Understanding the Copyright and Rights in Databases Regulations 1997: What UK Businesses Need to Know

In today’s digital landscape, most UK businesses rely on databases-whether it’s a customer mailing list, product catalogue, or complex data sets used to drive your operations. But did you know there are specific laws just for the protection and use of databases? The Copyright and Rights in Databases Regulations 1997 play a crucial role in how businesses manage, protect, and commercialise their data resources.

If you’re running a business that uses or creates databases (big or small), understanding these regulations could save you from costly disputes, protect your intellectual property, and help you stay compliant as your company grows. It’s a topic that catches out even experienced businesses-so don’t stress. We’ll break it down step by step.

Keep reading to understand how these rules work, how they overlap with copyright law, and what practical steps your business should take to stay protected from day one.

What Are the Copyright and Rights in Databases Regulations 1997?

The Copyright and Rights in Databases Regulations 1997 were introduced to comply with an EU directive, but they remain part of UK law post-Brexit. In essence, these regulations offer a special set of rights (and obligations) for database creators and users, separate from ordinary copyright law.

Before these rules, UK copyright only protected databases that were original “literary works”-meaning, there had to be creative skill in the way the database was structured or written. The 1997 Regulations expanded this by introducing a special, separate “database right” that also protects the significant investment many businesses put into compiling, checking, or presenting database content-even if it's just names, numbers, or facts.

In practical terms, if you build or use a business database in any form, these laws could affect you. That applies whether you’re managing a few hundred email addresses or hosting vast product inventories with thousands of rows.

How Do the 1997 Database Rights Actually Work?

So, what counts as a “database” and what’s protected? According to the regulations, a database is “a collection of independent works, data or other materials arranged in a systematic or methodical way and individually accessible by electronic or other means.”

This is pretty broad. Your business might own or use databases such as:

• Customer lists stored in a spreadsheet or CRM
• Product or service inventories
• Staff or supplier lists
• Online content directories or classified ads
• Research data sets compiled for analysis
• Any searchable, structured data collection

The regulations create TWO main layers of protection:

1. Copyright Protection: If the structure, selection or arrangement of the database shows the author’s “own intellectual creation” (in other words, creativity or originality), it’s protected by normal copyright law.
2. Sui Generis Database Right: Even if the database isn’t creatively designed, it can qualify for separate “database right” if there’s been a substantial investment in obtaining, verifying, or presenting its contents. This right applies to the content as a collection, not the individual facts.

Both types of protection prevent unauthorised extraction or re-use of all or a substantial part of your database. In practice, this means nobody can copy, download or republish a substantial chunk of your business database without permission-even if the underlying information isn’t unique or “creative”.

Who Owns Database Rights in Your Business?

If a database is created by employees during their employment, the rights-and any copyright-usually belong to the employer (your business). If you’ve outsourced work or bought in data, who owns the right can depend on your agreements with contractors, suppliers, or software vendors.

It’s also vital to clarify this if multiple parties contribute to building a database. Having a robust consultancy agreement or a clear IP ownership clause in your contracts will help you avoid disputes down the line.

If your business is buying or selling another business asset (such as a customer list or CRM data), check who holds the database rights as part of due diligence. Ignoring ownership can lead to costly disputes-or even having to delete years of data.

What Can (And Can’t) Others Do With Your Database?

The regulations provide you, as the owner, with the exclusive right to “extract or re-utilise all or a substantial part” of the database. This means no third party can copy, use, or resell a meaningful chunk of your data without permission. “Substantial” can mean quantity (how much is copied) or quality (even a small, crucial part extracted from your unique dataset).

However, there are certain exceptions:

• Limited use for teaching, non-commercial research, or private study (with proper acknowledgment and within fair dealing)
• Use of insubstantial (very small) extracts, provided it isn’t repeated or systematic
• Some legal exceptions-like copying data for law enforcement or public interest uses

It’s important to have clearly drafted terms and conditions explaining how others can use your business data, whether customers, partners, or website visitors. This protects you from accidental or deliberate misuse.

How Long Does Database Protection Last?

Database right lasts for 15 years from completion of the database or from when it was first made available to the public, whichever is later. However, every time a “substantial change” is made (like a major update or new data set added), a new period can start for the updated content.

If your database also qualifies under copyright law, your copyright protection lasts much longer (generally the life of the author plus 70 years)-but only for the original structuring or selection, not the raw data itself.

What’s the Difference Between Copyright and Database Right?

This is a common question for UK business owners. To keep it simple:

• Copyright protects the creative or original structure and arrangement of your data-for example, if you’ve created unique reports, tables, or content structures.
• Database right protects the fact that you’ve made a substantial investment of time, effort, or money in compiling or presenting a data collection-even if there’s no “creativity” in the format.

