{"id":34728,"date":"2023-09-28T09:01:16","date_gmt":"2023-09-28T07:01:16","guid":{"rendered":"https:\/\/bpcc.org.pl\/?p=34728"},"modified":"2023-10-04T18:21:23","modified_gmt":"2023-10-04T16:21:23","slug":"generative-ai-legal-governance","status":"publish","type":"post","link":"https:\/\/dev2.bpcc.org.pl\/pl\/generative-ai-legal-governance\/","title":{"rendered":"Generative AI legal governance"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"34728\" class=\"elementor elementor-34728\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5c17bcbf elementor-section-content-middle elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5c17bcbf\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-top-column elementor-element elementor-element-5036c1a8\" data-id=\"5036c1a8\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-651fe6bc elementor-widget elementor-widget-image\" data-id=\"651fe6bc\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.14.0 - 26-06-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/dev2.bpcc.org.pl\/wp-content\/uploads\/elementor\/thumbs\/Osborne-rqcxat3zvi8mw9h4vevwehby7bmx0slozq3niathj4.png\" title=\"Osborne\" alt=\"Osborne\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-top-column elementor-element elementor-element-2a4065f2\" data-id=\"2a4065f2\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-838f589 elementor-widget elementor-widget-text-editor\" data-id=\"838f589\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.14.0 - 26-06-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<strong>By Paulina Perkowska, associate, and Piotr Kaniewski, counsel, Osborne Clarke<\/strong>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-top-column elementor-element elementor-element-27a197e8\" data-id=\"27a197e8\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-797f994 elementor-absolute elementor-widget elementor-widget-image\" data-id=\"797f994\" data-element_type=\"widget\" data-settings=\"{&quot;_position&quot;:&quot;absolute&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"300\" src=\"https:\/\/dev2.bpcc.org.pl\/wp-content\/uploads\/2022\/10\/OsborneClarke_pole.jpg\" class=\"attachment-large size-large wp-image-15449\" alt=\"\" srcset=\"https:\/\/dev2.bpcc.org.pl\/wp-content\/uploads\/2022\/10\/OsborneClarke_pole.jpg 500w, https:\/\/dev2.bpcc.org.pl\/wp-content\/uploads\/2022\/10\/OsborneClarke_pole-300x180.jpg 300w, https:\/\/dev2.bpcc.org.pl\/wp-content\/uploads\/2022\/10\/OsborneClarke_pole-440x264.jpg 440w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8c5bb69 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"8c5bb69\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-45193c9\" data-id=\"45193c9\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-973cae9 elementor-widget elementor-widget-text-editor\" data-id=\"973cae9\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>\u00a0<\/p><p>\u00a0<\/p><p><strong>Why generative AI?<\/strong><\/p><p>Generative AI appears to be on everyone&#8217;s lips recently. We hear about it as a curiosity in the technology sector that\u2019s fast making an important contribution to our business processes. With the capacity to generate sharp insights and respond to personalised needs,\u00a0 generative AI is emerging as a technology with vast transformative potential that enables us to save time and focus on more important business aspects.<\/p><p>How can we distinguish what \u2018generative AI models\u2019 mean? We tend to call a AI solution \u2018generative\u2019 if it is capable of generating new, realistic content from the training data. Actually, our creativity is the limit \u2013 generative models can create texts fitted for a certain purpose, images, audio, or even source code. Generative AI algorithms are built on top of foundation models that are trained on enormous amounts of data. Those model, rather than \u2013 for example \u2013 simply classify photos of cats, can create an actual image or text description of a cat on demand.<\/p><p>Generative AI solutions are usually available to customers in a service model. They can be used in organisation either in a general way via accessing the available websites or applications or can be implemented as a personalised tool. Thanks to the personalised deployment the company&#8217;s internal data usually may not be available to everyone. However, even if we manage to close our AI training cycle within our organisation \u2013 the regulatory issues related to cloud computing may arise.<\/p><p>When considering the use of AI tools in the organisation, it is essential to determine whether it will be used for internal purposes only or whether you will also apply it to relations with your customers (that is when so-called \u2018gen-AI\u2019 creates the outputs that directly or indirectly affect the customers, in particular, are part of the products provided to them). If you anticipate potential interaction with customers you have to be aware of the regulatory requirements you should ensure compliance with. This will be the case, for example, if you are operating in the financial sector, medical sector or targeting consumers. For sure you will face also challenges related to intellectual property. The EU AI Act regulation, which we can expect to come into force soon, will undoubtedly increase the scope of these obligations. Meanwhile, we signal some important legal aspects that should be borne in mind while implementing AI in the organisation.<\/p><p><strong>What challenges do we identify?<\/strong><\/p><p>Firstly, it is important to be careful when <em>formulating prompts<\/em> (the commands we enter into AI systems). And while this is already a fairly classic standard in organisations&#8217; <em>cybersecurity<\/em> policies, it is also worth emphasising in the context of AI \u2013 be particularly careful when it comes to the protection of personal data and confidential information, especially business and professional secrets. Be diligent and anonymise the data you use. Many widely available generative AI programmes rely on a model that allows users to operate the programme freely, but at the same time takes the data they put into the system to train the AI model.