Commercial Distribution, Licensing and Collaborative Agreements

Introduction and Context

Commercial enterprises rarely create, manufacture, market, distribute and support every product or service independently. They depend on contractual networks involving suppliers, distributors, agents, franchisees, licensors, technology providers, outsourcers, joint-venture partners and confidential-information recipients. These arrangements permit specialization and market expansion, but they also allocate significant legal and commercial risk.

A well-designed agreement must do more than record price and delivery. It should establish authority, performance standards, ownership of intellectual property, data rights, competition-law boundaries, risk allocation, governance, remedies and an orderly exit. Poor drafting can leave a business exposed to supply interruption, unauthorized use of intellectual property, regulatory penalties, data breaches, dependency on a single provider or disputes over termination.

This chapter examines the principal structures used in commercial collaboration and provides a practical framework for drafting and managing them. Specific legal outcomes depend on the applicable jurisdiction, sector regulation and facts. Competition, franchise, agency, intellectual-property, data-protection, employment, tax and insolvency laws should therefore be checked before execution.

Learning Objectives

By the end of this chapter, a student should be able to:

1. Distinguish supply, distribution, agency, franchise, licensing, outsourcing, joint-venture and confidentiality agreements.
2. Structure provisions dealing with territory, exclusivity, intellectual property, data, pricing, service levels and governance.
3. Identify competition-law, regulatory, ethical and information-security risks.
4. Draft commercially coherent performance, liability, termination and business-continuity mechanisms.
5. Evaluate a collaborative agreement from both legal and operational perspectives.

1. The Architecture of Commercial Collaboration

A commercial agreement can be analysed through five questions:

The parties should first select the correct legal model. Labels are not decisive. A document described as a “distribution agreement” may create agency authority if the distributor negotiates contracts on behalf of the supplier. A “partnership” label may be irrelevant if the arrangement satisfies the legal test for partnership or joint enterprise. Courts generally examine substance, conduct and the rights actually created.

1.1 Supply agreements

A supply agreement governs the sale or provision of goods, components, materials or recurring services. Important provisions include specifications, forecasts, purchase orders, minimum volumes, lead times, acceptance, inspection, title and risk, warranties, recalls, regulatory compliance and continuity of supply.

The agreement should state whether forecasts are binding. A useful structure distinguishes:

• non-binding demand forecasts;
• binding purchase orders accepted under agreed rules;
• minimum purchase or supply commitments; and
• emergency allocation procedures when capacity is limited.

Quality provisions should identify measurable standards rather than rely solely on “good industry practice.” They may refer to technical specifications, sampling procedures, permitted defect rates, audit rights and corrective-action plans. The parties should also decide whether acceptance occurs on delivery, after inspection or only after integration into the buyer’s process.

1.2 Distribution and agency

A distributor generally buys products and resells them in its own name and at its own commercial risk. An agent typically negotiates or concludes transactions for the principal. The distinction affects authority, commission, liability, termination rights and potentially mandatory statutory protections.

A distribution agreement should address:

• appointment, territory and customer channels;
• whether the appointment is exclusive, sole or non-exclusive;
• resale, branding and marketing restrictions;
• inventory ownership and stock rotation;
• warranties and customer support;
• reporting and sales forecasts;
• compliance with export, sanctions and anti-bribery laws; and
• treatment of customers and stock at termination.

The supplier should avoid giving a distributor apparent authority to bind it unless that authority is intended. Marketing materials, email signatures and conduct can create confusion even where the contract denies agency.

1.3 Franchise arrangements

Franchising combines a licence of intellectual property and business methods with continuing operational support and brand control. A franchise commonly includes a right to use trademarks, systems, manuals and commercial know-how in return for initial and continuing fees.

Franchise regulation may impose pre-contract disclosure, registration, cooling-off, good-faith or termination requirements. These rules vary substantially between jurisdictions. The franchisor must also balance brand consistency against the franchisee’s legal independence. Excessive operational control can create employment, agency, competition or liability risks.

A robust franchise agreement normally covers the operating manual, training, approved suppliers, quality standards, inspections, marketing funds, local law compliance, audit rights, renewal, transfer and post-termination de-branding.

1.4 Licensing agreements

A licence is permission to use intellectual property or other protected subject matter without transferring ownership. Licensed assets may include patents, trade marks, copyright, software, designs, databases, know-how or content.

