All slides

What If Your Data Leaks After You Sell or License It to AI?

, 11 slidesWatch the video (7:31)

AITrainingDataBroker.com

What if your data

leaks after

you license it?

The 4 ways a data deal could go wrong, and what protects you from each one.

Jimmy Lin

Jimmy Lin standing in a data center
1 / 11

Slide 1 of 11

What if your data leaks after you license it?

Hello, everyone. Say an AI company offers to license your company's records, and the money sounds good, but the first thing that goes through your head is a worry: what if our data leaks, and what if somebody sues us over it?

That is the right question to ask, because a leak is the kind of mistake that can sink a small company, and anyone who tells you there is zero risk is not being straight with you.

So in this video, I will walk you through the 4 ways a data deal could go wrong, and what actually protects you from each one.

The video

Full script

  1. Hello, everyone. Say an AI company offers to license your company's records, and the money sounds good, but the first thing that goes through your head is a worry: what if our data leaks, and what if somebody sues us over it?

    That is the right question to ask, because a leak is the kind of mistake that can sink a small company, and anyone who tells you there is zero risk is not being straight with you.

    So in this video, I will walk you through the 4 ways a data deal could go wrong, and what actually protects you from each one.

  2. Here is why the worry is fair. IBM's latest study puts the average cost of a data breach in the United States at $10.22 million in 2025, which is a record and the highest of any country.

    Most of your clients will never read that report, but they will remember the company whose data got out, which is why a data deal has to be built so that a leak has nothing useful in it.

    That is how I set up every deal, so before we get into the 4 risks, let me tell you who I am.

  3. I'm Jimmy. I have worked in data at Fortune 500 companies, as a data analyst, a data engineer and a software engineer, and I am trained in data science. I am also a Canadian military veteran, where I specialized in data analysis and reporting.

    Are you selling your data? We are your broker and technical advisor. We get you the best price, and we guide your team through the technical side, so your data stays private.

    Are you buying data for an AI lab? We find the right data for you and see it through to delivery, so you can focus on advancing AI research.

  4. So, let us take the risks one at a time. The first is a leak before you even sign, the second is someone tracing a record back to a real person, the third is the AI repeating your data word for word, and the fourth is a buyer using it for more than you agreed.

    Each of these has happened somewhere, and each one has a fix that goes into the deal before a single file leaves your company.

    The first one is the easiest to stop.

  5. Many leaks happen early, when a company emails a big raw export to someone it has not even signed with, just to show what it has. In a proper deal, the order is the other way around: first the contract is signed, then we de-identify your data, and only then is anything delivered.

    Before signing, a buyer can see a description of your records, like how many years, which tools and which kinds of work, but not the records themselves.

    That way, nothing raw ever sits in a stranger's inbox, which brings us to the second risk.

  6. Removing names is not enough on its own, because back in 2000, a Carnegie Mellon study found that 87% of Americans could be picked out by just their ZIP code, birth date and sex.

    That is why we de-identify more than names, which means we strip out the names, the exact places, the birth dates and the job titles that point to one person, so this help-desk ticket about Mark Feldman, the CFO at Ridgeline Dental in Boise, becomes an executive at Client 8 in the Mountain West.

    What the buyer still gets is the useful part: a locked laptop the day before payroll, and how your team fixed it in 20 minutes. But what about the AI itself?

  7. In November 2023, a team of researchers from Google DeepMind and several universities asked ChatGPT to repeat the word poem forever, and after a while it started printing pieces of its training data, including a real person's email address and phone number.

    The lesson is that anything that goes into training can come back out, so the only safe fix is to strip out personal details before the data is ever used for training, instead of hoping the AI forgets them later.

    And the fourth risk has nothing to do with the technology at all.

  8. This is the one people mean when they ask what happens if they get sued. A buyer could use your data for more than you agreed, or try to link records back to real people, so the license spells out what they may use it for, that they may not try to trace anyone, and what happens if they break those rules.

    Words matter here too, because the FTC warned in July 2024 that telling people their data cannot be traced, when it can still be linked back to a person, can be misleading, so we write down exactly what was removed and never promise more than that.

    The details, like who pays if something goes wrong, are worked out case by case, and I work through them with you before anything is signed.

  9. Now, the good news is that the records AI companies want most are often the safest ones to license, like your procedures and how-to guides, your help-desk tickets and project timelines with names stripped out, your quality checklists, and the team chats about how the work got done.

    What we never share is just as clear: passwords and security keys, card numbers, and medical and HR files, because no price is worth that risk.

    What makes the rest worth more is years of it, with a clear record of how each problem was solved. On your side, the main job is exporting the data, and we guide your team through it.

  10. Of course, you should not have to figure all of this out alone, which is why I work with you as your broker and technical advisor.

    As your broker, I bring your records to several buyers, so you get competing offers, and then I work through the terms with you, including the risk terms, and you make the final call.

    As your technical advisor, I guide your team through the technical side, from what to export and in what format, to how your data is de-identified and how it is delivered.

    Nothing moves until your team signs off, and the terms are worked out case by case. I am paid only when a deal closes, and only on terms you have already approved.

  11. So, what if your data leaks after you license it? The answer is to build the deal so there is nothing useful to leak: nothing leaves before you sign, personal details are stripped out before training, and the limits are written into the license.

    If you run a company with 30 or more people, the records you already have could become a new revenue stream. You can find out if yours qualifies, for free, at AITrainingDataBroker.com.

    Thank you for watching, and I will see you in the next one.

More slides