Question
Can I license data if I am under GDPR?
By SourceX Editorial · Updated
Short answer
Only with a lawful basis and appropriate safeguards, or by truly anonymizing the data first. Anonymized data falls outside GDPR, but the standard is high. SourceX works with suppliers in the EU as well as the U.S., Canada, the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia; EU personal data needs specialist review.
Part of: How licensing works
Explanation#
Pseudonymized data is still personal data under GDPR.
International transfers need mechanisms like standard contractual clauses.
Rights and privacy#
- Confirm customer, vendor and employee agreements allow the use
- Remove or de-identify personal details before anything leaves the company
- Approve the final dataset and permitted uses in writing
How licensing works#
A business describes its data, buyer demand is assessed, scope and permitted use are proposed, the data is prepared and de-identified, an agreement is signed, and the approved dataset is delivered. See data licensing for detail.
Related questions
Sources
General information, not legal advice. Editorial policy.
Related resources
- SolutionData partnerships between businesses and AI developers
- IndustryBPO & contact centers data
- IndustryRecruiting & staffing data
- GlossaryData processing agreement
- QuestionDo AI companies buy private business data?
- QuestionIs selling company data legal?
- InsightIs it safe to license company data for AI training?
- InsightHow is company data anonymized before AI training?
- InsightHow to remove sensitive details from business data for AI training
- SolutionData licensing: granting defined rights to use your data
- DataSales and CRM data
- DataLegal and contract data
See if your company qualifies
A short company assessment. No data uploads are needed.