{ "name": "Reviews a data company sale can trigger", "title": "Reviews a data company sale can trigger", "kind": "terms-board", "url": "https://sellmydatacompany.com/datasets/data-company-sale-review-law/", "csv": "https://sellmydatacompany.com/datasets/data-company-sale-review-law.csv", "markdown": "https://sellmydatacompany.com/datasets/data-company-sale-review-law/index.md", "computed_at": "2026-10-28", "license": "https://sellmydatacompany.com/terms", "headline": "5 US and UK reviews a sale of a data company can trigger, read 28 October 2026.", "quotes": [ "5 US and UK reviews a sale of a data company can trigger, read 28 October 2026.", "Where it applies, by review: United States 3 of 5, United Kingdom 2 of 5 (5 reviews, read 28 October 2026).", "What brings a deal under it, by review: sensitive personal data held by the business 2 of 5, access to bulk sensitive data by a country of concern 1 of 5, the business's sector 1 of 5, turnover or share of supply 1 of 5 (5 reviews, read 28 October 2026).", "Whether a filing is required, by review: not stated 3 of 5, mandatory before closing 1 of 5, the transaction is prohibited or restricted 1 of 5 (5 reviews, read 28 October 2026).", "The rule, in its words, by review: stated 5 of 5 (5 reviews, read 28 October 2026)." ], "citation": "\"Reviews a data company sale can trigger\", updated 2026-10-28, https://sellmydatacompany.com/datasets/data-company-sale-review-law/.", "national": { "n": 5, "unit": "reviews", "documents": 5, "published_sources": 5, "named_sources": 8 }, "board": { "type": "clauses", "noun": { "one": "review", "many": "reviews" }, "document": { "one": "statute or regulator page", "many": "statute and regulator pages" }, "fields": [ { "id": "jurisdiction", "label": "Where it applies", "counts": { "us": 3, "uk": 2 }, "values": [ { "value": "us", "text": "United States" }, { "value": "uk", "text": "United Kingdom" } ] }, { "id": "trigger", "label": "What brings a deal under it", "counts": { "sensitive-personal-data": 2, "bulk-data-access": 1, "turnover-or-share": 1, "sector": 1 }, "values": [ { "value": "deal-size", "text": "the size of the deal or the parties" }, { "value": "sensitive-personal-data", "text": "sensitive personal data held by the business" }, { "value": "bulk-data-access", "text": "access to bulk sensitive data by a country of concern" }, { "value": "sector", "text": "the business's sector" }, { "value": "turnover-or-share", "text": "turnover or share of supply" } ] }, { "id": "filing", "label": "Whether a filing is required", "counts": { "not-stated": 3, "prohibition": 1, "mandatory": 1 }, "values": [ { "value": "mandatory", "text": "mandatory before closing" }, { "value": "voluntary", "text": "voluntary or called in" }, { "value": "prohibition", "text": "the transaction is prohibited or restricted" } ] }, { "id": "clause", "label": "The rule, in its words", "counts": { "stated": 5 }, "values": [ { "value": "stated", "text": "stated" } ], "clause": true } ], "lead": { "type": "count", "field": null, "value": null, "n": 5, "of": 5, "label": "Reviews on the register" }, "vendors": [ { "name": "CFIUS: sensitive personal data, 31 CFR 800.241", "answers": { "jurisdiction": { "value": "us", "text": "United States", "documents": [ { "document": "Code of Federal Regulations via LII", "url": "https://www.law.cornell.edu/cfr/text/31/800.241", "value": "us", "quote": "PART 800—REGULATIONS PERTAINING TO CERTAIN INVESTMENTS IN THE UNITED STATES BY FOREIGN PERSONS" } ] }, "trigger": { "value": "sensitive-personal-data", "text": "sensitive personal data held by the business", "documents": [ { "document": "Code of Federal Regulations via LII", "url": "https://www.law.cornell.edu/cfr/text/31/800.241", "value": "sensitive-personal-data", "quote": "Has maintained or collected any identifiable data within one or more categories described in paragraph (a)(1)(ii) of this section on greater than one million individuals" } ] }, "filing": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "Code of Federal Regulations via LII", "url": "https://www.law.cornell.edu/cfr/text/31/800.241", "value": "not-stated", "quote": "" } ] }, "clause": { "value": "stated", "text": "(a) The term sensitive personal data means, except as provided in paragraph (b) of this…", "documents": [ { "document": "Code of Federal Regulations via