The grant should be precise. It should identify:

• the intellectual property and relevant registration or version;
• permitted purpose and field of use;
• territory and duration;
• exclusive, sole or non-exclusive status;
• rights to modify, reproduce, distribute, sublicense or commercialize;
• royalty basis, reporting and audit;
• ownership of improvements and derivative works; and
• infringement reporting, enforcement and settlement authority.

“Exclusive” is not always synonymous with “sole.” An exclusive licence may exclude the owner and all other licensees; a sole licence may reserve use by the owner while excluding other licensees. The contract should state the intended meaning expressly.

Software licences require additional attention to source code, open-source components, security patches, hosting, access credentials, interoperability, escrow and end-of-support procedures. A licence to use software is not automatically a transfer of ownership or a right to inspect source code.

1.5 Outsourcing and managed services

Outsourcing transfers performance of a business function to an external provider. The function may include information technology, logistics, payroll, manufacturing, customer support or facilities management. The principal challenge is converting an operational expectation into measurable contractual obligations.

A managed-services agreement should distinguish outcomes from activities. For example, “maintain the platform” is vague; “maintain monthly availability of 99.9%, excluding agreed maintenance windows” is more operationally useful, provided the measurement method and exclusions are defined.

Service-level agreements should specify:

• service description and assumptions;
• performance indicators and measurement systems;
• severity categories and response/resolution times;
• service credits or other remedies;
• incident notification and escalation;
• maintenance and change management;
• cybersecurity and disaster recovery;
• subcontracting and location of performance; and
• exit assistance and data return.

Service credits should not be treated automatically as the customer’s exclusive remedy unless that is commercially intended and legally enforceable. The contract should also state whether credits are penalties, agreed compensation or a price adjustment, subject to applicable law.

1.6 Joint ventures and collaborative enterprises

A joint venture may be contractual or conducted through a separate company. Parties contribute assets, capital, personnel, technology or market access to pursue a defined project. The arrangement should specify contributions, governance, reserved matters, funding, intellectual property, distributions, deadlock and exit.

A corporate joint venture normally requires coordination between the joint-venture agreement, constitutional documents, shareholder arrangements, financing documents and intellectual-property licences. A contractual joint venture requires especially careful drafting because operational cooperation may unintentionally create agency, partnership or fiduciary obligations.

Reserved matters may include annual budgets, major expenditure, borrowing, changes in business scope, related-party transactions, senior appointments, intellectual-property dispositions and material litigation. Deadlock mechanisms may progress from negotiation to senior escalation, mediation, expert determination, buy-sell procedures or winding-up. A deadlock clause that merely requires the parties to “negotiate in good faith” may not resolve a fundamental disagreement.

1.7 Confidentiality agreements

Confidentiality agreements protect information disclosed in negotiations, due diligence, product development or continuing operations. A sound definition covers the information that requires protection while excluding information that is already public, independently developed, lawfully received from a third party or required to be disclosed by law.

The agreement should regulate purpose, permitted recipients, security measures, compelled disclosure, return or destruction, duration and remedies. Trade secrets may require protection for as long as secrecy is maintained, whereas ordinary business information may be protected for a defined period.

A confidentiality agreement should not be used as a substitute for an intellectual-property assignment, data-processing agreement or security schedule. Confidentiality addresses unauthorized disclosure; it does not by itself determine ownership, lawful processing or technical security.

2. Core Allocation Issues

2.1 Exclusivity and territory

Exclusivity can motivate investment but may restrict competition and increase dependency. The contract should define exclusivity by product, customer, territory, channel and time. It should also specify performance conditions, such as minimum sales, service quality or marketing expenditure.

Common structures include:

• exclusive appointment: one party receives the relevant commercial right;
• sole appointment: one party is appointed, but the owner reserves a direct right to transact; and
• non-exclusive appointment: multiple counterparties may be appointed.

Exclusivity should be linked to review and withdrawal rights. A distributor that receives exclusivity without minimum performance obligations may underdevelop a territory while preventing alternative routes to market.

2.2 Pricing and payment

Pricing clauses should identify currency, taxes, discounts, freight, duties, inflation adjustments, volume rebates, withholding and payment timing. An adjustment formula may use an agreed index, but the parties should specify the base period, review date, cap, floor and treatment of extraordinary changes.

