diff --git a/standard-questions.md b/standard-questions.md
index ade7ac6..85ad3a7 100644
--- a/standard-questions.md
+++ b/standard-questions.md
@@ -56,7 +56,7 @@ __Where is your solution's source hosted?__
- - Which open license(s) is/are used by your solution?
Please refer here for the list of approved open licenses accepted. (If you do not currently use one of the approved licenses, your solution cannot be approved as a DPG)
+ - Which open license(s) is/are used by your solution?
Please refer here for the list of approved open licenses. If you do not currently use one of the approved licenses, your solution cannot be approved as a DPG.
- Provide evidence of use of the selected open license(s).*
Please provide link(s) to public pages where the license(s) selected above are hosted for this project. This could be a license file in GitHub repository or a public URL on the project website.
@@ -76,19 +76,21 @@ __Where is your solution's source hosted?__
- Where is the owner based?*
Please select the country where the organization is legally established or registered.
- - Do you own all of the code, content and/or data in this collection?*
For content collections and data sets, please indicate whether all of the content/data included in the collection are owned/licensed by the owner indicated above. For software please indicate if you own the code copyright. This is a yes or no question.
+ - Do you own all of the code, content and/or data in this solution?*
For open content collections and open datasets, please indicate whether all of the content/data is owned/licensed by the owner indicated above. For open software, please indicate if you own the code copyright. For Open AI systems, please specify if both the training data and source code are either owned by the project or properly licensed for open use.
- - [If No] Do you have the right to re-distribute this data, content or code?*
Provide evidence to demonstrate the right to reproduce and/or distribute all of the content or data sets included in the collection. Acceptable evidence includes licensing agreements for copyright work or evidence of public domain for copyright-free work. For code, this could be a Contributor License Agreement.
+ - [If No] Do you have the right to re-distribute this data, content or code?*
Provide evidence to demonstrate the right to reproduce and/or distribute all of the content or datasets included in the solution. Acceptable evidence includes licensing agreements for copyright work or evidence of public domain for copyright-free work. For code, this could be a Contributor License Agreement.
|
| 4. Platform Independence |
- If your digital solution has any mandatory dependencies that create more restrictions than the original license, then there should be open alternatives so that such dependencies can be replaced with the alternatives without making significant changes to the core digital solution. |
+ If your digital solution has mandatory dependencies that create more restrictions than the original license, proving independence from the closed component(s) and/or indicating the existence of functional, open alternatives that can be used without significant changes to the core product is required. |
- - Does this solution use any closed components that create proprietary dependency?*
Yes or No. You will be required to answer the next question if you select Yes.
+ - Which are the core technologies your solution depends on?
Please provide a list of the core dependencies required to install and/or use the solution. This can include the main dependencies such as programming languages, frameworks, databases, and similar.
+
+ - Does this solution use any closed components that create proprietary dependency?*
Yes or No. You will be required to answer the next question if you select Yes. For AI systems, please consider dependencies for the code, the model and the data.
- How can these closed component(s) be replaced with open alternative(s)?
Please provide a list of the active open alternatives for the closed component(s) and demonstrate that these close component(s) can be replaced with those open alternatives with minimal configuration changes, without requiring a major overhaul of the entire system. This requirement can be best answered by a technical member of your team. Leave this blank if the above answer is No.
@@ -100,20 +102,23 @@ __Where is your solution's source hosted?__
Your digital solution must have strong documentation. The documentation should allow a technical person unfamiliar with the solution to launch and run the digital solution themselves. |
- - Where is your solution’s documentation?*
Please summarize how and where the solution is documented along with link(s) to all relevant documents.
- For software solutions, documentation could include an open repo, technical specifications, functional requirements, etc.
- For data sets or solutions, documentation could describe all the fields in the set, and provide context on how the data was collected and how it should be interpreted.
- For content, documentation could include relevant compatible apps, software, hardware required to access the content and any instructions on how to use it. For more details on documentation best practices, please visit this link
+ - Where is your solution’s documentation?*
Please provide the link(s) to your solution documentation:
+
+ - For software, documentation should include developer docs, technical architecture, user guides, etc.
+ - For data, documentation should include a data dictionary, metadata, and background information, including data sources, access instructions, etc.
+ - For content, documentation should include all relevant/compatible apps, software, or hardware required to access the content collection, and instructions regarding how to use it.
+ - For AI systems, documentation should include the following checklist, which can be presented in a model card, datasheet, or any other format.
+
|
|
| 6. Mechanism for Extracting Data |
- If your solution collects or uses non-PII data and/or content, then there must be mechanisms for extracting or importing non-PII data from or into the system in a non-proprietary format. |
+ If your solution collects, uses or generates non-PII data and/or content, then there must be mechanisms for extracting or importing non-PII data from or into the system in a non-proprietary format. |
- - Does your solution collects or uses non-PII data and/or content?*
Yes or No. You will be required to answer the next question only if you collect or use non-PII data and/or content.
+ - Does your solution collects, uses or generates non-PII data and/or content?*
Yes or No. You will be required to answer the next question only if you collect, use or generate non-PII data and/or content.
- Describe the mechanism for extracting or importing non-PII data from or into the system in a non-proprietary format.
Please provide a detailed description of how the non-PII data can be imported or exported into non-proprietary formats such as CSV/XML/JSON etc or via exposing the non-PII data through APIs.
@@ -121,9 +126,6 @@ __Where is your solution's source hosted?__
|
- |
- Note that requirements related to indicators 7-9 can only be answered by someone authorized to speak on behalf of the project.
- |
| 7. Privacy & Applicable Laws |
@@ -149,7 +151,7 @@ __Where is your solution's source hosted?__
| 9 A. Data Privacy & Security |
- If your digital solution allows implementors to collect, store and/or distribute PII data (personally identifiable information), then you must demonstrate how the privacy, security and integrity of this data can be ensured
+ | If your digital solution allows implementors to collect, store and/or distribute PII data (personally identifiable information), then you must demonstrate how the privacy, security and integrity of this data can be ensured. For AI systems, also consider if the training data includes PII data.
|
@@ -166,8 +168,8 @@ __Where is your solution's source hosted?__
|
- | 9 B. Inappropriate & Illegal Content |
- If your digital solution collects, stores and distributes content, then you must have policies identifying inappropriate and illegal content such as child sexual abuse materials in addition to processes for detecting, moderating, reporting and removing inappropriate/ illegal content.
+ | 9 B. Inappropriate, Misleading & Illegal Content |
+ If your digital solution enables the collection, storage or distribution of content, then you must have mechanisms for identifying inappropriate, misleading, and/or illegal content such as child sexual abuse materials, in addition to processes for detecting, moderating, reporting, and removing such inappropriate, misleading, or illegal content.
|
@@ -175,7 +177,7 @@ __Where is your solution's source hosted?__
- What are the types of content that can be collected / stored / distributed?
Please list the types of content.
- - How does your solution handle inappropriate and illegal content?
Please describe (1) the policies for identifying inappropriate and illegal content and (2) the processes for detecting, moderating, reporting and removing inappropriate / illegal content. Please include the average response time for assessment and/or action.
+ - How does your solution handle inappropriate, misleading and illegal content?
Please describe (1) the mechanisms for identifying inappropriate, misleading and illegal content and (2) the processes for detecting, moderating, reporting and removing inappropriate/ misleading / illegal content. Please include the average response time for assessment and/or action.
|