LII", "url": "https://www.law.cornell.edu/cfr/text/31/800.241", "value": "stated", "quote": "(a) The term sensitive personal data means, except as provided in paragraph (b) of this section:" } ] } } }, { "name": "CFIUS: TID US business, 31 CFR 800.248", "answers": { "jurisdiction": { "value": "us", "text": "United States", "documents": [ { "document": "Code of Federal Regulations via LII", "url": "https://www.law.cornell.edu/cfr/text/31/800.248", "value": "us", "quote": "The term TID U.S. business means any U.S. business that:" } ] }, "trigger": { "value": "sensitive-personal-data", "text": "sensitive personal data held by the business", "documents": [ { "document": "Code of Federal Regulations via LII", "url": "https://www.law.cornell.edu/cfr/text/31/800.248", "value": "sensitive-personal-data", "quote": "Maintains or collects, directly or indirectly, sensitive personal data of U.S. citizens." } ] }, "filing": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "Code of Federal Regulations via LII", "url": "https://www.law.cornell.edu/cfr/text/31/800.248", "value": "not-stated", "quote": "" } ] }, "clause": { "value": "stated", "text": "Corporation A, a U.S. business, is a credit reporting agency and maintains consumer…", "documents": [ { "document": "Code of Federal Regulations via LII", "url": "https://www.law.cornell.edu/cfr/text/31/800.248", "value": "stated", "quote": "Corporation A, a U.S. business, is a credit reporting agency and maintains consumer reports meeting the description under § 800.241(a)(1)(ii)(B) on greater than one million individuals, including U.S. citizens. Corporation A maintains sensitive personal data and is therefore a TID U.S. business." } ] } } }, { "name": "DOJ Data Security Program, 28 CFR Part 202", "answers": { "jurisdiction": { "value": "us", "text": "United States", "documents": [ { "document": "Electronic Code of Federal Regulations", "url": "https://www.ecfr.gov/current/title-28/chapter-I/part-202", "value": "us", "quote": "ACCESS TO U.S. SENSITIVE PERSONAL DATA AND GOVERNMENT-RELATED DATA BY COUNTRIES OF CONCERN OR COVERED PERSONS" } ] }, "trigger": { "value": "bulk-data-access", "text": "access to bulk sensitive data by a country of concern", "documents": [ { "document": "Electronic Code of Federal Regulations", "url": "https://www.ecfr.gov/current/title-28/chapter-I/part-202", "value": "bulk-data-access", "quote": "Covered personal identifiers collected about or maintained on more than 100,000 U.S. persons; or" } ] }, "filing": { "value": "prohibition", "text": "the transaction is prohibited or restricted", "documents": [ { "document": "Electronic Code of Federal Regulations", "url": "https://www.ecfr.gov/current/title-28/chapter-I/part-202", "value": "prohibition", "quote": "no U.S. person, on or after the effective date, may knowingly engage in a covered data transaction involving data brokerage with a country of concern or covered person" } ] }, "clause": { "value": "stated", "text": "The term data brokerage means the sale of data, licensing of access to data, or similar…", "documents": [ { "document": "Electronic Code of Federal Regulations", "url": "https://www.ecfr.gov/current/title-28/chapter-I/part-202", "value": "stated", "quote": "The term data brokerage means the sale of data, licensing of access to data, or similar commercial transactions, excluding an employment agreement, investment agreement, or a vendor agreement" } ] } } }, { "name": "UK merger control, Enterprise Act 2002 section 23", "answers": { "jurisdiction": { "value": "uk", "text": "United Kingdom", "documents": [ { "document": "Enterprise Act 2002 on legislation.gov.uk", "url": "https://www.legislation.gov.uk/ukpga/2002/40/section/23", "value": "uk", "quote": "the value of the turnover in the United Kingdom of the enterprise being taken over exceeds" } ] }, "trigger": { "value": "turnover-or-share", "text": "turnover or share of supply", "documents": [ { "document": "Enterprise Act 2002 on legislation.gov.uk", "url": "https://www.legislation.gov.uk/ukpga/2002/40/section/23", "value": "turnover-or-share", "quote": "the value of the turnover in the United Kingdom of the enterprise being taken over exceeds" } ] }, "filing": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "Enterprise Act 2002 on legislation.gov.uk", "url": "https://www.legislation.gov.uk/ukpga/2002/40/section/23", "value": "not-stated", "quote": "" } ] }, "clause": { "value": "stated", "text": "For