Price controls can raise competition-law concerns, particularly where a supplier seeks to impose minimum or fixed resale prices. Recommended resale prices may also become problematic if supported by threats, incentives or monitoring that effectively removes reseller freedom. Legal advice is required because rules differ by jurisdiction and market power.

2.3 Intellectual property and improvements

The agreement should separate background intellectual property from newly created material. Background IP is owned or controlled before the relationship; foreground IP is created during it. The parties should address:

1. ownership of deliverables;
2. licences needed to use background IP;
3. rights in modifications and improvements;
4. moral rights and employee/contractor assignments;
5. registration and enforcement; and
6. rights after termination.

A broad statement that “all IP belongs to the customer” may fail if the provider uses pre-existing tools, libraries or methods. A schedule identifying background assets and a tailored licence is usually safer.

2.4 Data rights and privacy

Commercial collaborations often involve personal data, telemetry, customer lists, transaction records and generated analytics. The contract should identify the parties’ roles under applicable data-protection law, the permitted purposes, categories of data, retention, international transfers, security controls, breach notification, audit and deletion.

Data ownership is often an imprecise concept. The more useful questions are: who may collect the data, for what purposes, who may combine it, who may commercialize derived insights, and what happens on termination? The agreement should distinguish personal data from anonymized or aggregated information and should not assume that anonymization is effective merely because names have been removed.

2.5 Compliance and ethical controls

Agreements should allocate responsibility for anti-bribery, sanctions, export controls, modern-slavery requirements, product safety, environmental obligations, competition law and sector-specific licensing. Compliance warranties should be supported by procedures, training, records and audit rights.

Ethical governance also concerns unequal bargaining power, surveillance, discriminatory algorithms, misleading marketing, labour conditions and environmental claims. A legally permissible clause may still create reputational or stakeholder risk. Responsible contracting therefore combines legal compliance with transparency, proportionality and accountability.

3. Governance, Risk and Remedies

3.1 Governance framework

Complex relationships benefit from a governance schedule establishing operational contacts, steering committees, meeting frequency, reports, escalation and decision rights. Governance should not replace clear contractual obligations. A committee should have defined authority, quorum and voting rules, and its decisions should be documented.

Change control is essential where requirements evolve. A change procedure should identify who may request a change, how impact on price and timing is assessed, when approval becomes binding and what happens if the parties disagree. Informal instructions from business users should not silently alter the contract.

3.2 Liability and indemnities

Liability provisions should be read with warranties, indemnities, insurance and exclusions. A liability cap may be expressed as a fixed amount, a multiple of fees or a percentage of annual charges. The drafting must specify whether the cap applies per claim, in aggregate, per contract year or to particular categories.

Parties commonly carve out fraud, wilful misconduct, death or personal injury caused by negligence, confidentiality breaches, data violations, IP infringement and unpaid fees. A carve-out can make the relevant liability unlimited or subject to a separate cap; the wording must be explicit.

An indemnity should identify the trigger, covered loss, control of defence, settlement restrictions and cooperation duties. An IP infringement indemnity may require the provider to procure a licence, modify the deliverable, replace it or refund fees if continued use is impossible.

3.3 Force majeure and business continuity

Force majeure clauses excuse or suspend performance when specified events beyond reasonable control prevent performance. The clause should address notice, mitigation, priority of obligations, payment for completed work, alternative sourcing and termination after prolonged disruption.

Business continuity is broader than force majeure. It requires advance planning for cyberattack, supplier failure, labour disruption, facility loss, insolvency and technology obsolescence. Critical contracts should include continuity plans, recovery objectives, backup testing, alternate sites, substitute suppliers and access to essential records.

3.4 Termination and exit

Termination may occur for material breach, insolvency, repeated service failure, change of control, illegality, convenience or achievement of a project milestone. “Material breach” should be connected to cure periods and, where appropriate, repeated failures or service-level thresholds.

Exit provisions should address:

• outstanding orders and payment;
• transition services and pricing;
• return or destruction of confidential information;
• data export in usable formats;
• licences needed for wind-down;
• inventory, tooling and equipment;
• customer communications;
• employee transfer issues; and
• continuing confidentiality, audit and dispute provisions.

Termination for convenience may be commercially valuable but can undermine investments. The contract may therefore require notice, reimbursement of committed costs, purchase of remaining inventory or a structured transition fee.

