What happens if the company goes bankrupt and someone else buys the IP including the data? Can they do whatever they want with the data? Without some enforcea

What happens if the company goes bankrupt and someone else buys the IP including the data? Can they do whatever they want with the data? Without some enforceable legal restrictions here the data seems to be at risk.