Can it be sold? Check before a buyer does.

“That the licensor owns or has the rights to license the data.”

“Every corporation may at any meeting of its board of directors or governing body sell, lease or exchange all or substantially all of its property and assets ... when and as authorized by a resolution adopted by the holders of a majority of the outstanding stock of the corporation entitled to vote thereon”

“(A) use API Data to train a large language model;”

“including creating, training, or improving any general AI model, such as, but not limited to, a large language model”

“API Data cannot be used to train, fine tune, adapt, or enhance any AI Models.”

“if a processor infringes this Regulation by determining the purposes and means of processing, the processor shall be considered to be a controller in respect of that processing.”

“Review customer, partner, vendor, and data license agreements, identify data held as a service provider or processor, and review platform terms for the systems the data will be extracted from.”

“training data can be "deidentified" and still contain confidential or valuable information.”

“Consider privileged material, HR and personnel files, payroll and tax records, health and benefits information, union-related communications, customer and partner confidential information, licensed data, and data from regulated systems.”

“(4) This subdivision shall become inoperative on January 1, 2023.”

“"Sell," "selling," "sale," or "sold," means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating ... a consumer's personal information by the business to a third party for monetary or other valuable consideration.”

“Given the dependency that results from the employer/employee relationship, it is unlikely that the data subject is able to deny his/her employer consent to data processing without experiencing the fear or real risk of detrimental effects as a result of a refusal.”

“the controller shall, in order to ascertain whether processing for another purpose is compatible with the purpose for which the personal data are initially collected, take into account, inter alia: any link between the purposes ... the context in which the personal data have been collected, in particular regarding the relationship between data subjects and the controller”

“When personal information that has been collected is to be used for a purpose not previously identified, the new purpose shall be identified prior to use. Unless the new purpose is required by law, the consent of the individual is required before information can be used for that purpose.”

“The term "made anonymous" is not defined in PIPEDA. ... We therefore find that for information to be considered anonymized for the purpose of Principle 4.5.3, the organization must take steps to ensure that there is no serious possibility that the information retained may be reidentified, either alone or in combination with other available information. ... Based on the data points that Loblaw described, we find that stripping accounts of names, phone numbers and email addresses alone is insufficient for Loblaw to demonstrate that the data it retains is anonymized.”

“Before communicating personal information outside Québec, a person carrying on an enterprise must conduct a privacy impact assessment. ... The information may be communicated if the assessment establishes that it would receive adequate protection, in particular in light of generally recognized principles regarding the protection of personal information. The communication of the information must be the subject of a written agreement that takes into account, in particular, the results of the assessment and, if applicable, the terms agreed on to mitigate the risks identified in the assessment.”

“the process of anonymisation itself remains subject to the GDPR and must comply with applicable legal bases, transparency obligations and accountability requirements.”

“Such comments should be sent on 30 October 2026 at the latest using the provided form.”

“Spirit has hired Tonic.ai to deidentify that unstructured data, according to the report. The agent must file a certification with the court before every transfer. ... The buyer must publicly commit not to try to reidentify the data. It also may not pass it on unless the recipient makes the same commitment. ... The potential privacy losses or costs to consumers have been eliminated or mitigated.”

“Health information that does not identify an individual and with respect to which there is no reasonable basis to believe that the information can be used to identify an individual is not individually identifiable health information.”

“Biometric identifiers, including finger and voice prints; (Q) Full face photographic images and any comparable images”

“the BAA likely governs as a result of the typical conflict language in the BAA favoring the BAA when PHI is at issue.”

“ruled in favor of Thomson Reuters on the two primary issues that were before it – copyrightability of the Westlaw headnotes and fair use.”

“That the use of the data for training as specified in the agreement does not infringe a third party's copyright”

“A business that collects user data based on one set of privacy commitments cannot then unilaterally renege ... It may be unfair or deceptive for a company to adopt more permissive data practices ... through a surreptitious, retroactive amendment to its terms of service or privacy policy.”

