
You’re shipping something new in the United Kingdom. Data provenance and the claims you make are where the exposure sits.
Information, not advice
This page is information, not legal advice about your matter. A retainer begins only when a lawyer confirms it.
Start here
Write down what your system does, and what you say it does
The gap between those two sentences is where most legal risk sits, and existing regulators apply their own rules to it. Closing it early costs very little.
What to work through, in order
Which regime already applies
The approach is sector-led rather than a single statute, with existing regulators applying their own rules. The ICO, FCA and MHRA have each issued guidance in their domains.
Data and privacy
UK GDPR requires a lawful basis, transparency, and a data protection impact assessment for high-risk processing. Automated decision-making with legal effects carries specific restrictions.
IP ownership in outputs
UK law recognises computer-generated works in limited circumstances, though the provision is under review. Contractual allocation remains the practical answer.
Next steps
What happens if you go ahead
Scoping call
Written scope and fixed-fee quote
Engagement, once a lawyer confirms
Who would handle it
Offices
London
25 Southampton Buildings, London WC2A 1AL


