The Data Originator, normally the farmer, owns and controls the data.

The Data Originator can access, edit, delete, and migrate data easily.

Data is not accessed or stored without explicit opt-in permission. 

Data is not shared or sold without explicit opt-in permission. The identity of the parties involved in processing the data is established and recorded. 

Simple naming conventions are adopted and common across the Data Handler's tools.

The Data Handler allow systems to share data where appropriate, using best practice and conventions.

There is a proactive approach to providing training on data and data use, appropriate to the Data Handler's data users.

The Data Handler is accessible and responsive to requests, instructions, or complaints.

Appropriate data security standards for the Data Handler's activities are adopted, and there is a clear explanation of why such standards are appropriate. 

There are processes in place to maintain security of users’ data in the unlikely event of a data breach.

From the outset the raw data being used is listed and explanation is provided as to how it is used. 

The value generated by the data sharing is explained and who benefits. 

The Data Handler clearly explains how it aggregates data, and what value it generates, and to whom.