Search results

AI-as-a-Service – Key Issues

Published on 03 Jun 2024. By Praveeta Thayalan, Knowledge Lawyer and Tom James, Associate

Artificial Intelligence-as-a-Service (AIaaS), in the same vein as Software-as-a-Service and Infrastructure-as-a-Service, refers to cloud-based tools that allow businesses to gain access to an AI model hosted by a third party provider.

Procuring AI – Commercial Considerations Checklist

Published on 03 Jun 2024. By Praveeta Thayalan, Knowledge Lawyer

Many companies will no doubt be considering using AI within their business to take advantage of the massive opportunities for increased productivity and cost efficiencies promised.

Generative AI – Addressing Copyright

Published on 03 Jun 2024. By Ciara Cullen, Partner and Joshy Thomas, Knowledge Lawyer and Emma Dunnill, Senior Associate

When it comes to the interaction of AI and IP rights, bar a flurry of activity surrounding the inevitable outcome by all of the courts including the Supreme Court in the Thaler, Dabus case, most attention has been focussed on copyright. There are three main potentially thorny issues and all have been extensively covered by the mainstream media.

AI and Privacy – 10 Questions to Ask

Published on 03 Jun 2024. By Jon Bartley, Partner and Praveeta Thayalan, Knowledge Lawyer and Karolina Lewicki, Associate

We set out in this section 10 key questions to ask yourself at the outset when developing or deploying AI solutions in your business.

The Ethics of AI - The Digital Dilemma

Published on 03 Jun 2024.

This is Part 6 of 'Regulation of AI – raising the trillion dollar bAIby'

Part 6 – Practical Considerations

Published on 03 Jun 2024. By Caroline Tuck, Partner and Joshy Thomas, Knowledge Lawyer and Ricky Cella, Senior Associate

This is Part 6 of 'Regulation of AI – raising the trillion dollar bAIby'

Part 5 – AI Regulation Globally

Published on 03 Jun 2024. By Caroline Tuck, Partner and Joshy Thomas, Knowledge Lawyer and Ricky Cella, Senior Associate

This is Part 5 of 'Regulation of AI – raising the trillion dollar bAIby'

Part 4 – AI Regulation in Asia

Published on 03 Jun 2024. By Caroline Tuck, Partner and Joshy Thomas, Knowledge Lawyer and Ricky Cella, Senior Associate

This is Part 4 of 'Regulation of AI – raising the trillion dollar bAIby'

Part 3 - AI regulation in the US

Published on 03 Jun 2024. By Caroline Tuck, Partner and Joshy Thomas, Knowledge Lawyer and Ricky Cella, Senior Associate

Back in October 2022, the White House published federal guidance – a Blueprint for an AI Bill of Rights identifying five principles aiming to guide the design, use, and deployment of automated systems. It was designed to operate as a roadmap to protect the public from AI harms and was followed in October 2023 by the US President's Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence...

Part 2 - AI regulation in the EU

Published on 03 Jun 2024. By Caroline Tuck, Partner and Joshy Thomas, Knowledge Lawyer and Ricky Cella, Senior Associate

The EU AI Act, the main elements of which are covered in our previous article, was provisionally agreed in December 2023. Shortly after it was agreed, the Commission released some Q&As to flesh out the key provisions and timelines for application. It is anticipated that the latest text of the Artificial Intelligence Act will be formally adopted by both Parliament and Council in April, triggering a graduated two year period for compliance (with obligations for high-risk systems defined in Annex II applicable in 3 years).

Part 1 - UK AI regulation

Published on 03 Jun 2024. By Caroline Tuck, Partner and Joshy Thomas, Knowledge Lawyer and Ricky Cella, Senior Associate

There has been consistent messaging from the UK Conservative-led government that the UK has decided to adopt a light touch approach to regulating AI. This was evident in the AI white paper published in March 2023 which outlined a principles based framework (see ['The Ethics of AI – the Digital Dilemma'] for more information about the principles themselves and see here for additional coverage of the AI white paper). The UK government held a consultation on the AI white paper in 2023 and published a response on 6 February 2024 that adds slightly more flesh to the bones of the UK framework.

What is a foundational model?

Published on 03 Jun 2024. By Caroline Tuck, Partner and Rory Graham, Associate

What is AI and why is it topical?

