Data Sovereignty

The documented lifecycle of data as it moves through an organisation's systems, showing its origin, transformations, dependencies, and destinations. Data lineage provides visibility into how data is created, processed, and consumed, enabling organisations to ensure data quality, comply with regulatory requirements (particularly GDPR's right to explanation), debug data pipeline issues, and assess the impact of system changes.

The framework of policies, standards, and processes that ensures data assets are managed consistently, securely, and in compliance with regulations throughout their lifecycle. Strong data governance increases the reliability and value of data as an intangible asset, directly supporting analytics, AI applications, and data monetisation strategies.

The body of laws and corporate policies designed to prevent the offering, giving, soliciting, or accepting of bribes in commercial and public transactions. The UK Bribery Act 2010 is among the strictest globally, creating a corporate offence of failing to prevent bribery with a defence only for organisations that can demonstrate adequate procedures.

The California Consumer Privacy Act, a US state privacy law granting California residents rights over their personal information, including the right to know what data is collected, the right to delete it, the right to opt out of its sale, and the right to non-discrimination for exercising these rights. As amended by the CPRA (2023), CCPA closely mirrors certain GDPR provisions and has influenced privacy legislation in other US states.

A regulatory authorisation permitting a firm to issue electronic money — digitally stored monetary value representing a claim on the issuer. In the UK, e-money licences are granted by the FCA under the Electronic Money Regulations 2011.

A machine learning technique that trains models across multiple decentralised devices or servers holding local data, without transferring the raw data to a central location. Federated learning addresses data privacy and sovereignty concerns by keeping sensitive data on-device while still enabling collaborative model improvement.

An approach to systems engineering and product development that embeds data protection principles into the design and architecture of IT systems and business practices from the outset, rather than retrofitting them. Privacy by Design is codified as a legal requirement under GDPR Article 25 and encompasses data minimisation, pseudonymisation, and purpose limitation as default settings.

A cybersecurity framework based on the principle that no user, device, or system should be automatically trusted, whether inside or outside the network perimeter. Zero trust requires continuous verification of identity and access rights for every request, micro-segmentation of network resources, and least-privilege access controls.

Data as a Balance Sheet Asset: Valuation Methods for the AI Era

Data is now formally recognised as productive capital by the System of National Accounts. But how do you value it on a balance sheet? Tony Hillier draws on 30 years of structured finance experience to map three valuation approaches — and where data assets fit into modern capital structures.

How do you create and manage a portfolio of companies in Opagio?

Opagio's portfolio feature lets investors and fund managers add multiple companies, track their intangible asset values over time, compare benchmarks, and generate consolidated portfolio-level reports.