SD-BY-DP-v0.9 – Customer Commons

Version 0.9 See the errata page for any corrections and the date of change

Legal

About SD-BY-DP and Customer Commons

Customer Commons is not a law firm and does not provide legal services. Publishing SD-BY-DP does not create a lawyer-client or other professional relationship. This context is provided for public review during version 0.9 and without legal advice.

Using Customer Commons Public Agreements

SD-BY-DP provides terms that an authorized adopter may use for service delivery with a data-portability obligation, while prohibiting analytics, tracking, profiling, and third-party sharing of covered data. The following context is informational, is not exhaustive, and does not form part of the agreement.

Adopters should review the Human and Legal views and confirm that they have authority to apply the agreement.
Adopters remain responsible for applicable laws, contracts, and third-party rights.
The public should rely on the agreement text and the adopter’s implementation, not this summary alone.

Legal-Style Policy

Identifier: https://customercommons.org/myterm/SD-BY-DP/0.9/

Profile: https://w3id.org/dpv/mappings/odrl

Title: SD-BY-DP

Description: Term that requires Service Delivery, with an obligation for Data Portability, and prohibits Analytics, Tracking, or Profiling by 2nd and 3rd Party, and prohibits sharing any data with 3rd Party.

Conflict Rule: odrl:perm

1. Obligations (Mandatory Terms by the Assigner)

- Action: dpv-odrl:Processing
- Target: dpv-odrl:PersonalData

Constraint:

- Left Operand: dpv-odrl:Purpose
- Operator: odrl:eq
- Right Operand: p7012:ServiceDelivery
  - Assigner: p7012:Person
  - Assignee: p7012:Entity

Action: dpv-odrl:Share
Target: p7012:ServiceData
Assigner: p7012:Person
Assignee: p7012:Entity

2. Permissions (Allowed Actions)

(No explicit odrl:permission block is present — all actions are allowed via obligations and the odrl:perm conflict rule.)

3. Prohibitions (Disallowed Actions)

3.1. Analytics Prohibited

- Action: dpv-odrl:Processing
- Target: dpv-odrl:PersonalData

Constraint:

- Left Operand: dpv-odrl:Purpose
- Operator: odrl:eq
- Right Operand: p7012:ServiceAnalytics
  - Assignees: p7012:Entity, p7012:ThirdParty

3.2. Tracking Prohibited

Action: dpv-odrl:Tracking
Target: dpv-odrl:PersonalData
Assignees: p7012:Entity, p7012:ThirdParty

3.3. Profiling Prohibited

Action: dpv-odrl:Profiling
Target: dpv-odrl:PersonalData
Assignees: p7012:Entity, p7012:ThirdParty

3.4. Third-Party Sharing Prohibited

Action: dpv-odrl:Share
Target: dpv-odrl:PersonalData
Assignees: p7012:ThirdParty

4. Conflict Clause

This policy uses odrl:conflict odrl:perm, which means permissions override prohibitions.