<\/p><p>Secondly, there are some important <em>copyright<\/em> issues to note. Although we assume that AI is no longer considered as an author itself (in copyright law, an author must be a human), the legal uncertainty about qualification of outputs exposes AI users to certain risks. Indeed, content generated by AI will not be protected by copyright. However it may be protected while one implements a non-protected content in his own creative work. How existing AI systems solve this problem? Their terms of use tend to generally attribute to their users rights to use the AI outputs \u2013 it remains unclear, though, whether this is a matter of copyright. Note, that these terms usually do not specify, what rights they grant you.<\/p><p>When you are already using generative AI in your work you need to remember that AI systems sometimes \u2018<em>hallucinate<\/em>\u2019, which means that they provide content that can be inaccurate or completely made-up, but looks entirely convincing. AI programs generate content which is easy to perceive as the ideal answer to questions posed in prompts, but in fact they still produce many errors. Their \u2018knowledge&#8217; is limited to certain data that they have been fed. Be careful with the results, use AI as your creative friend, but don\u2019t trust it uncritically.<\/p><p>AI-generated works can be <em>infringing<\/em> \u2013 because of the inaccurate or harmful content but also due to the fact that the output may <em>infringe the copyright of third parties<\/em>. And then usually the user will be responsible for such a violation. Note that many generative AI providers exclude or strictly limit their liability towards their users. This is all the more dangerous given the actual lack of tools to verify what data the AI model used to create the output and whether it could have use them.<\/p><p>Finally, whenever you want to use AI outputs \u2013 be fair <em>\u2013 do not attribute to yourself what AI prepared<\/em>. At first \u2013 it\u2019s unethical. And secondly \u2013 it\u2019s usually contrary to generative AI Terms of Use. E.g. Open AI obligates users of ChatGPT who publish AI-generated content to attribute their name or the name of their company to it, as well as to indicate transparently to the average person that the content was generated by AI.<\/p><p>With the coming into force of the EU\u2019s <u>AI Act<\/u>, there will soon be additional obligations related to the use of generative AI. The AI Act divides the use of AI solutions into three categories: prohibited, high risk and no significant risk \u2013 imposing certain obligations on those using AI \u2013 depending on the qualification adopted. It also appears that the AI Act will provide some specific obligations regarding generative AI, in particular regarding the data used by the model.<\/p><p><strong>Generative AI Policy<\/strong><\/p><p>As generative AI tools are widely available it is sure that your employees are already using them in their everyday tasks \u2013 or will soon start to. Do not let it become a problem and prepare a policy that will clearly state if you want to enable the use of generative AI solutions in your organisation. You should analyse especially potential AI use cases and your risk tolerance. Such an AI policy should among others include sections on record-keeping and use logs, security, privacy, and IP rights. It should also set standards for verification of the AI-generated output for accuracy and legal conformity.<\/p><p>Do not forget of the upcoming AI Act which also provides guidelines on what should be included in such a policy. Even if an AI system you are going to use is not classified as high-risk \u2013 including certain demands relating to these systems in your AI code of conduct will be a right thing to do.<\/p><p>Generative AI user interfaces make them quite intuitive and easy to use. But still, there is a lot to learn to optimise their usage in the entity: formulating proper prompts, understanding the technology\u2019s limitations and awareness of possibilities to use them in the workflows. Companies need to adapt the AI to incorporate their culture and values, which may require a lot of expertise. Organisations which are implementing AI systems should organise ongoing education and training to keep their employees informed of the AI systems advantages but also of their risks. Not only does AI need constant training but also employees and organisation if one wants to implement it wisely and avoid legal risks.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>By Paulina Perkowska, associate, and Piotr Kaniewski, counsel, Osborne Clarke Why generative AI? Generative AI appears to be on everyone&#8217;s lips recently. We hear about it as a curiosity in the technology sector that\u2019s fast making an important contribution to our business processes. With the capacity to generate sharp insights and respond to personalised needs,\u00a0 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":28841,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[76],"tags":[],"ppma_author":[508],"class_list":["post-34728","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-contact-magazine","author-osborne-clarke-poland","et-has-post-format-content","et_post_format-et-post-format-standard"],"acf":[],"authors":[{"term_id":508,"user_id":0,"is_guest":1,"slug":"osborne-clarke-poland","display_name":"Osborne Clarke Poland","avatar_url":{"url":"https:\/\/dev2.bpcc.org.pl\/wp-content\/uploads\/2022\/10\/Osborne-Clarke2.png","url2x":"https:\/\/dev2.bpcc.org.pl\/wp-content\/uploads\/2022\/10\/Osborne-Clarke2.png"},"first_name":"","last_name":"","user_url":"","description":""}],"_links":{"self":[{"href":"https:\/\/dev2.bpcc.org.pl\/pl\/wp-json\/wp\/v2\/posts\/34728","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dev2.bpcc.org.pl\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dev2.bpcc.org.pl\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dev2.bpcc.org.pl\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dev2.bpcc.org.pl\/pl\/wp-json\/wp\/v2\/comments?post=34728"}],"version-history":[{"count":6,"href":"https:\/\/dev2.bpcc.org.pl\/pl\/wp-json\/wp\/v2\/posts\/34728\/revisions"}],"predecessor-version":[{"id":35180,"href":"https:\/\/dev2.bpcc.org.pl\/pl\/wp-json\/wp\/v2\/posts\/34728\/revisions\/35180"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dev2.bpcc.org.pl\/pl\/wp-json\/wp\/v2\/media\/28841"}],"wp:attachment":[{"href":"https:\/\/dev2.bpcc.org.pl\/pl\/wp-json\/wp\/v2\/media?parent=34728"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dev2.bpcc.org.pl\/pl\/wp-json\/wp\/v2\/categories?post=34728"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dev2.bpcc.org.pl\/pl\/wp-json\/wp\/v2\/tags?post=34728"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/dev2.bpcc.org.pl\/pl\/wp-json\/wp\/v2\/ppma_author?post=34728"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}