This document updates deliverable D1.9 “Licensing of Digital Commons including Personal Data”. It provides a review of the licensing options for data commons, even cases in which data commons include personal data, and the design of a set of smart rules to be adopted (also within the context of the DECODE pilots) when personal data are processed. The review starts with the analysis of the most common licensing procedures, free licenses and best tools that allow the releasing of artefacts avoiding licenses’ incompatibility and possible violations of third party’s rights. The report then discussed the importance of distinguishing the different kinds of data managed and processed through DECODE services, in order to identify the proper license for each of them. The analysis continues focusing on digital commons made of personal data and on how they can be licensed. Finally, the document offers an initial set of smart rules to be adopted by the pilots or other services based on DECODE OS in order to strength users control on data commons, a table for evaluating the compatibility of free licenses to be adopted for DECODE artefacts, and a Data Commons Privacy Pledge, that is a pool of voluntary standard commitments for strengthening data privacy rights and digital commons values.