Licensing Working Group/Minutes/2025-05-12
OpenStreetMap Foundation, Licensing Working Group (LWG) - Agenda & Minutes
12 May 2025, 18:00 UTC
The minutes of the topics "OSMF move to the EU - EU Articles of Association" and "Forwarded by DWG" were redacted, as decided by the LWG during their June 2025 meeting.
Participants
- Kathleen Lu (Chairing)
- Dermot McNally
- Tom Hummel
- Tom Lee
- Simon Hughes
- Guillaume Rischard (OSMF board member)
Absent
Administrative
Adoption of past minutes
- 2025-04-14 Approved - Minutes of the sections "Move to the EU" and "Online Service Act" to be redacted.
- 2025-03-10 Approved - Minutes of the sections "Move to the EU" and "Online Service Act" to be redacted.
Minutes by Dorothea Kazazi.
Any updates on reported attribution cases?
Reports in OTRS:
- Ticket#2021081210000057 printed maps with false copyright
- Ticket#2022011910000082 interparcel.com: Dermot Emailed them on 10th Nov, no reply
- Ticket#2022012610000149 https://poster.printmijnstad.nl/editor/city
- Ticket#2022033010000217
- complaint that Aberdeen city council may not be attributing correctly – https://www.aberdeencity.gov.uk/news/consultation-starts-street-improvements-ashgrove-road
- Note that Aberdeen credits Ordnance Survey, so possible OS is using OSM as one of many sources and the full attribution is not getting carried through
- Ticket#2022032710000125 - https://www.evri.com/find-a-parcelshop
- Hermes UK changed name to evri. So this is an old issue.
- Ticket#2022062610000078 -
- Härryda, Sweden, uses OpenStreetMap for an app they developed. Inside the app there are no license references to OSM.
- You can see the app on the Google Apps store here: https://play.google.com/store/apps/details?id=se.harryda.medborgar.app&gl=US
- Ticket#2021120810000146 mondialrelay.fr not attributing correctly
- Ticket#2022120510000177 — Club Vosgien complaint – any reply?
From Board: OSMF move to the EU - EU Articles of Association. Redacted.
Discussion for 32 minutes.
Minutes redacted, as decided by the LWG during their June 2025 meeting.
Heat Map issue
Background |
---|
Proposed response from Kathleen:
Dear all, Best, |
Tom Hummel to add edits.
Osm-website query
Email shared by the LWG | ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|
(see https://antonkh.dev.osm.org/docs/2025-05-26-tou.html for images)
Dear Licensing Working Group, Now I have a question about the GDPR-related changes to the osm website. The question is at the end of this email. It's still not clear what is supposed to be done about GDPR. The smaller part of it is "to make accepting the terms of use a requirement", which is a quote from the EWG, the thing that they want to happen next. The obvious two questions about it are:
Possible answers to question 1 are:
Doing any of this requires an answer to question 2 because you won't be able to fulfill the requirement otherwise. An answer to question 2 is likely that there should be a webpage that you can either voluntarily visit or you are force-redirected to when you try to log in. That webpage probably has 'a link to the terms of use' and a checkbox that says "I'm accepting the ToU". You tick that checkbox, click the submit button and you've fulfilled the requirement. Or at least it seemed to be the plan when 'this pull request' was made in 2018. That pull request changed the new account registration page, or actually one of the pages because you had to complete two pages. One of the pages showed you 'the contributor terms' and had a checkbox "I have read and agree to the above contributor terms". The pull request added a similar checkbox for the ToU: "I have read and agree to the Terms of Use", which you had to tick in order to create an account. So it was considered that after the pull request was merged, all newly created accounts had agreed to the ToU, but older accounts had not, hence the requirement. Making the ToU acceptance mandatory for older accounts was supposed to happen 'later', 'before other restrictions go into force'. But things have changed since. There was 'a redesign of the signup flow' that removed the "I agree" checkboxes from new account registration pages, and removed the terms page, replacing it with links to terms. So now new users don't have to tick any checkboxes to accept the ToU. All they have to do is to click the Sign Up button that has the following text above: "By signing up, you agree to our 'Terms of Use', 'privacy policy' and 'contributor terms'." Does it mean that old accounts also don't need checkboxes, and if they don't, what do they need for the requirement? However the terms page is not completely gone. It is still shown to even older accounts, those that predate the 2012 license change and haven't accepted the contributor terms. The terms page still has the two checkboxes for CT/ToU, and those users have to tick them in order to get write access to osm. So the situation currently looks like this for those who haven't accepted the terms:
