Rights questions: 27
The rights questions that decide whether data can be sold, with what a good answer looks like.
- As statedEither employee personal information is removed to the CCPA deidentified standard, or…SourceCalifornia Consumer Privacy Act (CPPA statute text,…
- As statedReasonable measures documented, a published commitment not to re-identify, and the…SourceCalifornia Civil Code 1798.140(m), CPPA statute text
- As statedThe data is anonymised to the regulator's standard (no serious possibility of…Dated18 Oct 2026SourcePIPEDA Schedule 1, clause 4.2.4: a purpose not previously…
- As statedThe legal entity that collected the data is the licensor; the board has approved the…Dated11 Oct 2026SourceTerms.Law: AI training data licensing, a usable agreement…
- As statedCustomer content (support tickets, customer files, CRM notes, customer email) is…Dated11 Oct 2026SourceGDPR Article 28(3)(a) and 28(10); Frankfurt Kurnit (Daniel…
- As statedBought and licensed material is identified and removed before packaging, and the…Dated11 Oct 2026SourceFrankfurt Kurnit (Goldberg), Legal 500; Terms.Law: AI…
- As statedUnion and HR channels and any discussion of pay or conditions are excluded; if a…Dated11 Oct 2026SourceNational Labor Relations Act section 7, 29 U.S.C. 157;…
- As statedThe data is anonymised to the EU standard before it leaves (only truly anonymous data is…Dated11 Oct 2026SourceEDPB Guidelines 05/2020 on consent, section 3.1.1; GDPR…
- As statedThe works council approved the processing arrangement (the Netherlands) or a works…Dated11 Oct 2026SourceWet op de ondernemingsraden (Dutch Works Councils Act)…
- As statedExpert determination by a qualified statistician with written methods, or safe harbor…Dated11 Oct 2026Source45 CFR 164.514(a)-(b); 45 CFR 164.514(b)(2)(i)(P)-(Q);…
- As statedRecordings of your own consenting contributors with written releases naming AI training…Dated11 Oct 2026Source740 ILCS 14/15(c) (Illinois Biometric Information Privacy…
- As statedRecording notices on every call, written consent from internal participants for AI…Dated11 Oct 2026SourceCalifornia Penal Code 632(a); Zoom API License and Terms…
- As statedSigned invention and IP assignment agreements for all contributors, including…Dated11 Oct 2026SourceZoom Terms of Service (customer representation);…
- As statedThe policies in force when the data was collected allowed this kind of transfer, or…Dated11 Oct 2026SourceFTC Technology Blog: AI (and other) Companies: Quietly…
- As statedBoard resolution plus any required investor consents on file; for a wind-down, the…Dated11 Oct 2026SourceDelaware General Corporation Law section 271
- As statedThe right officeholder signs; in US bankruptcy the sale goes through section 363 with an…Dated11 Oct 2026Source11 U.S.C. 332(a) (consumer privacy ombudsman);…
- As statedTechnical archives screened for export-controlled content (ECCN or USML review) and…Dated11 Oct 2026Source15 CFR 734.13(b); GitLab Subscription Agreement, section…
- As statedBuyer screened for ownership by or location in China, Russia, Iran, North Korea, Cuba or…Dated11 Oct 2026Source28 CFR 202.205 (bulk); 28 CFR 202.302(a)
- As statedAn independent de-identification provider ran a documented test against the three…Dated9 Oct 2026SourceDLA Piper Privacy Matters: EU EDPB publishes draft…
- As statedShared channels, external email threads, partner folders and attachments from third…Dated6 Oct 2026SourceFrankfurt Kurnit (Goldberg), Legal 500
- As statedLegal channels, outside counsel email and litigation folders are excluded; trade secrets…Dated6 Oct 2026SourceFrankfurt Kurnit (Goldberg), Legal 500
- As statedNo samples shared yet; when they are, they are drawn from the reviewed, de-identified…Dated6 Oct 2026SourceFrankfurt Kurnit (Goldberg), Legal 500
- As statedThird-party content is identified and removed or licensed; what remains is the company's…Dated30 Sep 2026SourceLawNext: 3rd Circuit rules for Thomson Reuters against…
- As statedA software bill of materials or licence scan; vendored and copied third-party code is…Dated18 Sep 2026SourceHaynes Boone: Ninth Circuit rejects DMCA 1202(b) theory…
- As statedYou list each vendor's AI-training setting and when it was switched off, and the licence…Dated16 Sep 2026SourceAtlassian Trust: Data contribution; HubSpot Customer Terms…
- As statedEach system was exported by its own admin with the vendor's native export tool, the…Dated4 Dec 2025SourceSlack API Terms of Service; Zendesk Developer Terms; Xero…
- As statedLoan documents checked; the data licence is a permitted disposition or outbound licence,…Dated17 Sep 2024SourceDLA Piper: Ensuring positive outcomes with negative…