Yes, Research Ethics Board approval that pertains specifically to the use of data being requested from the controlled data release (or an exemption letter), is required for researchers to gain access to data released under the controlled data release process.
External Researchers must possess an affiliation with an accredited academic institution, think tank, company, or other research organization. External Researchers can be local, national, or international members of the general science or health care community.