pre_license_checklist: [ ] who owns each record type [ ] consent covers the intended use [ ] personal data identified and handled [ ] third-party data excluded or cleared [ ] permitted uses written, specific, enforceable [ ] privacy review done before delivery, not after
three rules
- map before you license. know which fields hold personal data, customer data, or third-party content.
- write the permitted use. "ai training" is not specific enough. say what, how, and for how long.
- review before delivery. privacy prep is cheaper before the dataset leaves your hands.
general information, not legal advice. get a qualified lawyer for your contracts.
sourcex runs privacy preparation with supplier review as part of every transaction.
how sourcex works