Secondary Data Market

A secondary data market is a trading environment where datasets collected for one purpose, such as customer records gathered for service delivery, are bought, sold, or licensed to third parties who reuse them for other purposes, often to train AI models. For enterprise governance teams, these markets create real exposure: a company may unknowingly become a source or a buyer of data whose original consent, purpose limits, or licensing terms do not cover AI training. Compliance officers should trace where training data came from and confirm that the rights to reuse it were actually granted.

1 item

Research2026-10-13

Startup Graveyard Data Is Flowing Into AI Training Without Worker Consent

AI labs are purchasing operational data archives from failed startups, brokered by wind-down services such as SimpleClosure and Sunset. The archives contain employee emails, internal chat histories, calendars, and code repositories. No federal law currently prohibits these sales, leaving workers with no notice, no opt-out, and no recourse.

training data employee privacy data provenance vendor due diligence secondary data market GDPR AI training data