the purposes of this Part, a relevant merger situation has been created if", "documents": [ { "document": "Enterprise Act 2002 on legislation.gov.uk", "url": "https://www.legislation.gov.uk/ukpga/2002/40/section/23", "value": "stated", "quote": "For the purposes of this Part, a relevant merger situation has been created if" } ] } } }, { "name": "UK National Security and Investment Act: data infrastructure", "answers": { "jurisdiction": { "value": "uk", "text": "United Kingdom", "documents": [ { "document": "GOV.UK guidance on notifiable acquisitions", "url": "https://www.gov.uk/government/publications/national-security-and-investment-act-guidance-on-notifiable-acquisitions/national-security-and-investment-act-guidance-on-notifiable-acquisitions", "value": "uk", "quote": "you are legally required to tell the government about acquisitions of certain entities in 17 sensitive areas of the economy" } ] }, "trigger": { "value": "sector", "text": "the business's sector", "documents": [ { "document": "GOV.UK guidance on notifiable acquisitions", "url": "https://www.gov.uk/government/publications/national-security-and-investment-act-guidance-on-notifiable-acquisitions/national-security-and-investment-act-guidance-on-notifiable-acquisitions", "value": "sector", "quote": "Data infrastructure is physical or virtualised infrastructure used for storing, processing or transmitting data in digital form" } ] }, "filing": { "value": "mandatory", "text": "mandatory before closing", "documents": [ { "document": "GOV.UK guidance on notifiable acquisitions", "url": "https://www.gov.uk/government/publications/national-security-and-investment-act-guidance-on-notifiable-acquisitions/national-security-and-investment-act-guidance-on-notifiable-acquisitions", "value": "mandatory", "quote": "you may be legally required to tell the government about it (known as a ‘mandatory notification’)" } ] }, "clause": { "value": "stated", "text": "Data infrastructure is physical or virtualised infrastructure used for storing…", "documents": [ { "document": "GOV.UK guidance on notifiable acquisitions", "url": "https://www.gov.uk/government/publications/national-security-and-investment-act-guidance-on-notifiable-acquisitions/national-security-and-investment-act-guidance-on-notifiable-acquisitions", "value": "stated", "quote": "Data infrastructure is physical or virtualised infrastructure used for storing, processing or transmitting data in digital form or infrastructure that is provided for peering, interconnection or exchange of digital data" } ] } } } ] }, "subject_kind": "review", "rows": [ { "subject": "CFIUS: sensitive personal data, 31 CFR 800.241", "url": "https://www.law.cornell.edu/cfr/text/31/800.241", "document": "Code of Federal Regulations via LII", "question": "jurisdiction", "answer": "us", "answer_text": "United States", "status": "stated", "retrieved_at": "2026-10-28", "quote": "PART 800—REGULATIONS PERTAINING TO CERTAIN INVESTMENTS IN THE UNITED STATES BY FOREIGN PERSONS", "text_sha256": "cc3bc9e0f13d65dcd3ba3f2cde128ed39ae2dcc90338200a91b03d32fd34019d" }, { "subject": "CFIUS: sensitive personal data, 31 CFR 800.241", "url": "https://www.law.cornell.edu/cfr/text/31/800.241", "document": "Code of Federal Regulations via LII", "question": "trigger", "answer": "sensitive-personal-data", "answer_text": "sensitive personal data held by the business", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Has maintained or collected any identifiable data within one or more categories described in paragraph (a)(1)(ii) of this section on greater than one million individuals", "text_sha256": "cc3bc9e0f13d65dcd3ba3f2cde128ed39ae2dcc90338200a91b03d32fd34019d" }, { "subject": "CFIUS: sensitive personal data, 31 CFR 800.241", "url": "https://www.law.cornell.edu/cfr/text/31/800.241", "document": "Code of Federal Regulations via LII", "question": "filing", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-28", "quote": "Left open by the statute or regulator page (9,286 characters, read in full 2026-10-28).", "text_sha256": "cc3bc9e0f13d65dcd3ba3f2cde128ed39ae2dcc90338200a91b03d32fd34019d" }, { "subject": "CFIUS: sensitive personal data, 31 CFR 800.241", "url": "https://www.law.cornell.edu/cfr/text/31/800.241", "document": "Code of Federal Regulations