Is licensing company records legal in the US?

1. Which parts of company records can copyright cover?

Section 102 protects original works of authorship fixed in a tangible medium and lists literary works among the covered categories. Reports, manuals, messages and other written material may contain protected expression. Section 102(b) excludes ideas, procedures, processes, systems, methods of operation, concepts, principles and discoveries from that protection.

Section 103 includes compilations, but the copyright in a compilation extends only to the material contributed by its author. It does not create a new exclusive right in pre-existing material. A company archive therefore should not be treated as one uniform asset: original expression, existing material, facts and third-party works can sit side by side.

17 USC § 103(b): copyright in a compilation “extends only to the material contributed by the author of such work” and does not imply an exclusive right in pre-existing material.

2. What rights matter, and who owns them?

Section 106 gives the copyright owner exclusive rights that include reproduction, preparation of derivative works and distribution. Copying records into a dataset, transforming them and supplying them to a buyer can raise different questions from merely storing an internal backup.

Under section 201(a), copyright initially vests in the author. Section 201(b) addresses works made for hire, subject to the statutory definition and any qualifying written agreement to the contrary. Check the actual employment or contractor documents; do not assume that paying for work settles every right.

Section 202 separately states that ownership of copyright is distinct from ownership of the material object. Control of a laptop, mailbox or server is therefore not, by itself, a copyright chain of title.

17 USC § 202: “Transfer of ownership of any material object … does not of itself convey any rights in the copyrighted work embodied in the object.”

3. Does fair use replace permission?

Section 107 identifies purposes such as criticism, comment, news reporting, teaching, scholarship and research, then requires consideration of the statutory factors. Those factors include the purpose and character of the use, the nature of the work, the amount and substantiality used, and the effect on the potential market or value.

Neither a research label nor a commercial purpose decides the question alone. Equally, this guide does not predict whether a particular AI training use is fair use. A proposed licence should be reviewed on its own terms rather than assuming that fair use either authorises or prohibits every model-training arrangement.

17 USC § 107 requires consideration of “all the above factors”; unpublished status alone does not bar a fair-use finding.

4. Copyright is not the only restriction

Company records can contain confidential business information and material governed by non-disclosure, customer, employment or platform agreements. The proposed licence cannot safely be read in isolation from those earlier promises and access conditions.

The federal trade-secret definition in 18 USC § 1839(3) covers specified kinds of information where the owner has taken reasonable measures to keep it secret and it derives independent economic value from not being generally known or readily ascertainable through proper means. Check whether disclosure changes those conditions and whether the company controls information belonging to somebody else.

18 USC § 1839(3) includes both “reasonable measures to keep such information secret” and independent economic value from secrecy.

5. Personal information needs a separate federal, state and sector review

Do not treat copyright ownership as permission to disclose personal information. Identify the people concerned, the original collection purpose, notices and consent, the proposed recipient and any employment, health, financial or other sector context.

At federal level, 15 USC § 45 declares unfair or deceptive acts or practices in or affecting commerce unlawful, subject to the provision's scope and exclusions. State privacy legislation can add separate rights and duties. California Civil Code § 1798.100 is one official state-law text to consider where its scope is met; it is not a nationwide rule or a substitute for checking the other states and sectors involved.

6. Put the rights, scope and authority in the agreement

A review should identify the records covered, the rights granted, permitted uses, exclusivity, territory, term, recipients, sublicensing, security, retention and what happens when the arrangement ends. Section 204(a) requires a signed writing for a transfer of copyright ownership other than by operation of law, and notes that an exclusive licence is a transfer of ownership. That provision should not be misread as describing every non-exclusive arrangement.

For a closed or winding-down company, also establish who has authority to act. An officeholder can consider records as a possible extra asset for creditors, but former possession or access does not give former staff authority to license them. Personal data in insolvency estates needs its own lawful basis; your officeholder and the buyer decide.