Do the requirements of a Data Use Agreement override Harvard’s CI and HRCI requirements?

Maybe. All research conducted at Harvard must comply with Harvard policies, even if the Data Use Agreement calls for lesser levels of protection. A data-use agreement may require additional protections, in which case the researcher must also meet the requirements in the data-use agreement.