Data Rights and DFARS 252.227-7018: What Contractors Must Protect

Among the rights clauses that matter to federal contractors, DFARS 252.227-7018 — Rights in Noncommercial Technical Data and Computer Software — is one of the most consequential and least understood. It allocates the rights the government receives in technical data and computer software delivered under a DoD contract, and getting it wrong can forfeit intellectual property the contractor intended to retain — or trigger a compliance failure that affects the award.

What the clause does

The clause establishes the default rights the government receives in noncommercial technical data and computer software, and it requires the contractor to mark deliverables with the appropriate rights legend. The markings are not decorative; they define what the government may do with the data and software, including whether it may be disclosed, used by other contractors, or reverse-engineered. A deliverable with the wrong marking grants the government rights the contractor did not intend to convey.

The rights categories

The clause defines a hierarchy of rights — from restricted rights (the most protective of the contractor's interests) through government-purpose rights to unlimited rights (the least protective). Commercial items are handled under a separate, more contractor-favorable regime. The selection of the rights category for each deliverable is a decision that should be made deliberately, during contract negotiation and proposal pricing, not at delivery.

The marking requirement

Deliverables must be marked with the rights legend that matches the rights being conveyed. An unmarked deliverable, or one marked incorrectly, creates ambiguity that the government often resolves in its own favor. The marking discipline — consistent, correct, and applied to every deliverable that contains technical data or computer software — is the operational expression of the rights strategy.

Commercial versus noncommercial

The distinction between commercial and noncommercial data and software is pivotal, because the rights regimes differ sharply. Commercial computer software and commercial technical data are governed by the commercial license terms, which are far more protective of the contractor. A deliverable misclassified as noncommercial when it is commercial conveys more rights than necessary; the reverse conveys fewer rights than the government expects and can trigger a compliance dispute. The classification is a legal judgment that should be settled before marking.

The strategic point

Data rights are not a closing-day formality; they are an IP strategy that is set at proposal and contract formation. The rights you convey affect your ability to reuse the work, to sell it to other customers, and to protect your competitive advantage. Treat the rights legend as a strategic instrument — mark deliberately, classify correctly, and document the basis — so the deliverable conveys exactly the rights you intended, and no more. GovCon Architect's compliance environment supports the rights-marking discipline as part of the broader CUI and data-protection posture.