37. The ethics of putting a price on personal or sensitive data

As data has become central to modern business strategy, organisations are increasingly asked to assign financial values to the datasets they hold. For many companies, that data includes personal information — customer records, behavioural patterns, health indicators, financial histories. The economic case for valuing this data is compelling. But when the assets in question relate to identifiable individuals, the act of pricing them raises ethical questions that go well beyond compliance checklists and regulatory requirements.

One of the central tensions is the gap between economic value and personal agency. When a company assigns a financial figure to its customer database, it is implicitly treating the information people shared — often without fully understanding how it would be used — as a tradeable asset. This does not automatically make the practice wrong, but it does demand that organisations ask some hard questions. Was the data collected with informed consent? Would individuals be surprised or disturbed to learn their personal information was listed as a balance-sheet item? These are not purely legal questions. They are questions of trust, and trust is itself a significant component of long-term business value.

Sensitive data categories — including health records, financial circumstances, religious beliefs, and ethnic background — present even more complex challenges. The financial value of such data is often high precisely because it is rare, granular, and predictive. Yet the consequences of misuse, breach, or commercial exploitation are correspondingly severe for the individuals involved. Responsible data valuation in these contexts requires more than anonymisation techniques. It calls for an ethical governance framework that defines what uses of the data are acceptable, what risks need to be disclosed, and how individuals retain meaningful control over information that describes their lives.

The good news is that ethical rigour and financial value are not opposites. Organisations that approach personal data valuation with transparency, strong governance, and genuine respect for individual rights tend to build more durable assets. Regulatory penalties, reputational damage, and eroding customer trust are all forms of value destruction. By contrast, a company that can demonstrate responsible data practices is likely to hold assets that are more defensible, more liquid, and more credible to investors and partners. In this sense, ethics is not a constraint on data value — it is a foundation for it.