Short answer
When a company licenses workplace data such as chat and email for AI training, employees' messages are part of what is licensed. No US federal law bans this outright, but state privacy laws, labor law, union agreements and the company's own notices can limit it. Careful employers exclude sensitive categories, de-identify the rest and tell their people.
The records AI data buyers want most are the ones employees wrote: chat messages, emails, tickets and notes. That raises a fair question from two directions. Employers ask what they owe their people. Employees ask whether their employer can do this at all. This guide answers both.
Key takeaways
- Workplace systems generally belong to the employer, but that does not settle the privacy question.
- No US federal law prohibits licensing workplace data outright. State privacy law, labor law and contracts can restrict it.
- Objections are real. A union challenged the sale of one airline's internal data in 2026, and privacy advocates have asked Congress for closer oversight.
- The protective steps are known: narrow the scope, exclude sensitive categories, de-identify, update notices and communicate.
- Trust is a business cost. A lawful deal can still damage morale if people learn of it afterward.
Why this issue has become urgent
In 2026 the market for internal company data moved from theory to practice. Reporting described failed startups selling old chat logs and email archives, and buyers offering six-figure sums to companies still in operation.
The reaction followed quickly.
- Frankfurt Kurnit describes a proposed $10 million Spirit Airlines data sale after Google's winning bid, and objections from the flight attendants' union and a software vendor.
- The founder of the Center for AI and Digital Policy told Forbes the privacy issues were substantial, because the data concerns identifiable people. The group asked the Senate Commerce Committee to press for Federal Trade Commission oversight.
- Ask counsel whether worker consent or notice is needed under the applicable law and employment agreements, and who has rights to any proceeds.
What US law says
No general federal ban. As the reporting above notes, no federal statute prohibits an employer from licensing workplace communications.
State privacy law. The California Consumer Privacy Act covers personal information about California employees, job applicants and contractors. A paid transfer of that information can be a "sale" with notice and opt-out duties, unless the data meets the law's de-identification standard. See de-identification for AI training data.
The company's own promises. Privacy policies, employee notices and handbooks say how personal information will be used. Federal Trade Commission staff have warned that quietly changing such terms after the fact to allow uses like AI training may be unfair or deceptive.
Labor law. Under the National Labor Relations Act, employees' conversations about pay, schedules and working conditions can be protected, with or without a union. Where a union exists, the collective bargaining agreement may restrict a deal or require bargaining over it.
Other laws. Recorded calls, biometric data and health information bring their own rules. Employees outside the United States may be covered by GDPR or similar laws, which are stricter.
What is in workplace data that belongs to private life
People live part of their lives in work tools. Review work emails and calendars for doctor's appointments, school pickups and personal plans before deciding what can be included. Chat adds jokes, frustrations, health disclosures and complaints about managers.
None of that is what an AI data buyer is paying for. Buyers want the operational record: how problems were solved and decisions made. The private material is risk without value, which is the strongest argument for removing it.
What careful employers do
| Step | What it means in practice |
|---|---|
| Narrow the scope | License work channels and shared mailboxes, not direct messages or personal folders |
| Exclude sensitive categories | HR, payroll, health and benefits, union communications, legal advice |
| De-identify | Remove names, contact details and personal references from what remains |
| Check notices | Confirm that existing policies cover the use; get consent where they do not |
| Update for the future | Revise notices before collecting data you may license later |
| Restrict the buyer | Prohibit re-identification and limit permitted uses in the license |
| Communicate | Tell employees what is included, what is not, and how they are protected |
A law firm that advises on these deals adds a structural point: bring HR and communications into the decision early. It should not be left to business development alone.
Should employees share in the proceeds?
Whether employees have a right to share in proceeds depends on applicable law, contracts and any collective bargaining agreement. Some commentators argue employees should benefit because they produced the records. Employers should discuss those obligations with counsel and consider trust and morale alongside the economics of the deal.
If you are an employee
If you want to know where your employer stands, these are reasonable questions to ask:
- Has the company licensed, or does it plan to license, internal communications?
- Which systems and time periods are covered?
- Are direct messages and HR matters excluded?
- How is personal information removed, and who checks?
- Does the license prohibit re-identifying people?
Your rights depend on where you work, your state's laws and any union agreement. An employment lawyer or your union representative can advise on your situation.
How DataRelai approaches it
DataRelai is a consultant for companies that license their data to AI buyers. We only work with buyers who anonymize and de-identify data. In the deal you approve, personal information, vendor names and identifiable customer details are de-identified. We never take or handle your raw data, and data moves only under a license agreement you sign with the buyer. See if your company qualifies.
Frequently asked questions
Can my employer sell my Slack messages or work emails to an AI company?
In much of the United States, an employer can license business communications it controls, but state privacy law, labor law, union agreements and the employer's own policies can limit that. No federal law bans it outright.
Does my employer have to tell me?
It depends on state law and company policy. California law, for example, creates notice duties when personal information is sold. Even where not required, telling employees is the better practice.
Are direct messages included?
Not necessarily. Scope is set by the license, and many companies exclude direct messages and HR channels.
Will my name be attached to my messages?
In a responsible deal, no. Names and other personal information are removed or replaced before the data is used.
Sources
- Frankfurt Kurnit Klein & Selz, "Selling Company Data for AI Training: What to Know Before You Say Yes" (October 1, 2026)
- Crowell & Moring, "Again, AI Does Not Change The Law: FTC Guidance on Unfair and Deceptive Practices Involving Privacy Policies" (February 2024)
This guide is general information, not legal, tax or financial advice. Whether a particular dataset can be licensed depends on what it contains and on obligations your company already has.