4. Competition-Law and Regulatory Constraints

Commercial agreements may restrict market access, customer choice or independent decision-making. Risk areas include market allocation, bid coordination, customer restrictions, excessive exclusivity, resale-price maintenance, information exchange and non-compete provisions. The analysis commonly considers market definition, market power, duration, scope, efficiencies and effect on competition.

A restriction should be no broader than necessary to protect a legitimate commercial interest. For example, protection of confidential know-how may justify a narrowly drafted post-termination restriction, but a blanket prohibition on competing in every market may be disproportionate or unlawful.

Parties should establish internal controls for competitively sensitive information. A joint venture or distribution relationship should not become a channel for exchanging unrelated future pricing, output or customer strategy. Clean teams, need-to-know access and independent decision-making can reduce risk.

Regulatory review may also be required for foreign investment, merger control, public procurement, telecommunications, financial services, pharmaceuticals, energy or defence-related arrangements. Contract approval should therefore involve legal, compliance, procurement, finance, technology and operational stakeholders.

5. A Practical Drafting Method

A disciplined drafting process begins with a transaction map. Identify parties, flows of money, goods, services, information, intellectual property and risk. Then test the arrangement against the following sequence:

1. Commercial purpose: What business outcome is intended?
2. Legal character: What relationship is created in substance?
3. Scope: What exactly must each party do, and what is excluded?
4. Measurement: How will performance be demonstrated?
5. Control: Who approves changes, subcontractors, publicity and data uses?
6. Risk: Which risks are insurable, controllable or appropriately shared?
7. Failure: What happens after delay, defect, breach or insolvency?
8. Exit: Can the business continue during transition?

Schedules often improve clarity. Suitable schedules include specifications, service levels, pricing, territories, approved subcontractors, security requirements, data-processing terms, implementation plans and business-continuity procedures. The agreement should include an order-of-precedence clause to resolve inconsistencies between the main body and schedules.

6. Illustrative Case: Helios Medical Devices

Background

Helios, a manufacturer of diagnostic equipment, appoints Northstar as the exclusive distributor for three countries. Northstar will purchase devices, maintain local inventory, provide first-line support and use Helios trademarks. Helios will provide training, software updates and marketing materials. Customer usage data will be transmitted to a cloud platform operated by a third-party service provider.

Problem

The initial draft grants Northstar unlimited exclusivity, contains only annual sales targets, gives Helios unrestricted access to customer data and states that all software improvements belong to Helios. It has no recall procedure, transition obligation or continuity plan. Northstar wants protection for its investment; Helios wants brand consistency and regulatory control.

Analysis

The arrangement is a distribution agreement with trademark and software licences, support obligations and data-processing implications. Unlimited exclusivity creates underperformance risk. The data clause fails to distinguish personal data, device telemetry and aggregated analytics. The IP clause may improperly capture Northstar’s independent local adaptations. Medical-device regulation requires documented complaint handling, vigilance and recall cooperation.

Approach and solution

The parties revise the agreement as follows:

• exclusivity is conditional on quarterly sales, training and service metrics;
• Helios retains direct sales rights to named strategic accounts;
• Northstar receives a limited, non-transferable trademark and software licence;
• background IP remains with its original owner, while approved local translations are allocated expressly;
• data roles, purposes, security, retention and breach procedures are placed in a data schedule;
• Northstar must maintain complaint and incident records and notify Helios within a defined period;
• a joint recall and regulatory-response procedure is established;
• Helios must maintain software support for a stated period and provide security updates;
• business-continuity duties require alternative logistics arrangements and emergency allocation rules;
• termination permits a controlled sell-off, subject to quality and regulatory conditions; and
• Northstar must provide transition assistance and return confidential information.

Outcome

The revised structure preserves Northstar’s incentive to invest while allowing Helios to protect strategic customers, regulatory compliance and brand reputation. Performance-based exclusivity creates a review mechanism rather than an irreversible grant. The data and IP schedules reduce ambiguity, while recall and continuity provisions address risks that ordinary sales clauses would not manage.

Learning points

The case demonstrates that commercial drafting is an exercise in system design. Each right should be connected to a measurable obligation, each operational dependency to a continuity plan, and each information flow to a defined legal purpose. A contract is strongest when its commercial incentives and legal protections point in the same direction.

