Acceptable use policy (AUP) and terms and conditions (T&C) are necessary instruments in the regulation of infrastructure access. And while for 'enterprise' sources they can be complex - as you have to define for example what is acceptable use for employees of organisational resources - for access to resources by collaborations and their users it can be far simpler. Basically, a collaboration access resources for a particular specific purpose: achieving the objectives of the common research goals. As such, the AUP can be simple: it binds the user to the ‘purpose’ for which the services and resources they use have been provided.
Yet, like with privacy notices, the reader is rather inclined to click through and proceed with the actual task at hand. Thus, to reduce the burden on the user and increase the likelihood that they will read the AUP, the number of times a user is presented with such notices must be kept to a minimum, preferably just a single time. Yet the notice should cover as much of the user’s potential use of the infrastructure as possible: the more services and resources deem an AUP as sufficient for their policy purposes, the better it will be. This will allow users to use resources from multiple service and resource providers without the need to confirm acceptance of additional AUPs.
No more than 10 bullet points
... and of these points, none are controversial. So at a minimum include the 10 commandments from the WISE Baseline AUP. By doing so, all resource providers, infrastructures, and your peer collaborations and 'nodes' know they can accept your collaborators without further ado.
And if you as a collaboration, backed by the resource providers, can provide more guarantees to its users this is perfectly fine as well! Just add these terms and conditions, and state the advanced service levels, in the last section of the "AUP/T&C" in the spot indicated in the WISE Baseline AUP. But keep the Baseline AUP intact for interoperability.
For what purpose, and under whose authority
This Acceptable Use Policy and Conditions of Use (“AUP”) defines the rules and conditions that govern your access to and use (including transmission, processing, and storage of data) of the resources and services (“Services”) as granted by {community, agency, or infrastructure name} for the purpose of {describe the stated goals and policies governing the intended use}.
Remember that the PDK practical steps asked you to "identify a governance body to make policy decisions"? That's the name of the 'community, agency, or infrastructure name' that is authoritative for your AUP. it is here typically the name of your research collaboration, like in "... as granted by the Harderwijk Herbal Research Collaboration HHRC for the purpose of ...". The purpose of your collaboration was the next item in the priority list, and that text goes into the next placeholder. For example "... for the purpose of identifying flowers and ever-green plants on your neighbourhood commons during the airing of BBC2 gardening TV programmes.". So if somebody accesses the HHRC in order to locate where plant species could found, picked, and their generic composition taken in violation of the Nagoya protocol, that is clearly unacceptable use.
Resources
...