What happens after a company licenses its data?

Short answer. After a license is signed, the company delivers only the slice named in the contract, after de-identification, and keeps owning and using its own records as before. The buyer may use the data for the permitted purpose during the term. At the end the buyer deletes its copies and may be audited, and payment and breach are handled under the license terms.

General information, not legal advice.

What's my data worth?


Delivery of the licensed slice

The license names which records are covered, in what form and by what route. Delivery follows that description and nothing else. Records left out of the license stay where they are, and the buyer receives no access to the company's systems. The approved sample from earlier in the process is the reference, so the delivered set should match what the owner already saw.

A buyer then checks the delivery against the agreed checks. If something does not match, the license says how the problem is raised and fixed. The owner should keep a copy of exactly what was sent, with a note of when and how, because later questions about scope are answered from that record.


De-identification before anything leaves

Personal details are removed or transformed before the data is handed over, not after. The method and who checks it are written into the process so the owner can see what was changed. Records that cannot be made safe to share are left out of the license rather than delivered with risk attached.

This step is why delivery is not a simple file copy. It takes work, and it is done on the owner's side of the line. General information only: privacy rules vary by region, and counsel should confirm that the method fits the rules that apply to the records.


What the owner keeps and does

A license is permission to use, not a sale of the records. The company stays the owner and keeps running on its own data in the ordinary way: serving customers, keeping books, answering regulators. With a non-exclusive license it may also license the same slice to others. With an exclusive license, the contract lists what the owner may still do, which is why that list is worth reading closely.

Nothing about the license should change how the company stores or protects what it holds. Retention schedules, legal holds and customer promises continue to apply. If a customer asks for deletion under a privacy rule, the owner should know in advance how the license treats data already delivered.


Permitted use and term

The license states what the buyer may do with the data, such as training or evaluating models, and what it may not do, such as resell the set or try to re-identify people. It also states the term, the period during which use is permitted. A published example, the UK Coal Authority data use licence, shows the shape: use is tied to listed products, any new product needs written agreement, and sub-licensing and resale are barred.

Where the buyer wants to use the data in a new way, it asks first. A renewal or extension is a new agreement point, not an automatic right unless the contract says otherwise.


Audit, deletion and the end of the license

Many data licenses let the owner check that the buyer has followed the terms, through reports or a certificate, and sometimes through an audit. The same UK licence requires a compliance certificate at the end and allows audits. On termination it requires use to stop and data to be returned or destroyed, with a certificate. Sample licences differ on details, so each contract needs its own reading.

One point deserves a question before signing: what happens to a model already trained on the data. Deleting a data file does not obviously undo training, and contracts handle it in different ways. Ask how the buyer's copy, any derived sets and any logs are treated.


Payment and breach

Payment follows the schedule in the license, often tied to acceptance of the delivery. AI companies pay the broker fee. The owner's side of payment is about the license terms: when the amount is due, what happens if it is late and what counts as acceptance.

If the buyer breaches, for example by using the data outside the permitted purpose, the license sets the remedies. In the UK example, the licensor may end the agreement for unpermitted use, and a material breach that is not fixed after notice allows termination. Liability limits and indemnities vary, so the owner should have counsel read them. Treat this as background reading, and let counsel decide.


Follow-up questions

Does the buyer get access to my systems after signing?

No. The buyer receives the licensed slice that was prepared and approved, not a login. Access to systems is a separate matter and is not part of a data license.

Can I keep using the records I licensed?

Usually yes, because ownership stays with the company. Confirm that the license lists the owner's retained uses, especially if the license is exclusive.

Who proves the data was deleted at the end?

The contract decides. Some licenses ask for a signed certificate of deletion, and some add audit rights. If the license says nothing, ask for the clause to be added.

What if the buyer misses a payment?

The late-payment terms in the license apply, which may include interest or the right to end the license. Read those clauses before signing.

Didn't find your question? Ask us directly.


Sources


Keep reading

The slides and script for the video on this topic