levelgroundstandard.org

Rule 24

Sister businesses can't see client data

Software company Version 0.1  ·  Working Draft

The rule

Some software companies have owners who also run campgrounds or a marketplace. Those businesses never see a client campground's private information.

  1. "Those businesses" means everyone under common control with the software company, including its parent, and any campground business the software company runs itself. The only exception is staff needed to run the service.
  2. "Private information" means rates that aren't public, how full the campground is, its reservations, and its guests. Public rates are not private.
  3. This includes data that is pooled, anonymized or "de-identified."
  4. The software company is responsible for its sister businesses keeping this promise.

What this looks like

A software company's parent also owns a chain of RV resorts.

The resort managers can't see what nearby client campgrounds charge in private, how full they are, or who their guests are, not even in a "regional market report."

Why

Some booking-software companies share owners with marketplaces or campground businesses. No misuse has been documented. This rule is preventive.

How it's checked

Software company

Read the contract, including sampled order forms. Then check settings: the software company lists every user role that can see more than one client campground, and who holds it.

Pass

  • The contract contains (a)–(d) and applies at all times, not only after a sale.
  • No sister-business staff hold such a role.

Fail

  • Any of these doesn't hold.
Evidence
Contract · Settings
Source
S21 (last part) · O8 · Evidence E24