Rights & safeguards

Cross-border licensing starts with a jurisdiction map

Questions to resolve when the seller, subjects, buyer and processing locations span countries.

Sources and guidance · Reviewed October 2026
These are review agendas with official sources, not legal clearance or buyer-eligibility lists. Shared EU rules are covered together rather than repeated as country-name-swapped articles.

Find the relevant review context

17 jurisdiction guides

Cross-border preparation · 01

United Kingdom data licensing preparation guide

Prepare a UK dataset for licensing: distinguish permission to train from the UK international-transfer route.

Cross-border preparation · 02

Canada data licensing preparation guide

Separate Canadian outsourcing guidance from an independent AI-training disclosure and identify the applicable privacy regime.

Cross-border preparation · 03

European Union data licensing preparation guide

A shared GDPR preparation guide covering Ireland, Germany, France, Netherlands, Spain, Italy, Sweden, Poland and Estonia.

Cross-border preparation · 04

Switzerland data licensing preparation guide

Prepare Swiss transfer and transparency questions without assuming EU documentation covers the Swiss position.

Cross-border preparation · 05

Australia data licensing preparation guide

Prepare an Australian licensing review around APP applicability, overseas disclosure and recipient accountability.

Cross-border preparation · 06

South Korea data licensing preparation guide

Distinguish provision from consignment and prepare a Korean PIPA overseas-transfer review for AI data licensing.

Cross-border preparation · 07

Malaysia data licensing preparation guide

Prepare a Malaysia-specific section 129 review using current cross-border guidance rather than an outdated transfer template.

Cross-border preparation · 08

Israel data licensing preparation guide

Prepare Israeli database-transfer and onward-transfer questions before offering an AI training corpus abroad.

Cross-border preparation · 09

United Arab Emirates data licensing preparation guide

Identify the applicable UAE, DIFC or ADGM regime before drafting a dataset licence or cross-border schedule.

Cross-border preparation · 10

Mexico data licensing preparation guide

Use Mexico’s current private-sector law and reconstruct the notice and transfer permissions behind a dataset.

Cross-border preparation · 11

New Zealand data licensing preparation guide

Distinguish overseas agency processing from disclosure for a lab’s own use under New Zealand’s privacy framework.

Cross-border preparation · 12

India data licensing preparation guide

Prepare an Indian dataset review around current DPDP instruments, commencement dates and source-specific permissions.

Cross-border preparation · 13

Singapore data licensing preparation guide

Prepare Singapore PDPA transfer-limitation evidence and distinguish independent licensing from data-intermediary services.

Cross-border preparation · 14

Japan data licensing preparation guide

Prepare APPI foreign-recipient and information-category questions alongside a Japanese dataset’s rights and quality evidence.

Cross-border preparation · 15

Brazil data licensing preparation guide

Prepare a Brazilian LGPD transfer review using ANPD’s actual mechanisms and current decisions.

Cross-border preparation · 16

Türkiye data licensing preparation guide

Prepare a Turkish KVKK transfer review using the amended Article 9 framework and role-specific standard contracts.

Cross-border preparation · 17

China data licensing preparation guide

Prepare mainland China data-classification and export questions before giving an overseas AI lab access.

Map more than the seller’s address

List where the holder is established, where the people described are located, where collection happened, where the buyer operates and where data will be stored or accessed. Different obligations may apply to each part of the transaction.

Separate buyer eligibility from legality

A programme accepting sellers from a country does not establish a lawful basis to share their data. Confirm the buyer’s commercial requirements separately from privacy, intellectual-property, sector and transfer rules.

Ask local advisers specific questions

Provide the inventory, data-subject categories, collection notices, contracts, recipient list and intended use. Ask about applicable privacy law, international-transfer mechanisms, required approvals, tax treatment and invoicing. This site does not certify eligibility in any jurisdiction.

Use the official regulator first

For a UK-related transaction, start with ICO guidance; for US consumer privacy and security considerations, start with the FTC and relevant state or sector authorities. For other jurisdictions, consult the responsible regulator and qualified local counsel.