Artists are furious about AI training on their music. Fair. Your work, your rights.
But there is a parallel crisis that nobody is talking about, and it is happening every single day, with every single fan interaction.
Every time a fan clicks a link in bio, up to six different platforms start collecting data on that fan. Their IP address. Their device. Their location. Their behavior. Their email. And the artist? The artist sees almost none of it.
What We Found When We Audited Real Artist Ecosystems
We ran an audit on a few artists (Yungblud, Jessie J, Alt-J, among others) and their advertisement and Instagram ecosystem. The goal was simple: trace what happens to a single fan click from the moment it leaves Instagram to the moment it reaches its final destination.
The results were staggering. One fan click triggered data collection across six platforms, governed by five different countries’ privacy laws.
The artist’s visibility of their own fan data? Merely 15%.
That means for every 100 data points generated by fan interactions, the artist or their team could only access 15 of them. The remaining 85% were absorbed by third-party platforms, advertising networks, and intermediary tools, each operating under their own privacy policies and in many cases under entirely different legal jurisdictions.
What Most Artist Teams Do Not Realize About Their Own Marketing Stack
The music marketing ecosystem is built on a patchwork of tools that each serve a specific purpose. The problem is not that these tools exist. The problem is that each one creates its own data silo with its own rules, and the artist is rarely the beneficiary.
Here is what our audit revealed across the artists we studied:
- Link-in-bio tools track every click and apply their own privacy policy. The fan consents to the tool’s terms, not the artist’s.
- Pre-save pages capture the fan’s email, but in many cases the label is listed as the Data Controller under GDPR, not the artist.
- URL shorteners collect IP and device data with zero consent disclosure to the fan.
- Artist websites often have a Meta Pixel firing while the privacy page states “we don’t share data with third parties.”
- Merch stores run Google Analytics under a completely different country’s privacy framework than the artist’s website or social accounts.
Six platforms. Five jurisdictions. One fan click.
The Free Tool Trap: If You Are Not Paying, Your Fan Data Is the Product
There is an old saying in tech: if the tool is free, you are not the customer. Your data is the product. This principle applies directly to the music industry’s most popular marketing tools.
Take URL shorteners as an example. That free Bitly link that sits in every artist bio and every campaign email? On every single click, it collects the fan’s IP address, device fingerprint, and location data. This information is stored, processed, and in many cases monetized according to the platform’s terms, not the artist’s.
The same pattern repeats across link-in-bio tools, pre-save services, and social scheduling platforms. Each one offers convenience at a cost that most artist teams never read in the terms of service.
This is not a theoretical problem. WME’s global co-head of music Kirk Sommer wrote in Variety that fan information is “scattered across platforms, from ticketing services to social media, streaming, and merch stores, creating a fragmented, inaccessible web of insights that should belong to the artist.” He calls this disconnect a threat to long-term career sustainability.
The AI Double Standard: Why We Are Outraged About the Wrong Thing
The music industry is rightly concerned about AI companies training models on copyrighted music. Lawsuits are being filed. Legislation is being drafted. Artists are speaking out.
But consider this: while the industry fights to protect songs from AI training, it hands over thousands of fan interactions per day to platforms that monetize that behavioral data, and nobody says a word.
An AI model training on a song is a one-time extraction of value from a creative work. The daily siphoning of fan data through an artist’s own marketing stack is a continuous, compounding loss of the most valuable asset in the modern music business: the direct relationship between artist and fan.
As James Blake put it: “For the last decade, we’ve seen companies harvest our fan data, which means phone numbers and emails of people who come to see us. I’ve played to millions of people in my lifetime and I wouldn’t know how to contact them to tell them I’ve got a show coming up.”
The Jurisdiction Maze: GDPR, CCPA, and the Legal Complexity Nobody Is Managing
One of the most overlooked aspects of the fan data problem is legal compliance. When a single fan click triggers data collection across six platforms in five jurisdictions, the question of who is responsible for that data becomes extraordinarily complex.
Under GDPR, which governs data processing for anyone in the European Union, a Data Controller is the entity that determines the purposes and means of processing personal data. In many artist marketing setups, the label is listed as the Data Controller on pre-save pages, meaning the artist has no legal standing over the fan data collected through their own campaign.
Meanwhile, the merch store might operate under US privacy law (or no meaningful privacy framework at all), the URL shortener under yet another jurisdiction, and the link-in-bio tool under its own set of terms. No single entity, least of all the artist, has a unified view of how fan data is being collected, stored, or used across the entire ecosystem.
For artists operating in or targeting fans in the EU, the penalties for GDPR non-compliance can reach up to 20 million euros. Most independent artists and small teams have no idea they are potentially liable for privacy violations happening through tools they did not configure and terms they did not write.
The Real Question: Visibility and Ownership
This is not an anti-platform argument. Link-in-bio tools, pre-save services, URL shorteners, and merch platforms all serve real purposes. They make music marketing possible at scale.
The question is not whether platforms collect data. They do. They always will.
The question is whether you, the artist, can not only see this data but become an owner too.
Forward-thinking platforms are starting to address this. OpenStage, for example, explicitly states that artists own 100% of their fan data and automatically segments audiences into GDPR-compliant categories. Tools like Laylo are building enriched fan profiles that give artists direct access to behavioral data across 150 million fan actions.
But these are still the exception, not the norm. The default state of the music marketing ecosystem is that artists generate the value, platforms capture the data, and fans have no idea how many entities are tracking their behavior.
What Artists and Their Teams Can Do Today
While systemic change will take time, there are practical steps every artist team can take right now to start reclaiming visibility over fan data.
- Audit your marketing stack. Map every tool that touches a fan interaction, from the first click to the final conversion. Identify which platforms collect data, what data they collect, and under whose privacy policy.
- Read the terms of service. Especially for free tools. Understand what rights you are granting over your fans’ data when you use a platform.
- Negotiate data clauses in contracts. Whether it is a label deal, a distribution agreement, or a merch partnership, make sure the contract specifies who owns the fan data and what happens to it when the relationship ends.
- Prioritize first-party data collection. Build your email list, your SMS list, your direct fan relationships. These are assets you control regardless of which platforms come and go.
- Choose tools that prioritize artist data ownership. Evaluate platforms not just on features and price, but on their data ownership and privacy policies.
- Ensure GDPR and privacy compliance. If you are targeting fans in the EU, make sure your entire ecosystem, not just your website, is compliant.
The Bottom Line
The music industry is in the middle of two data fights at once. The first, against AI training on copyrighted music, is loud, public, and getting attention. The second, against the silent extraction of fan data through the artist’s own marketing tools, is happening in the background every single day.
Both fights matter. But only one of them is being fought.
Artists built the audience. Artists created the music. Artists generated the engagement. It is time the data followed.
