Criterion: Intellectual Property
Requirements for protecting intellectual property rights and confidential information
Full Description
D3. Intellectual Property
Code 8.0
Intellectual property rights shall be respected. Transfer of technology and know-how is to be done in a manner that protects intellectual property rights, and customer and supplier information shall be safeguarded.
Elements to Demonstrate Compliance to RBA Code
1. Policy
Ensure facility ethics and/or intellectual property protection policy includes the following elements:
- a. Information received from suppliers and customers as part of the contracting process is protected.
- b. IP and IP ownership are protected.
- c. IT measures and guidelines about the handling, distribution/dissemination of information to protect information from suppliers and customers and IP.
2. Procedures & Practices
Procedures & Practices are in place such that:
- a. Ensure non-disclosure and protection of information about its customers, channel partners, suppliers, workers, and other business partners in accordance with applicable laws and regulations.
- b. The company/facility has a means to protect its suppliers' customers' confidential information and ensure it is not disclosed to third parties.
- c. Adequate and effective process and administrative control of records and IT systems
- d. Commercial nondisclosure agreements are a part of all customer and supplier contracts to protect the intellectual property rights of all parties.
- e. Investigations of unauthorized disclosures and/or loss of IP information are undertaken.
- f. Customers/suppliers are notified if violations should occur.
- g. Personal information protection agreements (NDA, confidentiality…) are in place for staff, workers, suppliers, and customers.
3. Controls & Monitoring
Controls & Monitoring should include:
- a. There are procedures in place to review intellectual property ownership and to ensure intellectual property rights are upheld and respected (their own and that of their customers).
4. Serious conditions that will result in a severe finding
- IP from any source (own company, customer, other) which the facility is in possession of is not protected.
Profiles using this criterion
RBA Assessment Program
- VAP Full Assessment | 8.0.2
- VAP Full Assessment | 8.0.1
Conformity Alignment
Priority
Pass: No
Definition: "Critical non-conformance requiring immediate action"
Remediation: 30 days
Major
Pass: No
Definition: "Significant non-conformance requiring corrective action"
Remediation: 90 days
Minor
Pass: Yes
Definition: "Non-conformance with limited impact"
Conditions: Corrective action plan required
Remediation: 180 days
Opportunity
Pass: Yes
Definition: "Opportunity for improvement identified"
Conformance
Pass: Yes
Definition: "Full conformance with criterion requirements"
Related Criterion
VAP: Privacy
Relationship: Related
Protection of confidential information
VAP: Business Integrity and No Improper Advantage
Relationship: Related
Ethical handling of sensitive business information
VAP: Ethics Management System
Relationship: Parent
Management system for ethics practices
VAP: Supplier Responsibility
Relationship: Related
Supplier IP protection requirements
Change Log
1.0.0 (2024-01-01)
Initial release.