[image]
[image]
The easiest thing to do is still to use the same terms page as for pre-2012 accounts and lead to it those who haven't accepted the ToU, make them tick the checkbox and click continue. That's what I tried to do in 'this pull request'. But turns out there's a completely different opinion coming from the OWG members: '[1'] '[2']. Their logic seems to be this:
By this logic active 2012-2018 accounts have already accepted the terms and fulfilled the requirement. Inactive accounts will fulfill the requirement as soon as they become active, which is going to happen if they do anything that could be the answer to question 1. Great, we don't need to do anything about the GDPR! But that seems to be not what the EWG wants. Also it's not what a certain former LWG member who happened to write 'the 2018 pull request' wants. What does the EWG want? Currently they want what's written in 'Make OSM comply with the GDPR' 'project description'. It includes the phrase "all users will be required to accept the Terms of Service" (emphasis mine). So currently the users are not required to accept the terms but they should be, in contrast with the OWG opinion where the users have already accepted the terms. The project description also refers to:
Here's the 2x2 table from list of affected services:
This table wasn't produced by the LWG, unlike GDPR Position Paper. In fact it 'was added by a DWG member'. Note that the entire not accepted column is impossible under the OWG interpretation. Looks like most parties disagree with the OWG on this and users have to do at least something to accept the ToU. Now the actual question to the LWG: what do we do next about the GDPR-related changes? The options are:
|
To be discussed next time.
Queries to legal-questions
Lantmäteriet - Swedish data privacy question, via legal@
Email shared by the LWG |
---|
We (the Swedish OSM community) are working towards using the newly (more) openly released High Value Data from Lantmäteriet, the national land survey of Sweden, in OpenStreetMap. Annoyingly, Lantmäteriet have made the licensing situation somewhat convoluted; they have released the data under CC BY 4.0 but attached some additional terms. The reason for this is that they have determined that a lot of the data (including buildings and addresses) may be personal information under the GDPR, and they don’t want any risk that comes with the distribution. The full terms are available here (in Swedish, Google Translate does a decent job of translating it): https://www.lantmateriet.se/globalassets/geodata/geodataprodukter/anvandningsvillkor_for_vardefulla_datamangder_pu.pdf So far, we’ve determined that we’ll need to request exceptions/clarifications on:
This leaves us with the general issue of personal information, especially in addresses (where it’s not possible to scrub it of PI without losing all value). We hope that putting them in OSM is fine (since many addresses already exist there), but just to make sure that we don’t make a mistake: Can we put data from a source which explicitly marks it as personal information under the GDPR into OpenStreetMap? Legally, Lantmäteriet transfers the data processor role to the entity getting the data from them (so in our case the private citizen doing the import). We both want to make sure that that person doesn’t end up with any legal trouble, as well as that we don’t accidently put data into OSM that “poisons the water” by carrying legal restrictions or similar. Jan Dalheimer Queries back: Followup from May 9: The translation is correct, I was wrong in my original email, Lantmäteriet by way of the T&C place the data controller (sv. personuppgiftsansvarig) role on the person accessing the data from them. That’s why we’re worried that if we’d do something wrong then the volunteer would open themselves up to legal risks. |
They wrote back saying that,
- the terms would mean we would be a data controller, not a data processor,
- the licence has restrictions related to DRM,
- the personal element in the data is the building outlines.
Issue
- The swedish government seems to be questioning whether just addresses are personal information.
Suggestion To ask them to take caution what they are importing into OSM, e.g. cadastral information.