7. Contemporary Developments and Best Practice

Digital platforms increasingly combine licensing, data access, software support and marketplace participation. Artificial-intelligence systems add questions about training data, model outputs, confidentiality, explainability, security, human oversight and responsibility for inaccurate results. Agreements should identify whether prompts, inputs, outputs, fine-tuned models and feedback may be retained or used to train other systems.

Cloud and technology contracts should address portability, interoperability, subcontractor changes, vulnerability disclosure, access logging and end-of-life support. Automated contracting can improve efficiency, but templates and AI-assisted drafting require human review for authority, jurisdiction, defined terms, conflicting schedules and commercially unrealistic obligations.

Best practice includes:

• involving operational owners before signature;
• using obligation matrices and responsibility charts;
• defining measurable acceptance and service criteria;
• maintaining a contract-management calendar;
• reviewing exclusivity and pricing restrictions for competition risk;
• aligning insurance with actual exposures;
• testing continuity and exit plans; and
• recording amendments through controlled change procedures.

Challenges and Limitations

No contract eliminates commercial uncertainty. Detailed drafting can increase negotiation cost and may become obsolete as technology, regulation or market conditions change. Metrics can also produce perverse incentives if a provider meets numerical targets while failing the broader business purpose. Excessive audit rights may disrupt operations, while weak audit rights may conceal non-compliance.

Risk allocation is meaningful only if the responsible party can control and finance the risk. An indemnity from an insolvent counterparty is not a practical remedy. Similarly, a parent guarantee, escrow, insurance policy or step-in right may be needed where service continuity is critical.

Finally, legal enforceability varies. Mandatory termination protections, franchise disclosure rules, data laws, competition regimes and limitations on liability may override negotiated language. Contract design must therefore be accompanied by jurisdiction-specific legal analysis.

Chapter Summary

Commercial distribution, licensing and collaborative agreements create structured networks through which businesses exchange goods, services, technology, data and market access. The correct legal model—supply, distribution, agency, franchise, licence, outsourcing, joint venture or confidentiality arrangement—determines the principal rights and risks, although substance is more important than labels.

Effective agreements define scope, authority, exclusivity, performance, pricing, intellectual property, data use, governance, compliance, liability, continuity and exit. Exclusivity should usually be connected to performance conditions. IP drafting must distinguish background assets, new deliverables and improvements. Data clauses should regulate purpose and control rather than rely on vague claims of ownership. Service levels require measurable metrics, remedies and verification. Joint ventures require governance and deadlock solutions, while outsourcing requires transition and business-continuity planning.

Competition law, privacy, sector regulation, ethical conduct and cybersecurity must be integrated into the transaction rather than added as afterthoughts. The best agreement aligns commercial incentives with enforceable obligations and remains workable during disruption, dispute and termination.

Key Terms

Commercial collaboration: Contractual cooperation between independent parties to pursue a business objective.

Supply agreement: Agreement governing the provision of goods, materials or recurring services.

Distributor: Independent reseller that generally buys and resells goods in its own name and risk.

Commercial agent: Person or entity authorized to negotiate or conclude transactions for a principal.

Franchise: Business arrangement combining brand, system and know-how rights with continuing controls and support.

Licence: Permission to use intellectual property or other protected subject matter without transferring ownership.

Exclusive licence: Licence intended to exclude specified other users, potentially including the owner.

Outsourcing: Transfer of a business function to an external service provider.

Service-level agreement: Contractual schedule defining measurable service performance and remedies.

Joint venture: Cooperative enterprise involving shared resources, control or commercial objectives.

Confidential information: Non-public information protected against unauthorized use or disclosure.

Background intellectual property: IP owned or controlled before the contractual relationship.

Foreground intellectual property: IP created through performance of the relationship.

Exclusivity: Restriction limiting who may supply, sell, use or access a market, territory or opportunity.

Change control: Formal process for requesting, assessing and approving contractual changes.

Indemnity: Contractual promise to compensate specified losses or liabilities.

Force majeure: Contractual mechanism addressing extraordinary events preventing performance.

Business continuity: Planning and contractual measures intended to maintain critical operations during disruption.

Transition assistance: Services and cooperation required to move from one provider or arrangement to another.

Reserved matters: Decisions requiring special approval under a governance or joint-venture arrangement.

