Privacy and security principles for farm data agreement

A coalition made up of the American Farm Bureau, American Soybean Association, Beck’s Hybrids, Dow AgroSciences LLC, Dupont Pioneer, John Deere, National Association of Wheat Growers, National Corn Growers Association, National Farmers Union, Raven Industries, The Climate Corporation — a division of Monsanto, and USA Rice Federation released the details of a new data collection privacy and security agreement Nov. 13.

Following is the agreement in full.

Ownership: The group believes that farmers own information generated on their farming operations. However, farming is complex and dynamic and it is the responsibility of the farmer to agree upon data use and sharing with the other stakeholders with an economic interest such as the tenant, landowner, cooperative, owner of the precision agriculture system hardware, and/or agricultural technology provider (ATP). The farmer contracting with the ATP is responsible for ensuring that only the data they own or have permission to use is included in the account with the ATP.

Collection, Access and Control: An ATP’s collection, access and use of farm data should be granted only with the affirmative and explicit consent of the farmer. This will be by contract agreements, whether signed or digital.

Notice: Farmers must be notified that their data is being collected and about how the farm data will be disclosed and used. This notice must be provided in an easily located and readily accessible format.

Third-party access and use: Farmers and ranchers also need to know who, if anyone, will have access to their data beyond the primary ATP and how they will use it.

Transparency and Consistency: ATPs shall notify farmers about the purposes for which they collect and use farm data. They should provide information about how farmers can contact the ATP with any inquiries or complaints, the types of third parties to which they disclose the data, and the choices the ATP offers for limiting its use and disclosure. An ATP’s principles, policies and practices should be transparent and fully consistent with the terms and conditions in their legal contracts. An ATP will not change the customer’s contract without his or her agreement.

Choice: ATPs should explain the effects and abilities of a farmer’s decision to opt in, opt out or disable the availability of services and features offered by the ATP. If multiple options are offered, farmers should be able to choose some, all, or none of the options offered. ATPs should provide farmers with a clear understanding of what services and features may or may not be enabled when they make certain choices.

Portability: Within the context of the agreement and retention policy, farmers should be able to retrieve their data for storage or use in other systems, with the exception of the data that has been made anonymous or aggregated and is no longer specifically identifiable. Non-anonymized or non-aggregated data should be easy for farmers to receive their data back at their discretion.

Data Availability: ATPs agree they should provide for the removal, secure destruction and return of original farm data from the ATP, and any third party with whom the ATP has shared the data, upon request by the account holder or after a pre-agreed period of time.

Market Speculation: ATPs will not use farm data to illegally speculate in commodity markets.

Liability and Security Safeguards: The ATP should clearly define terms of liability. Farm data should be protected with reasonable security safeguards against risks such as loss or unauthorized access, destruction, use, modification or disclosure. Polices for notification and response in the event of a breach should be established.

(Read more about why farmers should get familiar with big data privacy agreements.)