Other points mentioned during discussion
- In Estonia, one of the background layers available in JOSM shows the boundaries of the land plots an the street address and number for each block.
LWG views
- Just building outlines or addresses (no other info, e.g. owner of property) are not personal information under GDPR.
- OSMF’s position is that info by itself is not PI.
Kathleen replied on June 7.
OSM Apps Catalog, via legal@
Email and updated shared by the LWG |
---|
Hello OSMF-Team I am working as a volunteer on a project called OSM Apps Catalog (https://osm-apps.zottelig.ch), which displays applications that use OpenStreetMap data. I want to help people to switch to OpenStreetMap and contribute to the popularity of OSM. I currently host the catalog on a subdomain of my own domain. To make it look more professional, I intend to buy a domain that contains OSM (osm-apps.org). I have read the Trademarket Policy and assume that I need to apply for a license first. I have attached the completed “Project License and Domain Grandfathering Application” document. I kindly ask you to consider my request. Kathleen’s recommendation: Update: New form received April 19 Thank you very much for the feedback. I am glad that LWG agree that my project is appropriate for a licence. I have filled in the new template and attached it to this e-mail. I look forward to hearing from you. |
- Agreement approved after updating grandfathering and domain template
- New template to be sent to Dorothea for future use.
Infocasas
Email shared by the LWG |
---|
Thanks for taking this issue again. The site is somewhat deceptive, because in the main page the map is using Google data, but they keep using OpenStreetMap data in other pages that display detailed info about the properties they offer.
To see that this site is using overpass you can browse one of the offerings for rental: https://www.infocasas.com.uy/oficina-en-el-centro/188995182 then click on "Mapa" (map) or scroll down the page and see the schools highligthed as POI (the schools are shown with a pencil, and hospitals with a red cross). And then I entered the Mozilla Web Developer tools (F12) and then in the network tab you can see the request to overpass-api.de (screenshot below), one querying for amenity=hospital and another one querying for amenity=school. Obviously they also show errors on the map, like this https://www.openstreetmap.org/node/11772775981 which has remain undetected until now. [image] By the way, searching for the evidence you request, now i see they are also using basemap from cartocdn.com (seems to be from Carto.com) wich declares it uses OpenStreetMap as data source, and I could'nt find the OpenStreetMap copyright nor any mention to ODBL. Below is the screenshot from https://carto.com/basemaps declaring that fact. I don't know if Carto.com is telling it's customers that they also need to comply with the ODBL. Kathleen sent a more forceful complaint than the one Jim previously sent on April 26. No reply thus far. |
- Last time we agreed to write them letter, but they have not replied.
- The HTTP referrer is set, so Overpass should be able to block their access.
Action item
Tom Lee to ask Roland Olbricht to block Infocasas accessing Overpass.
Large copyright infringement (Dopper - water taps) Ticket#2025040310000645
Email shared by the LWG | ||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
I am a long-time french OSM contributor, and I've been using Google Maps lately (I know, it's bad) for a hiking trip. I found out that a brand named "Dopper" (https://www.dopper.com/) has imported 130.000+ water tap POI from OpenStreetMap on Google Maps in Europe, in order to promote their water bottles.
Although I can't confirm that the 130 000 POIs have been "stolen" from OSM, 100% of those that I have checked have the exact same coordinates (even when the water tap doesn't exist anymore) on Google Maps and OSM. Here are a few examples:
Of course, they also use an OSM-based map on their website without attribution (https://www.dopper.com/products/tap-map), which reference all the water taps (same coordinates than OSM). Even if I can't prove that Dopper has been adding all of these water taps to the map, every Google Maps POI has a link to their website, and they have communicated on this marketing campaign on internet : https://localyse.eu/cases/localyse-helps-dopper-to-make-water-taps-visible-in-google-maps/ / https://weekend.levif.be/partenaires/dopper-au-top-5-faits-surprenants-sur-votre-gourde-durable-preferee/ / https://lehub.laposte.fr/la-marque-de-gourdes-dopper-ajoute-sur-google-maps-les-points-deau-potable. Were you aware of this Thank you in advance for your help, | ||||||||||||||||||||||||||||||||
LWG internal reference: https://otrs.openstreetmap.org/otrs/index.pl?Action=AgentTicketZoom;TicketID=65356 |
- The original report to LWG came with a small sample of locations with data from OSM.