Review Questions

Short Answer Questions

1. What is the principal distinction between a distributor and a commercial agent?
2. Why should exclusivity commonly be linked to performance conditions?
3. What is the difference between background and foreground intellectual property?
4. Identify three matters that should be addressed in a service-level agreement.
5. Why is a confidentiality agreement not a substitute for a data-processing agreement?

Long Answer Questions

1. Explain the principal legal and commercial issues in structuring a franchise agreement.
2. Discuss how a managed-services agreement can convert operational expectations into enforceable obligations.
3. Analyse the relationship between intellectual-property ownership, licensing and improvements in collaborative projects.
4. Explain how competition law may affect exclusivity, pricing and information exchange.
5. Evaluate the role of termination, transition assistance and business continuity in long-term commercial contracts.

Analytical / Application Questions

1. A supplier gives a distributor unrestricted exclusivity for five years, but the distributor has no sales targets or service obligations. Analyse the commercial and legal risks and propose revised provisions.
2. A software provider claims ownership of all customer data and all improvements created during an outsourcing project. Identify the ambiguities and draft a more balanced allocation framework.
3. A joint venture repeatedly fails to approve its annual budget because the parties disagree equally. Design a staged deadlock and continuity mechanism that protects the project while preserving each party’s legitimate interests.

Multiple Choice Questions with Answers

Question 1

Which characteristic most commonly distinguishes a distributor from an agent?

A. The distributor generally buys and resells in its own name and commercial risk.

B. The distributor always has authority to bind the supplier.

C. The distributor cannot advertise the supplier’s products.

D. The distributor is necessarily an employee of the supplier.

Correct Answer: A. The distributor generally buys and resells in its own name and commercial risk.

Question 2

What is the principal purpose of linking exclusivity to minimum performance obligations?

A. To eliminate all competition-law analysis.

B. To ensure the exclusive party develops the market or performs the required service.

C. To transfer ownership of all intellectual property.

D. To guarantee renewal regardless of performance.

Correct Answer: B. To ensure the exclusive party develops the market or performs the required service.

Question 3

Which issue is most directly addressed by a service-level agreement?

A. The provider’s corporate share ownership.

B. The customer’s inheritance rights.

C. Measurable performance standards and response times.

D. The supplier’s patent registration strategy.

Correct Answer: C. Measurable performance standards and response times.

Question 4

What does a licence generally provide?

A. Automatic transfer of intellectual-property ownership.

B. Permission to use protected subject matter under defined conditions.

C. A guarantee that the licensed product is defect-free.

D. A permanent waiver of confidentiality.

Correct Answer: B. Permission to use protected subject matter under defined conditions.

Question 5

Which item is typically a reserved matter in a joint venture?

A. Routine office stationery purchases.

B. A major change to the venture’s business scope.

C. Every employee’s daily schedule.

D. A customer’s personal shopping preference.

Correct Answer: B. A major change to the venture’s business scope.

Question 6

Which statement best describes background intellectual property?

A. IP created only after termination.

B. IP owned or controlled before the contractual relationship.

C. IP that is always owned by the customer.

D. Information that is already public.

Correct Answer: B. IP owned or controlled before the contractual relationship.

Question 7

What should a data clause primarily clarify?

A. Only the font used in reports.

B. Permitted purposes, security, retention and permitted data uses.

C. That all data is automatically owned by the service provider.

D. That privacy law never applies to commercial data.

Correct Answer: B. Permitted purposes, security, retention and permitted data uses.

Question 8

Which provision is most relevant to an orderly end of an outsourcing relationship?

A. Transition assistance and data return.

B. A promise to increase advertising indefinitely.

C. An unrestricted resale-price clause.

D. A waiver of all audit rights.

Correct Answer: A. Transition assistance and data return.

Question 9

Why can a contract label be insufficient to determine legal character?

A. Courts may examine the substance of rights, obligations and conduct.

B. Labels are always prohibited in commercial contracts.

C. Only tax authorities may interpret contracts.

D. The title automatically determines every legal consequence.

Correct Answer: A. Courts may examine the substance of rights, obligations and conduct.

Question 10

Which practice can reduce the risk of inappropriate exchange of competitively sensitive information in a collaboration?

A. Sharing all future pricing plans with every participant.

B. Using need-to-know access and clean-team procedures.

C. Removing all governance controls.

D. Making every restriction unlimited in duration and territory.

Correct Answer: B. Using need-to-know access and clean-team procedures.