Each month, our Ask Don column will answer a commonly asked question from real data buyers and sellers. Email your submission and we might answer it in next month’s newsletter (we’ll give you a pseudonym and remove any potentially identifiable information, of course).

Q: How can I independently assess a vendor’s compliance practices?
–Regulatory Rachel

A: Data buyers generally depend on vendors to self-report information during the diligence process. The assumption is that this information is accurate, truthful, and complete. But as the buyer community has recently been reminded, that is not always the case.