As legal professionals at all levels — in-house corporate attorneys and outside counsel alike — assist their organizations and clients in complying with substantial, global changes to the way personal data is regulated, there is one area that is sometimes overlooked: third-party data ownership.