Who Controls the Data? Ownership, Access Rights, and Governance Authority

As data becomes an increasingly valuable economic resource, questions about who controls it, who can access it, and who has the authority to determine its use are becoming central to business operations and digital markets.

This research examines the distinctions between data ownership, possession, access rights, permitted use, and governance authority. It explores how these relationships influence commercial opportunities, contractual arrangements, technology dependence, and the ability of organizations to benefit from information they generate or manage.

Drawing on OECD research, the European Union's Data Act, and the General Data Protection Regulation (GDPR), the study examines how legal rights and practical control over data may be distributed among businesses, technology providers, equipment users, and other parties.

The research highlights why storing or generating data does not automatically establish unrestricted rights over its use. It also considers how access restrictions, interoperability limitations, and governance arrangements can influence competition, operational flexibility, and economic value.

Understanding these distinctions is increasingly important for organizations operating across connected products, cloud services, and data-dependent business environments.