If they posess it, it's their data. Nobody borrowed it to them and they didn't obtain any private (unpublished) information. They only collected published data.

So it's theirs. By the natural law of the information.