Frequently Asked Questions

General

How many commitments are there?

There are now seven BD4D Commitments. In April 2024, we proposed eight commitments that could provide the foundation for a lightweight terms of service and model data sharing agreement. After an eighteen month process of engaging our own nonprofit and responsible tech community to learn more about how they work with data, in December 2025 we released a refined set of seven commitments as the foundation for v1.0 of the full BD4D Standard, published in January 2026.

Who should consider adopting the BD4D Standard? Is it mainly for organizations that collect data or provide tech and hosting for data? Or people who analyze the data or create AI models based on the data?

All of the above. Any organization that is ready to publicly commit to implementing the responsible data practices contained in the BD4D Standard should consider adopting it. The goal of the Better Deal is to have a simple set of commitments which work well wherever, and whenever, personal and sensitive data are being collected, analyzed, used, or shared. This includes the developers and vendors of technology that enables and hosts these data activities.

What is a BD4D Endorser? Who should consider endorsing the BD4D Standard?

A BD4D Endorser is an individual or organization that recognizes that the social sector needs a better deal for data, and believes that the BD4D Standard provides an important, shared foundation for ethical and trustworthy data practices. Any individual or organization that nonprofits look to for advice or leadership on best practices in nonprofit management, data governance, research, software, or technology should consider endorsing the BD4D Standard . This can include organizations that  have become BD4D Adopters (which is an implicit endorsement), organizations that might not be ready or able to fully implement the BD4D Standard in their operations, as well as organizations and individuals that don’t actually collect nonpublic or sensitive data (such as many foundations and nonprofit associations). A BD4D Endorser does not need to take any action beyond agreeing to put their name behind responsible data governance and the BD4D Standard. If that’s you, please join us by selecting “Yes! I agree to be publicly acknowledged as a BD4D Endorser” on our contact form!

How do we officially adopt the Better Deal for Data?

Adopting the BD4D Standard is a self-guided process, and we have detailed the steps for adoption in the BD4D Playbook. We recommend reviewing the Readiness Questions, then following the steps in the Implementation Guide once you’re ready to do so. Once you’ve completed the process, we encourage you to link or post the Commitments from your website. We would also love to hear from you! You can tell us about how your organization has implemented BD4D in practice, and share any feedback you might have on how it can be improved, via this short form.

What is the difference between a BD4D Endorser and a BD4D Adopter?

Our goal is to greatly increase ethical data practices across the social sector, and we welcome public support in this mission. BD4D Endorsers have put their name behind the Better Deal for Data movement, recommending that all nonprofits consider adopting the BD4D Standard. BD4D Adopters have gone further by implementing the BD4D Standard in their day-to-day operations. Organizations can be BD4D Endorsers, or Adopters, or both. Some organizations that are planning to adopt the BD4D Standard may become an Endorser as a first step in the process of becoming a full BD4D Adopter.

How does the Better Deal for Data affect the people and communities from, and about whom, data is collected (sometimes called ‘data subjects’ or ‘data originators’)?

When an organization represents that it complies with the Better Deal for Data, it should reassure data subjects that their data will be stewarded ethically, responsibly, and transparently. There should be no surprises in the way their data is used!

Will the Better Deal effect change in donor or government funding requirements?

That is definitely a long range goal. We envision a time when any funder supporting projects that collect or use data from individuals and communities will require their grantees to adopt the Commitments or an equivalent data governance mechanism. Today, no organization working with children can be funded without an adequate child safeguarding plan: it is a prerequisite for donor funding in this field. Shared standards such as the Better Deal for Data will ensure that the data uses being funded are ethical ones, in all social service fields.

What We’re Building

How does the Better Deal work? Is it an automated tool or an app?

It has not been designed as a piece of software or other technology. Rather, it’s a shared standard for people and organizations to follow as they write software and/or handle data. Like many other standards, it provides a written resource detailing how it works, and providing guidance on how to comply with it. Although at present we have no plans for automation, it’s not hard to imagine a tool which would analyze an agreement or policy for potential problems!

Are you building a data commons or a data trust?

No, although we do think that data trusts are probably a very good way to implement the Better Deal. Trusts are not a practical option for most nonprofits and businesses to establish themselves. Instead, organizations setting up a data commons or a data trust should consider adopting the BD4D Standard as foundational to their governing terms.

How does the Standard apply to collecting social impact data – data collected by nonprofits and other social sector organizations to demonstrate that their efforts are having a positive impact on the people and places they serve?

