{"id":1407,"date":"2014-07-24T16:26:09","date_gmt":"2014-07-24T20:26:09","guid":{"rendered":"https:\/\/risacher.org\/jfdi\/?p=1407"},"modified":"2016-08-23T11:48:56","modified_gmt":"2016-08-23T15:48:56","slug":"how-to-apply-an-open-source-license-to-a-us-government-work","status":"publish","type":"post","link":"https:\/\/risacher.org\/jfdi\/2014\/07\/how-to-apply-an-open-source-license-to-a-us-government-work\/","title":{"rendered":"How to apply an Open Source License to a US Government Work"},"content":{"rendered":"

This article is also posted to my Intelink blog<\/a>.<\/em><\/p>\n

\n

Every so often, a government project manager asks me a question like this:<\/p>\n

I’m looking to hire some government guys and I’m interested in young folks hacking on [my project].<\/p>\n

So, here’s my predicament:\u00a0 if they work on the code, their work becomes ‘public domain’ and not something that could be restricted by licenses (at least according to some legal advice I’ve been given).\u00a0 If the work is the in public domain, I have no way of ensuring that someone won’t take the code and sell it back to the government as their own (because they could modify it and put a proprietary seal on it).<\/p>\n

Here’s my question: is there some legal structures that can be put in place to restrict modification, use and distribution like typical software licenses for government-created works?<\/p><\/blockquote>\n

Here’s some ways this has been done before. Given the goal to create a collaboratively-developed software product, open-source software licensing can provide clear and effective rules-of-engagement that protect the interests of all participating stakeholders.\u00a0 Which is to say, Open Source = Goodness.<\/p>\n

It is true that software (or any media) created by federal government employees (civilian or military) in the course of their duties is not subject to copyright protection in the United States.\u00a0 (q.v. 17 USC 105<\/a>)\u00a0 \u00a0\u00a0Since essentially all open-source software licenses derive their legal power from copyright law, this does present some issues.<\/p>\n

Here are three approaches to cracking this nut:<\/p>\n

    \n
  1. Just ignore the problem and release the software as public domain.\u00a0 If a vendor tries to sell it back to you under terms that are reasonable<\/em>, buy it.\u00a0 If the terms are unreasonable<\/em>, don’t buy it.\u00a0 \u00a0This may seem simplistic, but often turns out to be effective, especially when the government continues to maintain the public domain version.\u00a0 Examples are VA’s VistA<\/a>, and\u00a0 NIST’s Expect<\/a>, amongst others.\u00a0 If your gov’t-developed code is good enough for someone to try to sell it back to you, yer doin’ things right.<\/li>\n
  2. Create a joint work which is partly public domain, and partly copyrighted by a non-federal entity (i.e. your contractor).\u00a0 \u00a0A “joint work” is a work prepared by two or more authors with the intention that their contributions be merged into inseparable or interdependent parts of a unitary whole (17 USC 101<\/a>). The joint work can be released under an open source license, and the government is not obligated to go out of its way to annotate which sections are public domain vs. copyrighted.\u00a0 As an example, DISA signed a CRADA with the non-profit Open Source Software Institute<\/a> to enhance the public-domain “CMIS” and release it as the open source “OSCMIS<\/a>“.\u00a0 This is easy if you have mixed government\/contractor team.<\/li>\n
  3. Aggressively rely on foreign copyright (I call this ‘the NASA approach’).\u00a0 The fact that the software is not protectable by copyright is only true in the United States; in foreign jurisdictions it will (generally) be copyrighted by the US Government.\u00a0 It is thus completely reasonable to mark such software as both “Copyright 2014, US Government, released under LGPL” and<\/em><\/strong> “Work of the United States Government and not subject to copyright protection in the United States.”\u00a0 Few commercial entities would build a product around IP that they could not enforce internationally.\u00a0 I’m not aware of any legal requirement to mark something as a public-domain US government work (although it is a recommended best-practice).\u00a0 I call this the ‘the NASA Approach’, because the NASA Open Source Agreement<\/a> includes this paragraph:
    \n

    [The following copyright notice will be used if created by civil servants only. Government Agency will insert the year and its Agency designation and remove the bracketed language.] Copyright ” {YEAR} United States Government as represented by __________________________________________. No copyright is claimed in the United States under Title 17, U.S.Code. All Other Rights Reserved.<\/p><\/blockquote>\n

    As soon as the project accepts the first patch from a non-gov’t contributor, you could drop the “No copyright is claimed…” sentence.<\/li>\n<\/ol>\n

    Any of these three approaches might get you to where you need to be, depending on your situation.\u00a0 As Matt Asay recently pointed out<\/a>, the trend is towards more permissive licensing, and less worrying about the license in general.\u00a0 So, JFDI: Just Fork & Do It.<\/p>\n

     <\/p>\n","protected":false},"excerpt":{"rendered":"

    This article is also posted to my Intelink blog. Every so often, a government project manager asks me a question like this: I’m looking to hire some government guys and I’m interested in young folks hacking on [my project]. So, here’s my predicament:\u00a0 if they work on the code, their work becomes ‘public domain’ and […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,11,12],"tags":[],"class_list":["post-1407","post","type-post","status-publish","format-standard","hentry","category-it","category-oss","category-work"],"_links":{"self":[{"href":"https:\/\/risacher.org\/jfdi\/wp-json\/wp\/v2\/posts\/1407","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/risacher.org\/jfdi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/risacher.org\/jfdi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/risacher.org\/jfdi\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/risacher.org\/jfdi\/wp-json\/wp\/v2\/comments?post=1407"}],"version-history":[{"count":16,"href":"https:\/\/risacher.org\/jfdi\/wp-json\/wp\/v2\/posts\/1407\/revisions"}],"predecessor-version":[{"id":1423,"href":"https:\/\/risacher.org\/jfdi\/wp-json\/wp\/v2\/posts\/1407\/revisions\/1423"}],"wp:attachment":[{"href":"https:\/\/risacher.org\/jfdi\/wp-json\/wp\/v2\/media?parent=1407"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/risacher.org\/jfdi\/wp-json\/wp\/v2\/categories?post=1407"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/risacher.org\/jfdi\/wp-json\/wp\/v2\/tags?post=1407"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}