Published access instrument defining proposed partner duties and operator controls
Posted StopNCII partner terms / missing DSA
The posted StopNCII partner terms describe conditions for organisational access to reference data and related services. They reserve eligibility and suspension powers and constrain use, security and reporting. The acquired public text also contains conflicting legal identifiers and unfinished clauses, while the separate data-sharing agreement was not obtained.
Substantive restrictions with unresolved drafting
The document prohibits credential sharing, resale and redistribution. Its model-training exception is confined to implementing the agreed purpose on the partner's platform, with that purpose dependent on the missing data-sharing agreement. It specifies credential-compromise notice within 24 hours, general incident notice within 48 hours and annual summaries within 60 days of the anniversary. Other periods remain bracketed, including implementation and termination certification. Conflicting company and charity identifiers, an empty hash definition and undefined-purpose wording remain unresolved; they do not justify merging the named legal entities.
specifies scoped incident and implementation reporting
Credential compromise notice24hours; schedule general incidents48hours; annual summaries within60days of anniversary. Security assessments/caching/incremental retrieval described. [30]implementation and [5]termination certification periods remain unfinished, not settled clocks.
restricts credentials, redistribution and model training
Personal organizational credentials/no third-party sharing; redistribution/resale prohibited. Training exception is strictly for implementing agreed purpose on partner platform. Purpose comes from not obtained DSA; neither total training ban nor general training/data licence.
South West Grid for Learning Trust / SWGfL → Posted StopNCII partner terms / missing DSA
posts an access instrument with unresolved drafting and identity conflicts
Introduction company5589479/charities1120354,SC051351 contrasts definition03948864/1099649. Empty hash definition, undefined-purpose terminology and bracketed periods remain. No legal entity is merged based on those erroneous/conflicting fields.
reserves vetting, reverification and access-suspension powers
Posted criteria cover need, security, implementation, compliance and reputational/ethical/legal risk; sole-discretion/no-reasons refusal and continued eligibility review. Not an actual refusal, signed contract or unlimited lawful discretion.
requires cessation and deletion on partner termination
Termination grounds depend on not obtained DSA; cessation/destruction/certification specified with unfinished [5]business-day number. Separate from public-user hash withdrawal or restoration of content.
Introduction company5589479/charities1120354,SC051351 contrasts definition03948864/1099649. Empty hash definition, undefined-purpose terminology and bracketed periods remain. No legal entity is merged based on those erroneous/conflicting fields.
Posted criteria cover need, security, implementation, compliance and reputational/ethical/legal risk; sole-discretion/no-reasons refusal and continued eligibility review. Not an actual refusal, signed contract or unlimited lawful discretion.
Personal organizational credentials/no third-party sharing; redistribution/resale prohibited. Training exception is strictly for implementing agreed purpose on partner platform. Purpose comes from not obtained DSA; neither total training ban nor general training/data licence.
Credential compromise notice24hours; schedule general incidents48hours; annual summaries within60days of anniversary. Security assessments/caching/incremental retrieval described. [30]implementation and [5]termination certification periods remain unfinished, not settled clocks.
Termination grounds depend on not obtained DSA; cessation/destruction/certification specified with unfinished [5]business-day number. Separate from public-user hash withdrawal or restoration of content.