Published on 03 Jun 2024. By Paul Joukador, Partner and Helen Armstrong, Partner and Charles Buckworth, Partner and Caroline Tuck, Partner

Whilst there is no universal definition of what constitutes artificial intelligence, at its core, AI refers to the simulation of human intelligence in machines that are programmed to think and learn like humans. This encompasses the ability to reason, learn from experience, understand complex concepts, interact with their environment and look to solve problems.

Regulation of AI - raising the trillion dollar bAIby - introduction

Published on 03 Jun 2024. By Caroline Tuck, Partner and Joshy Thomas, Knowledge Lawyer and Ricky Cella, Senior Associate

As with any new technology, existing data protection and privacy, intellectual property, competition, product liability, data security and consumer laws apply to its application in each jurisdiction. This has thrown up a number of important and newsworthy issues and considerations for AI developers and providers, legislators, consumers and rights holders. There are also several sets of high profile legal proceedings both decided and ongoing in several jurisdictions. These issues and legal proceedings are discussed in other sections of this AI Guide.

ICO publishes updates to its guidance on Transfer Risk Assessments

Published on 17 Apr 2024. By Oliver Bray, Senior Partner

How will recent updates to the Information Commissioner’s Office’s (ICO) guidance on Transfer Risk Assessments (TRAs) affect how UK organisations conduct their TRAs?

Department for Science, Innovation and Technology consults on proposed data infrastructure statutory framework

Published on 17 Apr 2024. By Oliver Bray, Senior Partner

What statutory obligations could the Department for Science, Innovation and Technology’s (DSIT) proposed statutory framework impose on UK data centre providers?

ICO launches consultation series on generative AI and data protection

Published on 17 Apr 2024. By Oliver Bray, Senior Partner

What is the Information Commissioner’s Office’s (ICO) intended approach to developing guidance on how data protection law should be applied to the development and use of generative AI?

CJEU rules on what constitutes “automated decision-making” under the GDPR

Published on 17 Apr 2024. By Oliver Bray, Senior Partner

Does the production of a credit score constitute “automated decision-making” for the purposes of Article 22 of the EU General Data Protection Regulation (GDPR)? What wider impact will this have for AI technologies?

ICO warns UK’s most visited websites to improve cookie choices

Published on 17 Apr 2024. By Oliver Bray, Senior Partner

What steps is the ICO taking to ensure that website cookie banners are compliant with law?

ICO fines HelloFresh £140,000 after 7-month spam marketing campaign

Published on 17 Apr 2024. By Oliver Bray, Senior Partner

Where did HelloFresh go wrong with their email and text marketing campaign and what lessons can be learned from the ICO’s investigation and subsequent fine?

New ICO guidance on content moderation and data compliance

Published on 17 Apr 2024. By Oliver Bray, Senior Partner

How can organisations using content moderation technologies and processes best comply with data protection laws?

EDPB adopts opinion on “main establishment” of a controller in the EU

Published on 17 Apr 2024. By Oliver Bray, Senior Partner

What is meant by “main establishment” under article 4(16)(a) of the GDPR for the purposes of determining the application of the one-stop-shop mechanism?

New Development: EU Data Act published in Official Journal

Published on 17 Apr 2024. By Oliver Bray, Senior Partner

The EU Data Act (the Act) came into force on 11 January 2024. The Act sets out rules regarding the fair access to and use of data, aiming to enhance the data economy for individuals and businesses by overcoming barriers to data sharing and establishing frameworks around data access and use.

ICO issues preliminary enforcement notice against Snap for its “My AI” Chatbot

Published on 11 Dec 2023. By Oliver Bray, Senior Partner

How can organisations who wish to join to the world of generative AI ensure that they adequately assess the risks from the perspective of the Information Commissioner’s Office (ICO)?

New Development: EDPB provides clarification on tracking techniques covered by the ePrivacy Directive

Published on 11 Dec 2023. By Oliver Bray, Senior Partner

On 14 November 2023, the European Data Protection Board (EDPB) adopted a set of new guidelines (the Guidelines) on the technical scope of Article 5(3) of the ePrivacy Directive (the ePD).

ICO publishes guidance to ensure lawful monitoring in the workplace

Published on 11 Dec 2023. By Oliver Bray, Senior Partner

How can employers monitor their workers whilst maintaining their trust and complying with data protection regulation?

Clearview AI cleared of £7.5m ICO fine for processing data outside the UK

Published on 11 Dec 2023. By Oliver Bray, Senior Partner

Just how did the processing of personal data by Clearview AI (Clearview) fall outside the scope of UK GDPR?