via LII", "question": "clause", "answer": "stated", "answer_text": "(a) The term sensitive personal data means, except as provided in paragraph (b) of this…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "(a) The term sensitive personal data means, except as provided in paragraph (b) of this section:", "text_sha256": "cc3bc9e0f13d65dcd3ba3f2cde128ed39ae2dcc90338200a91b03d32fd34019d" }, { "subject": "CFIUS: TID US business, 31 CFR 800.248", "url": "https://www.law.cornell.edu/cfr/text/31/800.248", "document": "Code of Federal Regulations via LII", "question": "jurisdiction", "answer": "us", "answer_text": "United States", "status": "stated", "retrieved_at": "2026-10-28", "quote": "The term TID U.S. business means any U.S. business that:", "text_sha256": "9634cddc82b44108ed64758efc04fa2f140a29d0fb8a972e675256eb86c92058" }, { "subject": "CFIUS: TID US business, 31 CFR 800.248", "url": "https://www.law.cornell.edu/cfr/text/31/800.248", "document": "Code of Federal Regulations via LII", "question": "trigger", "answer": "sensitive-personal-data", "answer_text": "sensitive personal data held by the business", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Maintains or collects, directly or indirectly, sensitive personal data of U.S. citizens.", "text_sha256": "9634cddc82b44108ed64758efc04fa2f140a29d0fb8a972e675256eb86c92058" }, { "subject": "CFIUS: TID US business, 31 CFR 800.248", "url": "https://www.law.cornell.edu/cfr/text/31/800.248", "document": "Code of Federal Regulations via LII", "question": "filing", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-28", "quote": "Left open by the statute or regulator page (9,176 characters, read in full 2026-10-28).", "text_sha256": "9634cddc82b44108ed64758efc04fa2f140a29d0fb8a972e675256eb86c92058" }, { "subject": "CFIUS: TID US business, 31 CFR 800.248", "url": "https://www.law.cornell.edu/cfr/text/31/800.248", "document": "Code of Federal Regulations via LII", "question": "clause", "answer": "stated", "answer_text": "Corporation A, a U.S. business, is a credit reporting agency and maintains consumer…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Corporation A, a U.S. business, is a credit reporting agency and maintains consumer reports meeting the description under § 800.241(a)(1)(ii)(B) on greater than one million individuals, including U.S. citizens. Corporation A maintains sensitive personal data and is therefore a TID U.S. business.", "text_sha256": "9634cddc82b44108ed64758efc04fa2f140a29d0fb8a972e675256eb86c92058" }, { "subject": "DOJ Data Security Program, 28 CFR Part 202", "url": "https://www.ecfr.gov/current/title-28/chapter-I/part-202", "document": "Electronic Code of Federal Regulations", "question": "jurisdiction", "answer": "us", "answer_text": "United States", "status": "stated", "retrieved_at": "2026-10-28", "quote": "ACCESS TO U.S. SENSITIVE PERSONAL DATA AND GOVERNMENT-RELATED DATA BY COUNTRIES OF CONCERN OR COVERED PERSONS", "text_sha256": "e92b38263b4e31e6c668a1516f0206015a17604886799aeaaefd7cc210579bf4" }, { "subject": "DOJ Data Security Program, 28 CFR Part 202", "url": "https://www.ecfr.gov/current/title-28/chapter-I/part-202", "document": "Electronic Code of Federal Regulations", "question": "trigger", "answer": "bulk-data-access", "answer_text": "access to bulk sensitive data by a country of concern", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Covered personal identifiers collected about or maintained on more than 100,000 U.S. persons; or", "text_sha256": "e92b38263b4e31e6c668a1516f0206015a17604886799aeaaefd7cc210579bf4" }, { "subject": "DOJ Data Security Program, 28 CFR Part 202", "url": "https://www.ecfr.gov/current/title-28/chapter-I/part-202", "document": "Electronic Code of Federal Regulations", "question": "filing", "answer": "prohibition", "answer_text": "the transaction is prohibited or restricted", "status": "stated", "retrieved_at": "2026-10-28", "quote": "no U.S. person, on or after the effective date, may knowingly engage in a covered data transaction involving data brokerage with a country of concern or covered person", "text_sha256": "e92b38263b4e31e6c668a1516f0206015a17604886799aeaaefd7cc210579bf4" }, { "subject": "DOJ Data Security Program, 28 CFR Part 202", "url": "https://www.ecfr.gov/current/title-28/chapter-I/part-202", "document": "Electronic Code of Federal