“if the debtor in connection with offering a product or a service discloses to an individual a policy prohibiting the transfer of personally identifiable information about individuals to persons that are not affiliated with the debtor ... then the trustee may not sell or lease personally identifiable information to any person unless– (A) such sale or such lease is consistent with such policy; or (B) after appointment of a consumer privacy ombudsman”

“If a hearing is required under section 363(b)(1)(B), the court shall order the United States trustee to appoint, not later than 7 days before the commencement of the hearing, 1 disinterested person (other than the United States trustee) to serve as the consumer privacy ombudsman in the case”

“De curator is belast met het beheer en de vereffening van de failliete boedel. ... De goederen worden in het openbaar of met toestemming van de rechter-commissaris ondershands verkocht.”

“Google, at $10m, won the August auction (as summarised by the fetch tool; hearing scheduled 14 October 2026).”

“Any release in the United States of "technology" or source code to a foreign person is a deemed export to the foreign person's most recent country of citizenship or permanent residency.”

“Customer shall not export, reexport, or transfer the Controlled Subject Matter except as authorized by these laws and regulations.”

“(b) Biometric identifiers collected about or maintained on more than 1,000 U.S. persons; ... (d) Personal health data collected about or maintained on more than 10,000 U.S. persons; (e) Personal financial data collected about or maintained on more than 10,000 U.S. persons; (f) Covered personal identifiers collected about or maintained on more than 100,000 U.S. persons”

“no U.S. person ... may knowingly engage in any transaction that involves any access by a foreign person to government-related data or bulk U.S. sensitive personal data and that involves data brokerage with any foreign person that is not a covered person unless the U.S. person: (1) Contractually requires that the foreign person refrain from engaging in a subsequent covered data transaction involving data brokerage of the same data with a country of concern or covered person; and (2) Reports any known or suspected violations”

“Review customer, partner, vendor, and data license agreements, identify data held as a service provider or processor, and review platform terms for the systems the data will be extracted from.”

“The licensor agrees to deliver, at the time of license, a structured record of the data's origin”

“Employees shall have the right to self-organization, to form, join, or assist labor organizations”

“Where employees are unionized, the collective bargaining agreement may restrict the sale, and the company may have bargaining obligations.”

“De ondernemer behoeft de instemming van de ondernemingsraad voor elk door hem voorgenomen besluit tot vaststelling, wijziging of intrekking van: ... k. een regeling omtrent het verwerken van alsmede de bescherming van de persoonsgegevens van de in de onderneming werkzame personen”

“Der Betriebsrat hat, soweit eine gesetzliche oder tarifliche Regelung nicht besteht, in folgenden Angelegenheiten mitzubestimmen: ... 6. Einführung und Anwendung von technischen Einrichtungen, die dazu bestimmt sind, das Verhalten oder die Leistung der Arbeitnehmer zu überwachen;”

“"Deidentified" means information that cannot reasonably be used to infer information about, or otherwise be linked to, a particular consumer provided that the business that possesses the information: (1) Takes reasonable measures to ensure that the information cannot be associated with a consumer or household. (2) Publicly commits to maintain and use the information in deidentified form and not to attempt to reidentify the information ... (3) Contractually obligates any recipients of the information to comply with all provisions of this subdivision.”

“Exclude high-risk data entirely rather than relying on de-identification. Consider privileged material, HR and personnel files, payroll and tax records, health and benefits information, union-related communications, customer and partner confidential information, licensed data, and data from regulated systems.”

“agrees not to grant a security interest in its intellectual property to anyone else (lenders watch the disposition or asset sale covenant for borrowers using it to dispose of material intellectual property)”

“when and as authorized by a resolution adopted by the holders of a majority of the outstanding stock of the corporation entitled to vote thereon”

“Do not share sample data before this review, since a sample itself could be a disclosure.”

“If your Atlassian organization has an active Enterprise plan, you can opt-out of metadata contribution. If your Atlassian organization’s highest active plan is Free, Standard, or Premium, metadata contribution is always on, and you’re not able to opt-out. ... every customer has the option to opt out of contributing in-app data.”

“We may also use Customer Data to train our AI models in compliance with our obligations under the Agreement.”