ICO publishes its draft “Data Protection Fining Guidance” for public consultation

Published on 11 Dec 2023. By Oliver Bray, Senior Partner

How will the Information Commissioner’s Office (ICO) calculate the amount of a fine under the UK GPDR and the Data Protection Act (DPA) 2018?

EU Advocate General’s opinion on data subjects’ rights to compensation for non-material damage under the GDPR

Published on 11 Dec 2023. By Oliver Bray, Senior Partner

Does the theft of an individual’s sensitive personal data by a wrongdoer give rise to compensation for non-material damage under Article 82 EU General Data Protection Regulation (GDPR), if the wrongdoer has not used, or taken steps to use, the sensitive personal data for any purpose?

ICO updates its guidance on AI and data protection

Published on 07 Jul 2023. By Oliver Bray, Senior Partner

What are the key data protection principles which the Information Commissioner’s Office (ICO) expects organisations to follow when integrating AI into their product and service offerings?

UK Government wants understanding of video games to move to the next level

Published on 12 Jun 2023. By Gowri Chandrashekar, Senior Associate and Zoe Harvey, Associate

On 30 May 2023, the UK Government published a Video Games Research Framework which encourages research on video games and emerging game-related technologies.

New Digital Regulators on the 2023 Horizon: the Digital Markets Unit and the European Centre for Algorithmic Transparency

Published on 02 Dec 2022. By David Cran, Partner, Head of IP & Tech and Chris Ross, Partner and Leonia Chesterfield, Of Counsel

For a number of years, the UK Government has been laying the groundwork to bring in a digital markets regime to regulate digital firms designated as having ‘strategic market status’ (SMS). To be designated as having SMS, a firm must have 'substantial and entrenched market power' in at least one activity. Companies having SMS are likely to include the largest tech firms such as Amazon, Apple, Google, Microsoft and Meta (the so called 'GAMMA' firms).

Digital services providers—Commission to focus on implementation phase of EU consumer protection legislation

Published on 31 Oct 2022. By David Cran, Partner, Head of IP & Tech and Leonia Chesterfield, Of Counsel and Ellie Chakarto, Associate

The Digital Services Act (DSA) and the Digital Markets Act (DMA) are published in the Official Journal and the plenary vote of the European Parliament on the proposed text of the AI Act is expected once amendments are agreed by negotiators. The Commission is now turning its focus to the implementation phase of these landmark regimes. So, what does the future hold for the European tech sector and how might it differ for the UK?

The EU Digital Markets Act - a focus on gatekeeper obligations and sanctions

Published on 12 Oct 2022. By David Cran, Partner, Head of IP & Tech and Leonia Chesterfield, Of Counsel and Joshy Thomas, Knowledge Lawyer

What key obligations will the Digital Markets Act (DMA) impose on online platforms designated as gatekeepers?

CMA ends its investigation into online console gaming subscription practices

Published on 14 Jun 2022. By Jonathan Greenway, Senior Associate and Joshua Charalambous, Partner

The UK Competition Markets Authority (CMA) has now closed its investigation into subscription practices in the online console gaming sector after key players Sony, Nintendo and Microsoft committed to making improvements to their contract terms with a view to better protecting customers.

Hong Kong data protection: cross-border transfers of personal data

Published on 20 Jun 2022. By Jonathan Crompton, Partner and Andrea Randall, Partner

We take a closer look at businesses' obligations under Hong Kong law to protect personal data in a cross-border transfer and the new recommended model contractual clauses.

Telecoms supply agreement excludes "loss of profit" claim under "anticipated profits" liability exclusion (EE v Virgin Mobile)

Published on 25 Aug 2023. By Helen Armstrong, Partner and Ben Harris, Associate and Joshy Thomas, Knowledge Lawyer

In line with a number of recent cases, in EE Limited v Virgin Mobile Telecoms Limited [2023] EWHC 1989 (TCC) the courts have shown that parties generally cannot avoid clear wording contained in exclusion clauses in order to recover losses that have been expressly excluded (in this case, loss of profits).

Rolls-Royce entitled to hit the brakes in dispute over termination of a software services agreement (Topalsson v Rolls-Royce)

Published on 14 Aug 2023. By Helen Armstrong, Partner and Ben Harris, Associate and Joshy Thomas, Knowledge Lawyer

In Topalsson GmbH v Rolls-Royce Motor Cars Limited [2023] EWHC 1765 (TCC), the High Court has provided useful guidance on how to determine whether a software implementation timeline agreed by the parties is binding, when implementation is considered complete and in what circumstances failing to complete implementation by the contractual deadlines entitles the customer to terminate the contract.

