Can a private equity firm sell or license its portfolio companies' data?

The short answer: the company owns the records, so the company licenses them

Usually not directly. A private equity fund owns shares in a portfolio company, while the records belong to the operating company itself, the legal entity whose employees created them. The party that can license those records is therefore the company, acting through its board and an authorized officer. Fund documents, confidentiality terms and privacy promises can further limit what a sponsor does with portfolio information.

The word sell also misleads. Through SourceX, data is licensed, not sold: the company keeps ownership, agrees the scope and price, and is bound only once it signs. The prior question, whether a single company can license its records to AI developers, has its own page; this page covers what changes when the sponsor is the one asking.

What the rules and documents actually say

Ownership of employee work. Under US copyright law, material an employee prepares within the scope of employment is a work made for hire, and the employer is treated as its author and owner, as the Copyright Office's Circular 30 on works made for hire explains. Contractors are different: their work belongs to the company only if it fits a statutory category and a signed writing makes it a work for hire, or if the rights were assigned in writing.

Licensing some rights while keeping others. Under 17 U.S.C. section 201, copyright ownership can be transferred in whole or in part, and any exclusive right can be transferred and owned separately. That is what allows a company to grant exclusive training rights for a fixed period while ownership stays put. Copyright does not settle every question about structured records, so licenses also rely on contract terms.

Privacy promises. FTC staff have stated that promises not to use customer data for undisclosed purposes, such as training or updating models, are enforceable whether made in privacy policies, terms of service or marketing (FTC staff, January 2024). A separate staff post warned that adopting more permissive data practices, including AI training, through a quiet retroactive change to terms or privacy policies could be unfair or deceptive (FTC staff, February 2024). These are staff guidance, not rules, but they show where scrutiny lands.

State privacy law. Where California's CCPA applies, a business must give notice at collection, keep its use of personal information reasonably necessary and proportionate, and have a written agreement limiting use to specified purposes when it sells or shares personal information or discloses it to a service provider or contractor (Cal. Civ. Code section 1798.100 and following). Other states have their own privacy laws.

Fund and company documents. LPAs, side letters, shareholder agreements, management services agreements and credit agreements are private, so their terms vary. Read them for confidentiality duties covering portfolio information, limits on the manager using that information for its own benefit, the treatment of fees received by the manager or its affiliates, consent rights held by co-investors or minority holders, and lender restrictions on licensing intellectual property.

Sponsor-level use vs company-level licensing

How the answer changes by ownership situation

The clean route, step by step

1. The sponsor flags candidates in a portfolio review; the guide to assessing portfolio company data opportunities covers what to look at.
2. The company's board approves exploring a license and names an authorized officer, such as the CEO or CFO.
3. That officer applies, or is introduced, and SourceX qualifies the company on size, history, data breadth and rights.
4. The company maps its systems and the years each covers, while counsel reviews customer contracts, privacy notices, employee policies and contractor assignments.
5. SourceX and the company settle one all-in price and the terms, typically an exclusive license for AI training for an agreed term.
6. AI labs and data buyers review; data moves only after an executed agreement and the company's authorization, under de-identification and redaction rules agreed in advance.
7. Payment reaches the company as a single amount, usually about 60 days after invoicing once the buyer has selected the data, and ownership never changes hands.

Treat every portfolio company as its own licensor, with its own approvals and its own agreement. The comparison of licensing and data products explains when building a product instead makes more sense.

Governance and disclosure good practice

• Board minutes approving the review and the officer's authority to sign.
• Disclosure by sponsor-appointed directors of any personal or affiliate economics, including referral rewards.
• Portfolio information kept inside each company; one company's records never placed in another company's data room.
• A logged rights review covering customer contracts, privacy notices, employee policies and contractor assignments.
• Lenders told before signing where the credit agreement restricts licensing intellectual property.
• The license reported to LPs in the same way the fund reports other material events at the company.

Questions for fund counsel and company counsel

1. Does any LPA term, side letter or manager policy limit how we use portfolio company information?
2. At the company, who must approve a license: the board, shareholders, co-investors, lenders?
3. Did contractors and agencies assign their work product in writing?
4. What did privacy notices and customer terms promise when the records were created?
5. Are any records subject to sector rules, such as health or financial privacy?
6. If a sponsor affiliate or employee would receive any payment linked to the license, how should it be disclosed and approved?

This is general information, not legal, tax or financial advice. Confirm with your own counsel, tax adviser or professional body before acting.

Where a referral partner fits

An operating partner or deal team member can introduce a qualifying company, and the company stays the licensor throughout. If a deal closes, the partner earns 25% of the eligible platform fees SourceX actually collects from that company's licensing deals, capped at $100,000 per referred company and payable only after the buyer pays and SourceX receives its fee. It is paid out of SourceX's own fee, so the company's proceeds are untouched, and no reward is guaranteed. Anyone receiving it should clear it under their own firm's rules first; see operating partner referral fees and conflicts of interest. Sponsor-side partners can read more on referral opportunities for private equity operating partners.

Next step

Pick one portfolio company and test it against who qualifies. The essentials: a US business, 50+ full-time employees at peak (contractors excluded), several years of documented operations, rights the company can grant, and an owner, CEO, CFO or authorized representative willing to sign. The company fit checker gives a preliminary, non-binding read. If it fits, register as a partner and introduce the CEO or CFO, or have them apply at sourcex.si/apply.