Data & AI guide
Company data, data protection and AI: questions and answers
AI developers now pay for data that is not on the open web: engineering records, technical archives, software repositories, industry-specific documents. Many Greek companies hold exactly that kind of material, and some are being approached by buyers and intermediaries.
These pages answer the questions a business owner, a board or an administrator asks before saying yes: what the company actually owns, what must happen to personal data, what the EU AI Act means for a seller, which contract terms decide the value of a deal, and how intermediaries are paid. They reflect the law as reviewed on 28 October 2026.
Each page cites the provisions it relies on. Rules in this field are changing, and proposals under discussion in Brussels are identified as proposals, not as law.
01 · 2 questions
Rights and data protection
- Can my company license its data to AI developers, and how much of that data is actually ours to license?In principle, yes. A Greek company can license data it lawfully holds and controls, in the same way it licenses software or know-how. The hard part is the inventory, not the contract. A typical company archive mixes the company's own records with material clients sent in confidence, personal data, work created by employees and freelancers, bought-in content and open-source code. Each of these has its own owner and its own limits, so before any licence the company has to sort what it can grant freely, what it can grant only after cleaning or consent, and what it must leave out.Read →
- What personal data do we have to remove or anonymise before we license company data for AI training?Every piece of personal data in the dataset either comes out, is made genuinely anonymous, or stays in with a lawful basis for the new purpose, prior information to the people concerned and, usually, a prior impact assessment. Anonymous data falls outside data protection law; pseudonymised data, where names are replaced by codes and the company keeps the key, does not. For most licences the sensible aim is anonymisation, tested against the means reasonably likely to be used to identify people, backed by a contractual ban on re-identification.Read →
02 · 2 questions
AI Act and contracts
- If we license data to an AI developer, what does the EU AI Act mean for us, and what will the buyer ask us to confirm?The AI Act places the training-data obligations on the developer, not on the company that supplies the data. Providers of general-purpose AI models must keep technical documentation that describes their training data, have a policy to comply with EU copyright law, including rightholders' opt-outs from text and data mining, and publish a summary of the content used for training on the Commission's template. Those duties apply since 2 August 2025. A developer can only meet them if its suppliers can tell it where each dataset came from, on what rights, and how it was prepared, so those questions reach the seller as due diligence requests, warranties and documentation obligations in the licence.Read →
- We have an offer to license our data to an AI developer. Which terms in the contract really matter?Price gets the attention, but the value of a data licence sits in a handful of other clauses: what exactly is licensed and for which use, whether the licence is exclusive, what happens to samples shown before signing, what the buyer may not do with the data, what the seller warrants and up to what amount it answers for those warranties, what happens to the data and to models trained on it when the licence ends, and how payment is calculated and checked. A licence that is silent on these points tends to be read in favour of whoever holds the data at the end, and that is the buyer.Read →
Your own case
Every data deal turns on its documents, its personal data and its contract. L+A advises Greek companies on data protection, data licensing and AI regulation.
This page is general information, not legal advice; the answer in any real case depends on its facts and documents.
L+A advises Greek companies on data protection, data licensing and the regulation of artificial intelligence.
Send us your question
Tell us about your case. A lawyer of the firm will reply by email.
Your message goes only to the lawyers of the firm and is used only to reply to you. You may write in Greek or English.