Data Legitimacy Bounds