A narrow escape – software services provider entitled to rely on single aggregate liability cap (Drax v Wipro)

Published on 25 Jul 2023. By Helen Armstrong, Partner and Ben Harris, Associate and Joshy Thomas, Knowledge Lawyer

When it comes to bespoke software development projects, a lot can go wrong. There's risk for the customer such as project delays, software defects, functionality issues and a lack of meeting of minds in terms of project requirements.

The Model Anti-SLAPP Law: an overview

Published on 25 Nov 2022. By Mafruhdha Miah, Senior Associate

Following the Government's response to the SLAPP consultation in the summer, the UK Anti-SLAPP coalition (a working group that includes English PEN, the Foreign Policy Centre and Index on Censorship, "the Coalition") has this week published a model Anti-SLAPP law, which has been endorsed by a collection of free speech and anti-corruption organisations, journalists, editors and lawyers.

EBA encourages banks to pool their resources for cloud audits

Published on 02 Jun 2017.

The EBA has set out that banks are no longer required to provide their auditors (or themselves) with an independent right to audit their cloud service providers.

Snapshot on key 'green claims' developments

Published on 17 Feb 2023. By Ciara Cullen, Partner and Sophie Tuson, Senior Associate

As consumers increasingly demand more sustainable products, businesses are innovating to reduce their environmental impact. This has driven an increase in the use of 'green' marketing claims and, with it, increased scrutiny by consumer regulators seeking to protect consumers from the risk of 'greenwashing'. Significant developments are ongoing in this area, both in the UK and the EU.

Protests on the rise – are you covered?

Published on 30 Jan 2023. By Edward Colville, Partner and Peter Mansfield, Partner and Sally Lord, Knowledge Lawyer

With public focus on political issues running high, the possibility of protests interrupting your business should be on every retailer and consumer brand's risk management agenda.

Lifting the veil on cyber threats for retailers

Published on 12 Jan 2023. By Bethan Griffiths, Senior Associate

Almost all UK businesses (approximately 98%) now operate online in some capacity, benefiting hugely from an increased use of online websites, social media accounts, and online banking

All change: What will a Labour government mean for financial services?

Published on 05 Jul 2024. By Rachael Healey, Partner and David Allinson, Partner and George Smith, Partner and Matthew Watson, Partner and Ash Daniells, Senior Associate and Andrew Oberholzer, Senior Associate and Heather Buttifant, Associate

What does a new Labour government mean for the management liability market?

Published on 05 Jul 2024. By Rachael Healey, Partner and Matthew Watson, Partner and Andrew Oberholzer, Senior Associate and Zoe Melegari, Associate and Kim Wright, Senior Associate

We have a new government and the first Labour government for 14 years. What does it mean for the management liability market? We look at what Labour has promised and with that the areas those in the market will want to consider across directors and officers, employment liability and pensions.

FCA announces thematic review of retirement income advice

Published on 01 Mar 2023. By Faheem Pervez, Associate and Patrick Barclay, Associate

The pension freedom reforms changed the way consumers access their retirement funds. This FCA thematic review will put firms under the spotlight with a focus on how the retirement income advice market is functioning in response to changing consumer needs in the current economic downturn.

FCA responds to criticism of the Public Accounts Committee when it comes to BSPS with rejection of suggestion it should reconsider a wider defined benefit transfer review

Published on 03 Oct 2022. By Rachael Healey, Partner

In a July blog I reported on the House of Commons Public Accounts Committee report entitled "Investigation into the British Steele Pension Scheme". The blog set out a number of recommendations of the Committee in light of its investigations into the FCA's conduct and regulatory oversight of BSPS and, in particular, the 7,834 members that transferred out of BSPS into a personal pension scheme. We have now had a sneak preview of the FCA's response in the recent Committee minutes. Here's what the FCA had to say.

FCA Review of AML failings at challenger banks

Published on 27 May 2022. By James Wickes, Partner and Amber Oldershaw, Associate

Throughout 2021, the FCA conducted a detailed review into the financial crime controls of challenger banks as they continued to enter the UK financial industry at a rapid pace. Their surge in popularity is partially linked to the Covid-19 pandemic, which has prompted significant changes in the habits of service providers worldwide. Whilst the FCA's review indicated some evidence of good practice, it is clear that challenger banks must do more to reduce the significant risks of financial crime occurring both at the time of customer onboarding and throughout the subsequent customer journey.