Frequently Asked Questions
General
How many commitments are there?
There are now seven BD4D Commitments. In April 2024, we proposed eight commitments that could provide the foundation for a lightweight terms of service and model data sharing agreement. After an eighteen month process of engaging our own nonprofit and responsible tech community to learn more about how they work with data, in December 2025 we released a refined set of seven commitments as the foundation for v1.0 of the full BD4D Standard, published in January 2026.
Who should consider adopting the BD4D Standard? Is it mainly for organizations that collect data or provide tech and hosting for data? Or people who analyze the data or create AI models based on the data?
All of the above. Any organization that is ready to publicly commit to implementing the responsible data practices contained in the BD4D Standard should consider adopting it. The goal of the Better Deal is to have a simple set of commitments which work well wherever, and whenever, personal and sensitive data are being collected, analyzed, used, or shared. This includes the developers and vendors of technology that enables and hosts these data activities.
What is a BD4D Endorser? Who should consider endorsing the BD4D Standard?
A BD4D Endorser is an individual or organization that recognizes that the social sector needs a better deal for data, and believes that the BD4D Standard provides an important, shared foundation for ethical and trustworthy data practices. Any individual or organization that nonprofits look to for advice or leadership on best practices in nonprofit management, data governance, research, software, or technology should consider endorsing the BD4D Standard . This can include organizations that have become BD4D Adopters (which is an implicit endorsement), organizations that might not be ready or able to fully implement the BD4D Standard in their operations, as well as organizations and individuals that don’t actually collect nonpublic or sensitive data (such as many foundations and nonprofit associations). A BD4D Endorser does not need to take any action beyond agreeing to put their name behind responsible data governance and the BD4D Standard. If that’s you, please join us by selecting “Yes! I agree to be publicly acknowledged as a BD4D Endorser” on our contact form!
How do we officially adopt the Better Deal for Data?
Adopting the BD4D Standard is a self-guided process, and we have detailed the steps for adoption in the BD4D Playbook. We recommend reviewing the Readiness Questions, then following the steps in the Implementation Guide once you’re ready to do so. Once you’ve completed the process, we encourage you to link or post the Commitments from your website. We would also love to hear from you! You can tell us about how your organization has implemented BD4D in practice, and share any feedback you might have on how it can be improved, via this short form.
What is the difference between a BD4D Endorser and a BD4D Adopter?
Our goal is to greatly increase ethical data practices across the social sector, and we welcome public support in this mission. BD4D Endorsers have put their name behind the Better Deal for Data movement, recommending that all nonprofits consider adopting the BD4D Standard. BD4D Adopters have gone further by implementing the BD4D Standard in their day-to-day operations. Organizations can be BD4D Endorsers, or Adopters, or both. Some organizations that are planning to adopt the BD4D Standard may become an Endorser as a first step in the process of becoming a full BD4D Adopter.
How does the Better Deal for Data affect the people and communities from, and about whom, data is collected (sometimes called ‘data subjects’ or ‘data originators’)?
When an organization represents that it complies with the Better Deal for Data, it should reassure data subjects that their data will be stewarded ethically, responsibly, and transparently. There should be no surprises in the way their data is used!
Will the Better Deal effect change in donor or government funding requirements?
That is definitely a long range goal. We envision a time when any funder supporting projects that collect or use data from individuals and communities will require their grantees to adopt the Commitments or an equivalent data governance mechanism. Today, no organization working with children can be funded without an adequate child safeguarding plan: it is a prerequisite for donor funding in this field. Shared standards such as the Better Deal for Data will ensure that the data uses being funded are ethical ones, in all social service fields.
What We’re Building
How does the Better Deal work? Is it an automated tool or an app?
Are you building a data commons or a data trust?
How does the Standard apply to collecting social impact data – data collected by nonprofits and other social sector organizations to demonstrate that their efforts are having a positive impact on the people and places they serve?
How does a Better Deal apply to open data (and open models and open science)?
Does the Better Deal replace an Institutional Review Board (IRB)?
Compliance & Legal
Can you audit my [database][privacy policy][website] to see if it complies with the BD4D Standard?
While we do expect to informally consult with organizations in the process of adopting the Commitments, we don’t have plans for an auditing function. That said, we do hope that BD4D compliance will be added to the list of standards monitored by the robust field of cybersecurity, data protection, and privacy auditors that already exists!
Can I still be compliant with the Better Deal if I monetize my data or website?
Monetization is a complex subject, and we’ve published an issue paper exploring the question of good monetization and bad monetization. After all, most organizations which handle data do still need to find the money to pay for their staff and technology. Accepting donations or selling memberships would generally be compliant with the Better Deal, as long as personal data is not sold or exchanged with third parties beyond the minimum required for payment processing. On the other hand, trading or selling donor lists to a data broker would generally not comply.
Can I use AI tools like ChatGPT?
It depends. If an AI company trains their models on data submitted in a prompt or the information its tools are summarizing, using those tools to process confidential or sensitive data would not be compliant with the Better Deal. However, if the companies behind the tools offer products that do not retain that data, and the data is processed in a privacy-preserving way, it is likely to be compliant.
How is the Better Deal enforced?
The Better Deal is a set of binding promises between organizations that hold nonpublic data, and the people and organizations that data is about. As a result, the primary enforcement of the BD4D Standard is based on legally binding terms in an organization’s agreements with those constituents. We also expect that there will be other sources of pressure on organizations that publicly commit to the Better Deal principles but don’t actually comply with them.
How do we get certified as being compliant with the BD4D Standard?
While we are not setting up a certification program at this early stage, let us know if you think that there should be one.
My data has been collected by an organization that claims to be a BD4D Adopter, but I don’t believe they are following the Commitments. What should I do?
If you feel that an organization is failing to meet its responsibility as a BD4D Adopter, your first step should be to raise your concerns to that organization, clearly explaining how the BD4D Commitments are being breached. An important pillar of the Better Deal is community engagement, and an organization that adopts it should be prepared to respond and rectify the situation, either correcting its practice, or removing your data upon request. As the BD4D author and maintainer, we do not intervene in the relationship between an organization and its data stakeholders. However, if you’ve requested removal of Your Data from a BD4D Adopter, and they refuse to do so, we would like to know.
BD4D is a voluntary standard, and we expect that all organizations adopting Better Deal do so in good faith. Given its newness, we realize that there may be areas for improvement in how the Standard is written, and how it is put into practice, and invite your feedback on both.
Does the BD4D Standard provide or replace standard legal agreements like licenses or data sharing agreements? Will it make my organization compliant with (CCPA, DPDP, GDPR, LGPD, PIPEDA, etc.)?
Not at this time. There is such a wide variety of laws and regulations across regions, countries, and sectors that it would be impractical to propose a single, standardized data sharing agreement, license, privacy policy, or terms of service. That said, we have successfully implemented the Commitments in the Terraso Terms of Service, and the Tech Matters Privacy Policy. And, we do believe that it should be possible to implement the Commitments in the great majority of jurisdictions.
If regulations like HIPAA, FERPA, or GDPR apply to my organization, is there still a reason to adopt the Better Deal?
The short answer is yes. The BD4D Standard offers a foundation for broad data governance that these laws do not provide. It requires certain practices not addressed by these laws, for example prohibiting monetization of nonpublic data, or making research reports available to the people whose data contributed to the research.
At the same time, these laws often have other stringent requirements that are not addressed by the Better Deal. And we think that’s a good thing: there should be no problem with doing more than what BD4D requires when it comes to protecting your stakeholder data.