Acceptable use policy

This article has multiple issues. Please help improve it or discuss these issues on the talk page. (Learn how and when to remove these messages) This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. Find sources: "Acceptable use policy" – news · newspapers · books · scholar · JSTOR (August 2012) (Learn how and when to remove this message) This article possibly contains original research. Please improve it by verifying the claims made and adding inline citations. Statements consisting only of original research should be removed. (February 2009) (Learn how and when to remove this message) The examples and perspective in this article deal primarily with the United Kingdom and the United States and do not represent a worldwide view of the subject. You may improve this article, discuss the issue on the talk page, or create a new article, as appropriate. (October 2013) (Learn how and when to remove this message) (Learn how and when to remove this message)

An acceptable use policy (AUP)—also referred to as an acceptable usage policy or, in certain commercial contexts, a fair use policy (FUP)—is a formal set of guidelines established by the administrator, proprietor, or operator of a computer network, website, digital platform, or information system.^[1] The policy delineates the conditions under which access is granted and specifies the behaviors that are permitted, restricted, or prohibited. AUPs function as regulatory instruments intended to ensure the responsible use of information and communications technology, to mitigate institutional liability, and to safeguard the rights and security of both users and system owners.^[2]

The term “fair use policy,” though occasionally employed in industry settings (e.g., by internet service providers to define usage thresholds), is conceptually distinct from fair use as defined in copyright law.^[3] The latter constitutes a statutory doctrine governing the lawful reproduction and transformation of protected works; the former reflects privately enforced contractual norms.^[4]

AUPs commonly address issues such as unauthorized access, distribution of illicit or harmful content, copyright infringement, violations of information privacy, and misuse of communications infrastructure.^[5] They may also outline the procedural and disciplinary consequences of policy violations. In transnational environments, AUPs are increasingly shaped by regional legal frameworks, including data protection regulations (e.g., the General Data Protection Regulation in the European Union)^[6] and national cybersecurity standards (e.g., NIST guidelines in the United States).^[7]