Can a company facing a privacy class action still license its data?

The short answer: separate the records at issue

A pending privacy lawsuit does not automatically disqualify a company, but it changes the scope. The records the case is about, such as website chat transcripts in a chat-wiretap claim or customer calls in a recording claim, are normally excluded from any license while the case is open. Other record sets, such as engineering history, finance records or internal operating documents, may still be discussed once litigation counsel agrees.

The legal hold, which freezes relevant records in place, and any settlement terms, which can change what the company may keep or use, both take priority. A data license has to fit around them.

What the statutes behind these suits say

Many suits that reach mid-sized companies rest on wiretap and recording laws rather than on general privacy statutes. Three texts are worth knowing.

• Federal Wiretap Act. 18 U.S.C. 2511 prohibits intentionally intercepting wire, oral or electronic communications, and separately prohibits knowingly disclosing or using the contents of a communication that was intercepted unlawfully. Section 2511(2)(d) lets a party to the communication, or someone with one party's prior consent, intercept it unless the purpose is a criminal or tortious act.
• California recording law. California Penal Code 632 prohibits recording a confidential communication without the consent of all parties, and section 632.7 separately covers recording cellular and cordless calls. Both sit within the California Invasion of Privacy Act, usually shortened to CIPA.
• California Consumer Privacy Act. The CCPA gives consumers rights to know, delete and opt out of the sale or sharing of their information, but consumers generally cannot sue under it except over certain data breaches. The complaint's causes of action tell you which statute, and which records, are really at issue.

The disclosure-or-use prohibition is the practical point for licensing. If plaintiffs allege that recordings or chat logs were captured unlawfully, licensing those same records to a third party could be argued to be a further disclosure or use. That is why contested records are the last thing anyone should offer. Biometric claims, such as suits over fingerprint timeclocks, follow the same logic: the biometric data stays out.

Which records are out, and which may still be discussed

Why legal holds and settlement terms come first

A legal hold tells employees and IT not to delete or alter records relevant to the case. Preparing data for a license means copying, filtering, redacting and de-identifying, and none of that may disturb the preserved originals or the chain of custody counsel relies on. Whether records under a litigation hold can be shared at all is covered separately; the short version is that counsel decides.

Settlements can also reshape the picture. A class settlement may include practice changes or deletion commitments alongside payment, and those terms can reach the same systems a license would draw on. If the case is close to resolution, waiting for final terms is usually cheaper than scoping twice.

How it applies in common advisor situations

For call-heavy businesses, the guide to CIPA suits over AI call recording goes deeper on recording claims.

Is what remains still worth licensing?

Often the excluded set is narrow. A company sued over its website chat may still hold years of engineering tickets, project files and finance history across many systems. Whether that remainder is enough depends on breadth and depth, and the page on how much data a company needs sets out what buyers look for. If the suit concerns the company's core records, as with a contact center sued over most of its calls, waiting is usually the better choice.

Questions to ask litigation counsel

1. Which systems, record types, date ranges and states does the complaint cover?
2. What does the hold notice preserve, and may copies of unrelated records be made and processed?
3. Are settlement discussions under way, and could they include deletion or practice changes?
4. Would licensing any record set give plaintiffs a disclosure or use argument?
5. Do insurers or indemnifying vendors need notice of a proposed license?
6. When would counsel be comfortable revisiting the excluded records?

Disclosure good practice for the referring advisor

Name the suit in the introduction in one line and leave the detail to counsel. Do not send pleadings, recordings or transcripts to SourceX, and do not describe the contested records. If a license later closes, partners earn 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 per referred company, paid only after the buyer pays and SourceX receives its fee. No reward is guaranteed.

This is general information, not legal, tax or financial advice. Confirm with your own counsel, tax adviser or professional body before acting.

Next step

Once counsel has confirmed which records are clear, test the remainder with the company fit checker, then register as a partner to submit the introduction, with the suit disclosed in one line. Sell-side advisors can raise the question alongside other diligence items. Companies under a regulatory order rather than a lawsuit face a different review, covered in FTC consent orders and data licensing.