulatory-domain patent early and cheap; it became table-stakes for an entire CAR-T class (behind Kymriah). Platform IP out-earns any single product. src |
| XSCID gene therapy → Mustang Bio | 2018 | License a clinical-stage gene therapy to a small dedicated biotech at the inflection. (The licensee later struggled — the structure is the lesson, not the outcome.) src |
| Cytegrity cell line → CSL Behring | 2019 | License the manufacturing/process IP separately from the drug — a second revenue lever per program. src |
| Pneumococcal vaccine → Blue Water Vaccines | 2020, expanded 2022 | Exclusive worldwide license of a platform to a startup, then expand the deal as the relationship matures. src |
| Reverse-genetics system → MedImmune (FluMist) | FDA 2006 | For a public-health tool, license non-exclusively and allow sublicensing — broad dissemination over exclusivity when the mission demands it. src |
The copyable blueprint
- One office owns the whole stack and is the sole signatory — patenting, licensing, MTAs, industry engagement. No fragmentation.
- Name it for the mandate — "Technology Development & Industrial Engagement," not "Licensing." Build-and-partner, not paper out the door.
- VC/operator on top, career counsel beneath, reporting near the top.
- Disclosure-timing gate at intake (funding source + prior disclosure; file before publish) — the control that lets open science and IP coexist.
- Patent selectively and instrumentally — the patent is the glue to a partner, not an end; skip where eligibility is futile.
- Three-track decision per asset — license, collaborate, or startup+accelerator — chosen by de-risking needed.
- Build an in-house accelerator to de-risk pre-clinical assets rather than dumping raw IP on the market.
- License process/manufacturing IP separately, and treat biological materials as first-class licensable assets under UBMTA.
- Share net income with inventors, and keep the institution financially independent of licensing revenue so it can take mission-first terms.
Deal financials (Juno, Mustang, CSL Behring, Blue Water) are undisclosed across the board — St. Jude is donor-funded and files no public financials. Hard portfolio numbers are ~2019 vintage (>50 disclosures/yr, ~100 income-generating inventions). The exact OTL→TDIE rename date and whether St. Jude takes equity in spinouts are not confirmable from public sources. Confirm the inventor royalty-split policy and any equity practice directly with TDIE before modeling them.
This is the operating spec for the IP function behind Chapter 04 (IP architecture) and the "fast lane" for scientists in Chapter 07. The disclosure-timing gate is the same file-before-present discipline; the three-track decision is how your stage-gate (Chapter 11) chooses an exit per asset.