- Dermot shared a draft reply to Dopper on LWG's Signal chat group.
Dopper
- seem to have a combined dataset which includes OSM data. They are some taps that we don't have, or we have them at different locations.
- are using an OSM map as background and they are not complying with the attribution requirements.
Action item
LWG members to review Dermot's draft and offer feedback.
Using Regione Toscana WMS services Ticket#2025041010000202
Email shared by the LWG |
---|
Dear Licensing Working Group
Do I understand it correctly that following this agreement one can legally use in OSM not only the datasets presented on the OpenData Toscana site but also the WMS serqvices provided by the Regione Toscana (both Creative Commons CC licensed)? LWG: Does anyone read Italian? Guillaume to figure out OCR and/or ask Italian speaking members of the board for translation |
LWG internal reference: https://otrs.openstreetmap.org/otrs/index.pl?Action=AgentTicketZoom;TicketID=65685 |
Kathleen emailed an LCCWG member from Wikimedia Italia and asked for any background that Wikimedia may have about this agreement. There was no reply yet.
Request from Catalan OSM Community regarding authorization for the use of the trademark, via legal
Email shared by the LWG |
---|
I'm from the Catalan Community of OpenStreetMap, and we're working on establishing ourselves formally by registering as an association in with the government.The Adminstration has asked us to provide an authorization for the use of the trademark.
|
Suggestion
LWG to draft an agreement for use of trademarks for 6-12 months to use the marks for purposes of the organisation registration, in furtherance of becoming a local chapter. The agreement will expire if they don't make enough movement towards becoming a Local Chapter.
Other points mentioned during discussion
- Wikipedia approved their Spain Local Chapter four days before it became registered.
Kathleen sent an authorisation on 2025-06-07.
Data Working Group - OSMtoday, via legal@
Email and updates shared by the LWG |
---|
DWG received a ticket with claims that the website OSMToday.com is putting out false information on our Ukraine borders. It does not sound like a DWG issue. Can you deal with it? I will suggest to the OP that they try a different site to download OSM data. Best regards -- OpenStreetMap Foundation Data Working Group - data@osmfoundation.org -- [Ticket#2025051010000086] Forwarded message Good day! I want to bring to your attention the fact of abuse of the OSM copyright to facilitate Russian propaganda. The website makes false claims to its users and creates false impressions: "Extracts data of Ukraine from OpenStreetMaps", " Fresh geo data from the Openstreetmap project in ESRI Shape format" Please stop this blatant abuse of your intellectual property and good name. $ whois 78.31.71.149 refer: whois.ripe.net inetnum: 78.0.0.0 - 78.255.255.255 whois: whois.ripe.net changed: 2006-08
inetnum: 78.31.64.0 - 78.31.71.255 organisation: ORG-MMIA3-RIPE role: WIIT AG NOC % Information related to '78.31.64.0/21AS24961' route: 78.31.64.0/21 % This query was served by the RIPE Database Query Service version 1.117 (DEXTER) |
The DWG received a complaint about a website using the OSMtoday domain name without official affiliation, providing altered OSM data.
Issue
- content presented in a manner which might confuse users that is official.
- name confusingly similar to our mark.
- We do not have a mark in Russia.
- Content is in English and the website is in Germany.
Suggestions
- Ask the website operators to add a disclaimer that they are not affiliated with OSMF.
- Ask the website operators to change their name. Typical escalation would be with a takedown request to the ISP.
Other points mentioned during discussion
- A domain dipute with ICANN is prohibitively expensive.
