If you've ever tried verifying the origins of a dataset or demonstrating lawful consent under GDPR, you'll know that most platforms offer little more than a download link and a vague promise. At TheDataSupermarket (TDS), we've rebuilt that foundation — giving buyers, auditors, and regulators full visibility into what really matters: a legally backed data trail.

DSAR-Ready, API-Verifiable Documentation

Every dataset on TDS includes a complete "DD Details" section, split into two tabs:

  • Summary — commercial and communication restrictions + privacy policy audit
  • Paper Trail — timestamped documentation of how consent, source, preferences, and legal rights were handled

What makes this different? It’s not static. It’s exportable for DSARs. It’s queryable via API. And it’s independently defensible — even outside of TDS.

Blog Post Image
Image source tristique justo et pharetra
All documentation shown here is also available at individual record level via DSAR export or our Due Diligence API.

The Data Supermarket

Dataset-Level Proof (DD Details)

On every product page, buyers (even before logging in) can view:

  • Where the data came from
  • Whether consent was documented
  • What channel permissions were collected (SMS, email, etc.)
  • If timestamps and IPs are available
  • What lawful basis was selected
  • If timestamps and IPs are available
  • The sign up privacy policy at time of upload
  • What categories of use and sharing were disclosed
  • Whether it includes potential special category data (e.g. health)
  • The most recent action available for withdrawal (recency)
Each of these is shown in its own independently stamped, structured field.

Third Party Validation (DD Search)

Let’s say someone receives a call, or a company audits your purchase — how do you prove the data was legitimate?

TDS gives every buyer a unique DD Code for each download. When paired with a phone or email, this can be searched using:

  • Our DD Search portal (for third-party checks)
  • Or via direct API integration
It shows everything from the DD Details, plus:

  • Buyer’s license name and expiry
  • Real-time TPS check result
  • Export history (when data was used, by who)
No more spreadsheets. No more doubt..

Special Category Data Warnings

If a dataset contains mapped fields that could imply health or disability-related information, TDS automatically flags it for buyers with a clearly written disclosure under Paper Trail:

This dataset includes fields that may relate to a user’s health, medical status, or wellbeing. Buyers are responsible for ensuring their use complies with GDPR, including Article 9 obligations where applicable.

This is not an optional disclosure — it's enforced by system-level detection at upload.

Individual Record-Level DD via API

Every download from TDS is traceable. Sellers can’t strip context. Buyers can’t claim ignorance.

With our DD API, clients can:

  • Verify a record’s timestamp, channel prefs, and suppression status
  • Check what disclosures were shown
  • Prove the seller uploaded a DPIA
  • Retrieve all supporting consents from the dataset
It's everything the ICO expects — and then some.

Individual Record-Level DD via API

TDS goes further than any marketplace:

  • TPS-flagged records are removed at upload
  • TPS updates are applied upon purchase
  • DD API will reflect current TPS state at time of verification
This means even if a record becomes suppressed after upload, it won’t be available for contact. That’s compliance in real-time.

While most platforms focus on the surface, TheDataSupermarket built the backbone: auditability, data rights, legal traceability — and instant access for those who need it. 

Whether you’re a buyer, auditor, regulator, or partner — you don’t just see what’s on the screen. You see the truth behind the data. 

That’s the new standard. That’s The Data Supermarket.

Run DD Test >>

Relevant tags:

#Blogs #CreateYourOwn #TDS