Supporting nonprofit, philanthropic, and social enterprise fields was a key inspiration for the project. Funders who use impact data to confirm the effectiveness of their funding should not need (or want) confidential or personal data. We believe that impact data can be an excellent example of a beneficial use of data collection for social good, as long as it respects and safeguards sensitive data – a strong use case for the Better Deal for Data!

How does a Better Deal apply to open data (and open models and open science)?

It’s exciting to see the advance of open approaches to data, software, and science! Much data, however, should not be open, for a wide variety of practical, ethical and legal reasons, and it is this data that inspires our approach to data governance. We are exploring, and plan to encourage, downstream and open uses of datasets collected under the Better Deal as long as the raw data have been appropriately anonymized without the risk of re-identification. If there is a presumption that all data in a project will be made open, however, then it’s likely not a good fit for the Better Deal.

Does the Better Deal replace an Institutional Review Board (IRB)?

No. While we hope that a commitment to the Better Deal for Data would make an application for IRB approval stronger for projects requiring an IRB review, the IRB review process considers a much broader scope of issues than the data governance addressed by the Better Deal. Note: IRBs are typically established at major universities or research institutions to govern the conduct of research on human subjects.

Compliance & Legal

Can you audit my [database][privacy policy][website] to see if it complies with the BD4D Standard?

While we do expect to informally consult with organizations in the process of adopting the Commitments, we don’t have plans for an auditing function. That said, we do hope that BD4D compliance will be added to the list of standards monitored by the robust field of cybersecurity, data protection, and privacy auditors that already exists!

Can I still be compliant with the Better Deal if I monetize my data or website?

Monetization is a complex subject, and we’ve published an issue paper exploring the question of good monetization and bad monetization. After all, most organizations which handle data do still need to find the money to pay for their staff and technology. Accepting donations or selling memberships would generally be compliant with the Better Deal, as long as personal data is not sold or exchanged with third parties beyond the minimum required for payment processing. On the other hand, trading or selling donor lists to a data broker would generally not comply.

Can I use AI tools like ChatGPT?

It depends. If an AI company trains their models on data submitted in a prompt or the information its tools are summarizing, using those tools to process confidential or sensitive data would not be compliant with the Better Deal. However, if the companies behind the tools offer products that do not retain that data, and the data is processed in a privacy-preserving way, it is likely to be compliant.

How is the Better Deal enforced?

The Better Deal is a set of binding promises between organizations that hold nonpublic data, and the people and organizations that data is about. As a result, the primary enforcement of the BD4D Standard is based on legally binding terms in an organization’s agreements with those constituents. We also expect that there will be other sources of pressure on organizations that publicly commit to the Better Deal principles but don’t actually comply with them.

How do we get certified as being compliant with the BD4D Standard?

While we are not setting up a certification program at this early stage, let us know if you think that there should be one.

My data has been collected by an organization that claims to be a BD4D Adopter, but I don’t believe they are following the Commitments. What should I do?

If you feel that an organization is failing to meet its responsibility as a BD4D Adopter, your first step should be to raise your concerns to that organization, clearly explaining how the BD4D Commitments are being breached. An important pillar of the Better Deal is community engagement, and an organization that adopts it should be prepared to respond and rectify the situation, either correcting its practice, or removing your data upon request. As the BD4D author and maintainer, we do not intervene in the relationship between an organization and its data stakeholders. However, if you’ve requested removal of Your Data from a BD4D Adopter, and they refuse to do so, we would like to know.

BD4D is a voluntary standard, and we expect that all organizations adopting Better Deal do so in good faith. Given its newness, we realize that there may be areas for improvement in how the Standard is written, and how it is put into practice, and invite your feedback on both.

Does the BD4D Standard provide or replace standard legal agreements like licenses or data sharing agreements? Will it make my organization compliant with (CCPA, DPDP, GDPR, LGPD, PIPEDA, etc.)?

Not at this time. There is such a wide variety of laws and regulations across regions, countries, and sectors that it would be impractical to propose a single, standardized data sharing agreement, license, privacy policy, or terms of service. That said, we have successfully implemented the Commitments in the Terraso Terms of Service, and the Tech Matters Privacy Policy. And, we do believe that it should be possible to implement the Commitments in the great majority of jurisdictions.

If regulations like HIPAA, FERPA, or GDPR apply to my organization, is there still a reason to adopt the Better Deal?

The short answer is yes. The BD4D Standard offers a foundation for broad data governance that these laws do not provide. It requires certain practices not addressed by these laws, for example prohibiting monetization of nonpublic data, or making research reports available to the people whose data contributed to the research.

At the same time, these laws often have other stringent requirements that are not addressed by the Better Deal. And we think that’s a good thing: there should be no problem with doing more than what BD4D requires when it comes to protecting your stakeholder data.