W3CThe Open Digital Rights Language (ODRL) is a W3C Recommendation that provides a policy expression language for representing statements about the usage of content and services. ODRL's information model defines how to express permissions, prohibitions, and obligations over digital assets, making it a foundational standard for digital rights management, data licensing, and policy-based access control on the Web.
Background
ODRL originated in 2001 as a project of the ODRL Initiative, led by Renato Iannella. The first version (ODRL 1.0) was published as an XML-based rights expression language. Version 1.1 followed, and the work was subsequently brought into the W3C through the ODRL Community Group. The W3C chartered the Permissions & Obligations Expression (POE) Working Group to develop ODRL 2.x as a formal W3C standard.
The ODRL Information Model 2.2 was published as a W3C Recommendation on 15 February 2018, alongside the companion ODRL Vocabulary & Expression 2.2 specification. The current version represents a significant evolution from the original XML-centric design toward a Linked Data-native information model built on RDF and JSON-LD.
Purpose & Scope
ODRL addresses the need to express machine-readable policies about what can and cannot be done with digital content. Its information model covers:
- Policies -- containers for one or more rules, which can be Sets (general statements), Offers (from an asset provider), or Agreements (between specific parties)
- Rules -- expressed as Permissions (allowed actions), Prohibitions (disallowed actions), or Duties/Obligations (required actions)
- Assets -- the resources or collections of resources that are the subject of rules
- Parties -- entities that undertake roles such as assigner or assignee
- Actions -- operations that may be performed on assets (e.g., use, distribute, modify, display)
- Constraints -- conditions that limit rules, such as temporal boundaries, geographic restrictions, or usage counts
The model supports policy inheritance, conflict resolution strategies, and extensibility through ODRL Profiles -- community or sector-specific vocabulary extensions.
Key Concepts
| Concept | Description |
|---|---|
| Policy | A group of one or more Rules (Set, Offer, or Agreement) |
| Permission | The ability to exercise an Action over an Asset |
| Prohibition | The inability to exercise an Action over an Asset |
| Duty | An obligation to exercise an agreed Action |
| Constraint | A boolean expression refining an Action, Party, or Asset collection |
| Asset | A resource or collection subject to a Rule |
| Party | An entity undertaking a Role in a Rule |
Serializations & Technical Formats
ODRL uses the namespace URI http://www.w3.org/ns/odrl/2/. The normative serialization is JSON-LD, as defined in the ODRL Vocabulary & Expression specification. The information model is also expressible in RDF/XML and Turtle. While built on Linked Data principles, the design explicitly accommodates non-graph-based implementations.
Governance & Maintenance
ODRL is maintained by the W3C. The ODRL Information Model 2.2 and ODRL Vocabulary & Expression 2.2 were produced by the W3C Permissions & Obligations Expression (POE) Working Group. The W3C ODRL Community Group continues to support ongoing development, profile creation, and community engagement. An errata page is maintained for post-publication corrections.
The specification editors are Renato Iannella (Monegraph) and Serena Villata (INRIA).
Notable Implementations
- Creative Commons -- CC license metadata can be expressed using ODRL policies
- European Union Open Data Portal -- uses ODRL for license expression in data catalogs
- MPEG-21 -- the multimedia framework references ODRL for rights expression
- Digital publishing -- various DRM systems and digital content platforms implement ODRL or ODRL-compatible policy languages
- Research data management -- emerging use of ODRL for expressing data usage policies in FAIR data ecosystems
Related Standards
ODRL is closely related to the W3C's broader Semantic Web standards stack (RDF, JSON-LD, OWL). It references Dublin Core Metadata Terms for policy metadata and FOAF/vCard for party descriptions. ODRL's profile mechanism allows extension for specific sectors, and several community profiles exist for domains such as regulatory compliance and data governance.