Regulations", "question": "clause", "answer": "stated", "answer_text": "The term data brokerage means the sale of data, licensing of access to data, or similar…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "The term data brokerage means the sale of data, licensing of access to data, or similar commercial transactions, excluding an employment agreement, investment agreement, or a vendor agreement", "text_sha256": "e92b38263b4e31e6c668a1516f0206015a17604886799aeaaefd7cc210579bf4" }, { "subject": "UK merger control, Enterprise Act 2002 section 23", "url": "https://www.legislation.gov.uk/ukpga/2002/40/section/23", "document": "Enterprise Act 2002 on legislation.gov.uk", "question": "jurisdiction", "answer": "uk", "answer_text": "United Kingdom", "status": "stated", "retrieved_at": "2026-10-28", "quote": "the value of the turnover in the United Kingdom of the enterprise being taken over exceeds", "text_sha256": "91b556206b146f04f6863b2d237da307bf3229bce922b706f3c164bf2cc52b06" }, { "subject": "UK merger control, Enterprise Act 2002 section 23", "url": "https://www.legislation.gov.uk/ukpga/2002/40/section/23", "document": "Enterprise Act 2002 on legislation.gov.uk", "question": "trigger", "answer": "turnover-or-share", "answer_text": "turnover or share of supply", "status": "stated", "retrieved_at": "2026-10-28", "quote": "the value of the turnover in the United Kingdom of the enterprise being taken over exceeds", "text_sha256": "91b556206b146f04f6863b2d237da307bf3229bce922b706f3c164bf2cc52b06" }, { "subject": "UK merger control, Enterprise Act 2002 section 23", "url": "https://www.legislation.gov.uk/ukpga/2002/40/section/23", "document": "Enterprise Act 2002 on legislation.gov.uk", "question": "filing", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-28", "quote": "Left open by the statute or regulator page (14,889 characters, read in full 2026-10-28).", "text_sha256": "91b556206b146f04f6863b2d237da307bf3229bce922b706f3c164bf2cc52b06" }, { "subject": "UK merger control, Enterprise Act 2002 section 23", "url": "https://www.legislation.gov.uk/ukpga/2002/40/section/23", "document": "Enterprise Act 2002 on legislation.gov.uk", "question": "clause", "answer": "stated", "answer_text": "For the purposes of this Part, a relevant merger situation has been created if", "status": "stated", "retrieved_at": "2026-10-28", "quote": "For the purposes of this Part, a relevant merger situation has been created if", "text_sha256": "91b556206b146f04f6863b2d237da307bf3229bce922b706f3c164bf2cc52b06" }, { "subject": "UK National Security and Investment Act: data infrastructure", "url": "https://www.gov.uk/government/publications/national-security-and-investment-act-guidance-on-notifiable-acquisitions/national-security-and-investment-act-guidance-on-notifiable-acquisitions", "document": "GOV.UK guidance on notifiable acquisitions", "question": "jurisdiction", "answer": "uk", "answer_text": "United Kingdom", "status": "stated", "retrieved_at": "2026-10-28", "quote": "you are legally required to tell the government about acquisitions of certain entities in 17 sensitive areas of the economy", "text_sha256": "c88a4b44f2e399b3affa20364b975e5b9ea6f358c8bf3ed3cdc17690c1e0dd69" }, { "subject": "UK National Security and Investment Act: data infrastructure", "url": "https://www.gov.uk/government/publications/national-security-and-investment-act-guidance-on-notifiable-acquisitions/national-security-and-investment-act-guidance-on-notifiable-acquisitions", "document": "GOV.UK guidance on notifiable acquisitions", "question": "trigger", "answer": "sector", "answer_text": "the business's sector", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Data infrastructure is physical or virtualised infrastructure used for storing, processing or transmitting data in digital form", "text_sha256": "c88a4b44f2e399b3affa20364b975e5b9ea6f358c8bf3ed3cdc17690c1e0dd69" }, { "subject": "UK National Security and Investment Act: data infrastructure", "url": "https://www.gov.uk/government/publications/national-security-and-investment-act-guidance-on-notifiable-acquisitions/national-security-and-investment-act-guidance-on-notifiable-acquisitions", "document": "GOV.UK guidance on notifiable acquisitions", "question": "filing", "answer": "mandatory", "answer_text": "mandatory before closing", "status": "stated", "retrieved_at": "2026-10-28", "quote": "you may