- They sell the domain for USD 140: https://osmtoday.com/offer.pdf
- Link shared: https://osmtoday.com/europe/ukraine.html
Action item
Tom Lee to email the webiste operators and tell them they are violating our trademark.
Japanese government's PDL license, via legal@
Email shared by the LWG |
---|
I'm pleased to report that the adoption of the Japanese government's PDL license has been making steady progress.
For example, the following sites have switched to or newly implemented the PDL license: Geospatial Information Authority of Japan: https://www.gsi.go.jp/kikakuchousei/kikakuchousei40182.html Forestry Agency Simple Ortho Images: https://www.geospatial.jp/ckan/dataset/rinya-orthophoto-nagaoka2024 Additionally, an official reference translation of the original terms has been published: https://www.digital.go.jp/en/resources/open_data/public_data_license_v1.0 We would appreciate if you could review the terms of use for compatibility and publish their usability status on the OSMF website, similar to what was done with Canada's OGL? In particular, we would be grateful to receive permission regarding the usability of data from the following agencies, as they would be especially valuable for OpenStreetMap:
Unfortunately, these terms' "important information" sections are mostly written in Japanese, and we cannot expect official English versions to be released. However, machine learning-based Japanese-English translation tools like ChatGPT and Claude have recently become very accurate, and we can ensure translation quality through verification by our team at OSMFJ or by professional translators we commission. If there are any translations we should prepare, please let us know your comments. I appreciate your time and consideration, and look forward to your response. |
There is now an official translation of the PDL license, provided by OSMF Japan. Some content still in Japanese.
Action item
LWG members to review the translation.
Forwarded by DWG - Redacted
Discussion for 11 minutes.
This topic and its minutes were redacted, as decided by the LWG during their June meeting.
Techcrowd app, forwarded by Board
Email shared by the LWG |
---|
Subject: Using openstreetmap for app
Dear OpenStreetMap Foundation Board, My name is Bedřich Malý, and I am Backend developer developer atTechcrowd(https://techcrowd.tech/). We are developing a mobile application designed to help users discover and filter child-friendlyplaces and events in their area. To power our maps and location search, we would like to use OpenStreetMap’s open data for: Displaying points of interest (playgrounds, museums, cafés, etc.) Locating and filtering children’s events (workshops, performances, outings) Before proceeding, we want to ensure full compliance with the ODbL license and any Foundation policies. Could you please clarify: Attribution Requirements: Usage Limits & Best Practices: Partnerships or Support Programs: We greatly appreciate the work of the OpenStreetMap community and want to respect all licensing and technical guidelines. Any documentation or pointers you can share would be immensely helpful. Thank you for your time and assistance. We look forward to hearing from you. |
Kathleen replied on 2025-06-07.
Any other business
Filing the declaration of trademark use for Argentina
Email shared by the LWG |
---|
FYI, from our trademark lawyers
Further to the action we took in November 2024 in relation to the ‘OPENSTREETMAP’ mark in Argentina in class 42, the declaration of use is now also due for the class 41 filing. As Argentina is a single class jurisdiction, the two classes are protected under separate marks. As the Class 41 filing was registered slightly later, this declaration is now due. The fees for this will be the same as before - £400.00 plus VAT. Please kindly confirm if you are happy to go ahead. |
Core software development facilitator
Minh Nguyễn’s appointment as Core Software Development Facilitator.
Single sign on (SSO) and Apple log-in
Email shared by the LWG |
---|
There was an email to the LWG related to Single sign on and Apple log-in. This does not seem to be under the LWG's remit.
https://github.com/openstreetmap/openstreetmap-website/issues/2799#issuecomment-2847412646 |
Scheduling 2025 meetings
The LWG set the following meetings for 2025:
Jun 16, at 17:00 UTC
Jul 14, at 17:00 UTC
Aug 11, at 17:00 UTC
Sep 08, at 17:00 UTC
Oct 06, at 17:00 UTC
Nov 10, at 18:00 UTC (same as normal hours for everyone)
Dec 08, at 18:00 UTC
Meeting adjourned 1 hour and 40 minutes after start.