SD-BY-A-v0.9 – Customer Commons

Version 0.9 See the errata page for any corrections and the date of change

Legal

About SD-BY-A and Customer Commons

Customer Commons is not a law firm and does not provide legal services. Publishing SD-BY-A does not create a lawyer-client or other professional relationship. This context is provided for public review during version 0.9 and without legal advice.

Using Customer Commons Public Agreements

SD-BY-A is published as a public beta for reviewing terms that require service delivery, permit first-party service analytics and Service Data sharing with the receiving organization, and prohibit third-party analytics, tracking, profiling, and third-party personal-data sharing. The following context is informational and does not form part of the agreement.

Review the Human and Legal views together.
Confirm that the adopter’s service-delivery, analytics, data-sharing, tracking, and profiling practices match the agreement.
The verified original SD-BY-A Turtle file is available as the machine-readable edition under Other formats.
The owner source document labels itself version 1.0 while this published public-beta record remains version 0.9; confirm the intended release before adoption.
Adopters remain responsible for applicable privacy, consumer-protection, contractual, technical, and other legal requirements.

Legal-Style Policy

Identifier: https://customercommons.org/myterm/SD-BY-A/0.9/

Profile: https://w3id.org/dpv/mappings/odrl

Title: SD-BY-A

Description: Term that requires Service Delivery and permits Analytics, and prohibits Analytics by 3rd Party, prohibits Tracking, or Profiling by 2nd and 3rd Party, and prohibits sharing any data with 3rd Party

Conflict Rule: odrl:perm

1. Obligations (Mandatory Terms by the Assigner)

Action: dpv-odrl:Processing
Target: dpv-odrl:PersonalData
Constraint:
- Left Operand: dpv-odrl:Purpose
- Operator: odrl:eq
- Right Operand: p7012:ServiceDelivery
  - Assigner: p7012:Person
  - Assignee: p7012:Entity

2. Permissions (Allowed Actions)

Action: dpv-odrl:Share
Target: p7012:ServiceData
Assigner: p7012:Person
Assignee: p7012:Entity

Action: dpv-odrl:Processing
Target: dpv-odrl:PersonalData
Constraint:
- Left Operand: dpv-odrl:Purpose
- Operator: odrl:eq
- Right Operand: p7012:ServiceAnalytics
  - Assigner: p7012:Person
  - Assignee: p7012:Entity

3. Prohibitions (Disallowed Actions)

3.1. Third-Party Analytics Prohibited

Action: dpv-odrl:Processing
Target: dpv-odrl:PersonalData
- Constraint:
  - Left Operand: dpv-odrl:Purpose
  - Operator: odrl:eq
  - Right Operand: p7012:ServiceAnalytics
    - Assignees: p7012:ThirdParty

3.2. Tracking Prohibited

Action: dpv-odrl:Tracking
Target: dpv-odrl:PersonalData
Assignees: p7012:Entity, p7012:ThirdParty

3.3. Profiling Prohibited

Action: dpv-odrl:Profiling
Target: dpv-odrl:PersonalData
Assignees: p7012:Entity, p7012:ThirdParty

3.4. Third-Party Sharing Prohibited

Action: dpv-odrl:Share
Target: dpv-odrl:PersonalData
Assignees: p7012:ThirdParty

4. Conflict Clause

This policy uses odrl:conflict odrl:perm, which means permissions override prohibitions.