be legally required to tell the government about it (known as a ‘mandatory notification’)", "text_sha256": "c88a4b44f2e399b3affa20364b975e5b9ea6f358c8bf3ed3cdc17690c1e0dd69" }, { "subject": "UK National Security and Investment Act: data infrastructure", "url": "https://www.gov.uk/government/publications/national-security-and-investment-act-guidance-on-notifiable-acquisitions/national-security-and-investment-act-guidance-on-notifiable-acquisitions", "document": "GOV.UK guidance on notifiable acquisitions", "question": "clause", "answer": "stated", "answer_text": "Data infrastructure is physical or virtualised infrastructure used for storing…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Data infrastructure is physical or virtualised infrastructure used for storing, processing or transmitting data in digital form or infrastructure that is provided for peering, interconnection or exchange of digital data", "text_sha256": "c88a4b44f2e399b3affa20364b975e5b9ea6f358c8bf3ed3cdc17690c1e0dd69" } ], "sources": [ { "url": "https://www.ftc.gov/enforcement/premerger-notification-program/current-thresholds", "label": "FTC: HSR current thresholds", "license": "quoted for comment from the publisher's own US and UK statutes, regulations and agency pages", "class": "primary-government", "status": "unread" }, { "url": "https://www.law.cornell.edu/cfr/text/31/800.241", "label": "31 CFR 800.241 sensitive personal data (CFIUS)", "license": "quoted for comment from the publisher's own US and UK statutes, regulations and agency pages", "class": "primary-government", "status": "read" }, { "url": "https://www.law.cornell.edu/cfr/text/31/800.248", "label": "31 CFR 800.248 TID US business (CFIUS)", "license": "quoted for comment from the publisher's own US and UK statutes, regulations and agency pages", "class": "primary-government", "status": "read" }, { "url": "https://www.ecfr.gov/current/title-28/chapter-I/part-202", "label": "28 CFR Part 202 (DOJ Data Security Program)", "license": "quoted for comment from the publisher's own US and UK statutes, regulations and agency pages", "class": "primary-government", "status": "read" }, { "url": "https://www.justice.gov/nsd/data-security", "label": "DOJ National Security Division: Data Security", "license": "quoted for comment from the publisher's own US and UK statutes, regulations and agency pages", "class": "primary-government", "status": "not-terms", "why": "the DOJ's own page for the Data Security Program, whose rule is recorded from 28 CFR Part 202 (source 4)" }, { "url": "https://www.gov.uk/government/publications/national-security-and-investment-act-guidance-on-notifiable-acquisitions/national-security-and-investment-act-guidance-on-notifiable-acquisitions", "label": "NSI Act: the 17 types of notifiable acquisitions", "license": "quoted for comment from the publisher's own US and UK statutes, regulations and agency pages", "class": "primary-government", "status": "read" }, { "url": "https://www.legislation.gov.uk/uksi/2021/1264/schedule/8", "label": "NSI Act (Notifiable Acquisition) Regulations 2021", "license": "quoted for comment from the publisher's own US and UK statutes, regulations and agency pages", "class": "primary-government", "status": "not-terms", "why": "schedule 8 of the regulations covers cryptographic authentication, not data infrastructure" }, { "url": "https://www.legislation.gov.uk/ukpga/2002/40/section/23", "label": "Enterprise Act 2002 section 23", "license": "quoted for comment from the publisher's own US and UK statutes, regulations and agency pages", "class": "primary-government", "status": "read" } ], "methodology": "Each review's own US and UK statutes, regulations and agency pages were read through estate-fetch and stored whole (sha256 on every row). For every statute or regulator page, four questions were answered from its own words: where it applies, what brings a deal under it, whether a filing is required, the rule, in its words. Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the statute or regulator page read does not address the question. A review with several statute and regulator pages reads 'varies' where they disagree. 5 reviews, 5 statute and regulator pages.", "embed": "
5 US and UK reviews a sale of a data company can trigger, read 28 October 2026.
Reviews a data company sale can trigger, sellmydatacompany.com
" }