Here are the rules for *.eff.org, the computers of the Electronic
Frontier Foundation, a private, not-for-profit organization. The
policy might make a good model.
Community Policy & Terms of Service for users of firefly, a
free online service and "intelligent agent", http://www.ffly.com
Last revision: 1996. Firefly's policy takes a very firm stance on
protecting user privacy, and a middling stance on user freedom of
expression, noting firefly's own editorial control rights (and
potential market imperative to excercise them). Policy also
acknowledges legal requirements, and other parties' intellectual
property rights. This is basically an exemplary policy for a BBS-type
model in which the system may wish to exercise editorial control, e.g.
to please a "family oriented" customer base. For an ISP, it is lacking
a net.abuse policy, and does not do enough to protect user free
expression (since ISPs are not in business of content control, only
access provision). Unlike many older policies, this one essentially
grants the system the right to display advertising to users, avoiding
any question or confusion on that point.
AUP for users of ZORCH SF Bay Public-Access Unix, a
long-time small ISP in the San Francisco area. Last revision: Mon Sep
9 1991. ZORCH's policy takes a strong stance on Net abuse, but also
says that all traffic out of ZORCH is monitored.