Reading one company tells you about that company; reading twelve the same way tells you which problems are yours.
Why it matters when the plan changes
An investor with a dozen holdings sees a dozen unrelated situations, each explained by its own circumstances. Applied consistently, the same reading reveals patterns: whether the same organisational exposure keeps appearing after acquisition, or whether a particular kind of plan repeatedly meets the same constraint. Those are investment-process findings rather than company ones, because a base rate drawn from comparable cases, not a single company's story, is the correct starting point for judging any one of them.
The tension is consent and purpose. Aggregating findings across companies is a different purpose from assessing each one, involving different data subjects and different controllers, and under Article 5 of the General Data Protection Regulation further processing must remain compatible with the original purpose or stand on its own basis. It needs its own rights assessment, and treating it as an extension of the individual reads is exactly the move that fails a data protection review.
In practice
A fund reads six portfolio companies the same way over a year. Four show the same pattern: a decision the value-creation plan depends on that nobody held after close. That is a finding about the fund's own 100-day process rather than about any of the four businesses.
Evidence
Further processing for a new purpose must be compatible with the original, which aggregation across companies is not automatically.
Article 5, General Data Protection Regulation (2016)A base rate drawn from comparable cases is the starting point for judging any single one.
Base rate fallacy, Wikipedia (2026)
What it cannot tell you
Portfolio-wide assessment shows which exposures recur across holdings; it does not explain why any single company failed, nor whether a recurring pattern reflects the investor's own process rather than shared market conditions. It is silent on causation, and a pattern found across companies still needs company-level evidence before any one business is judged.
Questions
Comparison. The same exposure appearing in four of six companies is a finding about the investor's own process rather than about any of the businesses, and it is invisible when each company is read separately by a different provider at a different time.
Aggregating across companies is a new purpose involving different controllers and different data subjects. It needs its own lawful basis, its own transparency and usually sufficient aggregation. Treating it as an extension of the individual engagements is what fails review.
Yes, or the comparison means nothing. Differences in method produce differences in findings that look like differences between companies. Consistency of method is what makes a cross-portfolio pattern evidence rather than an artefact of who did each piece of work.
Decisions unassigned after close, dependencies that were internal to a former parent and are now contractual, and value-creation plans whose organisational assumptions were never tested. Those recur because they are produced by the transaction process rather than by the businesses.
Not automatically, and treating it that way is a mistake. Bounded investor diligence is a distinct route, and a referred company is qualified separately on its own decision, payer and scope. A portfolio relationship does not convert into portfolio company agreements by itself.