Both can exist at the same time. And both types of right let you control how others access, copy, or reuse your database. For a full breakdown on how UK IP law splits up different rights, see our Complete Guide To Categories Of Intellectual Property Rights In The UK.

What Are the Risks If My Business Ignores These Regulations?

Not knowing your rights or obligations under the Copyright and Rights in Databases Regulations 1997 can lead to several issues, such as:

• Your database being copied or commercially exploited by competitors with little recourse if not protected correctly
• Legal claims (and potentially hefty damages, or court orders) against your business if you’re found to have extracted data from another’s database without a licence
• Loss of business value when selling or merging if database rights aren’t properly assigned or clarified in your contracts
• Data privacy or GDPR overlap issues if you handle customer data without proper agreements

These risks aren’t just theoretical. Database and IP disputes are common in sectors from tech startups to retail, and the costs can quickly escalate. Getting protected now is a lot easier than scrambling after a problem.

How Do I Protect My Business Database?

There are a few simple but effective ways to secure your rights and stay compliant:

1. Maintain clear records showing who created the database, relevant contributors, and the investment involved. This helps establish your claim if needed.
2. Review all contracts, especially with employees, contractors, or freelance data workers. Make sure they clearly assign IP and database rights to your business using a strong IP clause.
3. Produce robust terms for external users-whether that’s staff, suppliers, or customers who access your database through a website, portal, or app. The right terms and conditions should strictly limit copying or extraction.
4. Regularly update your privacy and data agreements to ensure compliance with data protection rules, especially if your database includes any personal data under the UK GDPR. See our essential GDPR compliance guide.
5. Register and monitor your IP (if applicable) for added protection-this isn’t compulsory for databases, but it can help for related trade marks or brands. Read our guide to protecting your copyright for more tips.

What Legal Documents Should I Have in Place?

Depending on how your business creates, accesses, or shares databases, these documents are a must-have:

• Employment contracts (with clear IP assignment clauses)
• Consultancy or freelancer agreements (spelling out database and copyright ownership)
• Terms of business or website terms of use
• Data processing and privacy policies covering how you handle, share, or collect information
• Non-disclosure agreements (NDAs) when discussing proprietary data with others

It’s easy to miss something or rely on generic templates that don’t properly cover your needs-so it’s always wise to get professionally drafted documents. This makes sure your legal foundation is solid from the outset and can avoid IP headaches in the future.

Does Brexit Affect the Regulations?

In short, not much has changed for UK businesses. The Database Regulations were “retained EU law” after Brexit, and the UK government has confirmed their continued effect. However, there may be complications if you have dealings with EU customers, databases, or partners. For cross-border issues or international data sharing, seeking specialist legal advice is a good idea.

Are There Special Points for Online Businesses and Startups?

If you run an online business or digital platform relying on user-generated content or a unique business model, you’ll want to:

• Draft watertight platform terms and website terms and conditions to spell out rights in all data submitted, uploaded, or accessed via your services
• Have policies to prevent large-scale data scraping or “data harvesting” by automated bots-a source of many modern disputes
• Consider commercialisation contracts (such as licences or distribution agreements) if you monetise database access for clients, advertisers, or partners

Getting this side right is especially important if your business seeks investment, as investors will want to know you actually own (and control) the database rights underpinning your unique business value.

Key Takeaways

• The Copyright and Rights in Databases Regulations 1997 give UK businesses powerful ways to protect (and control) their databases-even if the information itself isn’t creative or unique.
• Database right applies to any collection with substantial investment in compiling, verifying, or presenting the data-not just sales lists, but customer files, catalogues, and more.
• Your business needs robust contracts-for staff, freelancers, and external users-to ensure you own and can enforce your rights in key databases.
• Always check who owns the rights before buying, selling, or merging databases with another business.
• Breach of database rights can lead to significant legal trouble-so having proper terms, privacy policies, and expert legal advice upfront saves trouble later on.
• Database laws stay in force post-Brexit, but cross-border businesses should get extra advice for EU or international operations.
• Professional drafting (not off-the-shelf templates) is essential for commercial contracts, data policies, IP clauses, and website terms if you want strong protection.

Need Help With Database & IP Protection?

Getting your database rights and IP protection right from day one could be the difference between building a valuable business asset-or facing avoidable disputes and risk. If you’d like support with drafting contracts, compliance or just understanding your rights and obligations, our team is here to help.

For a free, no-obligation chat, call us at 08081347754 or email team@sprintlaw.co.uk. We’ll help you build a business that’s secure, compliant, and set for growth.