Glossary

What is data ownership?

Data ownership is about who can lawfully control, use and license a dataset, which matters far more in a deal than who holds the file.

By

Updated

Definition

Data ownership is the set of rights an organisation or person holds over a dataset: to control access, use it, and license or transfer it. Because the law rarely grants property in raw facts, those rights mostly come from contracts, database rights and confidentiality.

Why the word is slippery

People talk about owning data as if it were a car. Legally it rarely works that way. In the US, the Supreme Court held in Feist that facts are not copyrightable, so a list of readings or transactions is not automatically anyone's property.

What exists instead is a bundle: copyright in original selection or arrangement, trade secret protection while data stays confidential, contract terms that say who may do what, and, in the EU, a database right where someone invested substantially in building it.

Personal data adds a layer

Personal data adds another layer. The people a dataset describes may have rights to access, delete or stop the sale of their information, whatever the company's contracts say. So owning a dataset in a commercial sense never means unlimited freedom over it.

Ownership in a governance sense

Inside companies the word means something else again. A data owner is often the manager accountable for a dataset's quality and access rules. That is a role, not a legal title. When a seller says its data team owns a table, check whether it means accountability or rights.

Worked example: tracing who can grant a licence

Suppose a delivery company wants to sell telematics from its vans: speed, braking and route data. Three contracts matter. The telematics provider's terms may say the provider may use the data too, or may limit what the delivery company can do with exports.

The van leasing agreement may give the leasing firm rights over vehicle data. The drivers' employment terms and privacy notice decide whether data tied to individual drivers can leave the company at all.

The illustrative delivery company: holding the files is not the same as the right to license them.

In this illustration, the company holds the files, but its right to license them depends on all three documents.

The EU Data Act

And in the EU, the Data Act, applicable since September 2025, gives users of connected products rights to access the data their use generates and share it with others, which a seller must account for. A broker would ask for each contract before describing the data to any buyer.

Ownership, possession, licence and control

ConceptMeaningExampleLets you license it onward?
Data ownershipHolding the rights that let you decide use and grant permissionA firm that generated and kept confidential its own sensor readingsUsually, within privacy limits
PossessionHaving a copyA contractor with a database exportNo, not by itself
Data licensingPermission from the rights holder on conditionsAn analytics firm under a non-exclusive licenceOnly if sublicensing is allowed
Data subject rightsRights people hold over information about themA resident asking a broker to delete recordsNot a licensing right, but it limits others

What a broker should check

  • How the data was created: generated by the seller, collected from customers, or bought from others.
  • Every contract touching the data: suppliers, platforms, customers, partners, funders.
  • Whether any third-party content is embedded, such as open-source code or licensed images.
  • Whether personal data is present, and what the privacy notice promised about sharing.
  • Whether the seller can give a warranty of rights and stand behind it.

Sources

3 sources · checked Nov 7, 2026

  1. Cornell LII: Feist Publications v. Rural Telephone Service (1991)That raw facts carry no US copyright · Checked
  2. EU Commission: EU copyright law, protection of databasesThe EU database right and when copyright covers a database · Checked
  3. EU Commission: Data ActConnected-product users' access and sharing rights, applicable from 12 September 2025 · Checked

Data ownership FAQ

Who owns my personal data?

Usually no one owns it outright. Companies that collect it hold it under contracts and privacy notices, and you may have legal rights over it, such as access and deletion, depending on where you live.

Can data be owned legally?

Not in the way physical property is. Rights come from copyright in original compilations, trade secrets, contracts and, in the EU, a database right. Raw facts alone are not protected in the US.

What is a data owner in data governance?

The person accountable for a dataset inside an organisation: its quality, definitions and who may access it. It is a job role, not a legal claim to the data.

Does a company own data its customers create on its platform?

It depends on the platform's terms of service. Many terms leave ownership with the customer but grant the platform a licence to use the content, which limits what the platform can sell.

Related

  • First-party data

    First-party data is what a business gathers itself, from its own customers, systems and operations, rather than buying it in.

  • Data monetization

    Data monetization is the umbrella term for every way an organisation turns its data into money, inside the business or outside it.

Join the DataBroker academy

The DataBroker academy and tools: find companies with data to sell, price it, license it and close the deal.