I still don't see why you think it's a negative to have your own data. If you think you need a lawyer for on-site data, they you should think you need one for off-site data as well. There's really no difference here. Where the data exists has no bearing on needing a lawyer. What the the data contains would be the primary driver of needing a lawyer, which applies equally regardless of it being on-site or off-site.