Technology Briefing – December 2025

Technology Briefing – December 2025

Welcome to our inaugural technology briefing, designed to keep you updated on the latest legal and regulatory developments in the technology sector.

In this edition, we explore the implications of the Getty Images v Stability AI ruling, practical steps for managing AI risks, and the latest updates in data protection law. We also examine new measures aimed at tackling ransomware threats and provide guidance on safeguarding sensitive information following the ChatGPT share feature breach.

Additionally, we showcase our collaboration with legal AI platform Legora, and share key highlights from recent industry events, including the SCL AI Conference and the ITechLaw European Conference.

IN RECENT NEWS


Model behaviour: Stability AI’s model is not an “infringing copy”, but legality of AI training remains unresolved

In the recent judgment in Getty Images v Stability AI [2025], the High Court considered whether the generative AI model Stable Diffusion infringed copyright in works owned by/licensed to Getty Images, and further whether the model outputs infringed Getty Images’ trade marks. Getty argued that millions of its images had been used without permission to train the Stable Diffusion model, and that the model itself was therefore an infringing copy of the works.

Read more >


Managing risks and opportunities with AI

In a GC100 poll of 106 companies, 8% of respondents reported they already regularly used Co-Pilot and Teams Premium for transcription of initial draft minutes; since then, there has been an influx of providers in the market that can prepare agendas, summarise discussions, and draft lists of action points. Before employing such AI tools in your company, it is essential to consider whether the use of AI is appropriate, and, if so, whether all the necessary risk-mitigation steps have been taken.

Read more >


HARBOTTLE HIGHLIGHTS

Early adopters of Legora

Legora recently announced the completion of a Series C round of $150 million at a $1.8 billion valuation. We were the third law firm in the UK to partner with Legora earlier this year.

It is a secure, purpose-built legal AI designed for lawyers to streamline legal workflows and enhance productivity. The solution accelerates legal reviews through AI-powered playbooks that enhance legal reviews, guiding juniors in the process.

The solution is capable of reviewing, comparing, and summarising lengthy documents, as well as extracting critical clauses, and analysing their content to support decisions on matters of law and risk.

Read more >


SCL annual conference

We attended the 2025 Society for Computers & Law (SCL) AI Conference: AI Law – what every business (and their lawyers) needs to know. As ever, the event was fully booked and offered a fantastic day of insightful discussions and debates on the development, interpretation, and implementation of AI law across businesses, government and the legal industry.


iTech Law

On 30 October, partner Lizzie Williams spoke at the ITechLaw Association‘s 2025 European Conference. As a member of iTechLaw and its Dispute Resolution Committee, Lizzie appeared on a panel to share her insights and experience on commercial disputes involving AI. The conference brings together legal professionals, tech innovators and industry leaders from around the world to discuss key topics and challenges in tech law including AI, data privacy and cybersecurity. 


Safeguarding your business in the wake of the ChatGPT share breach

In today’s fast-paced digital landscape, businesses are increasingly leveraging Artificial Intelligence (AI) tools such as OpenAI’s ChatGPT to streamline operations.

However, recent developments surrounding the now-discontinued “share” feature of ChatGPT should serve as a critical reminder of the importance of robust data governance and proactive measures to safeguard sensitive information, such as personal data and confidential business information.

Read more >


New measures announced to tackle ransomware attacks: what does this mean for business?

Earlier this year, the UK government unveiled a set of measures designed to curb ransomware attacks and protect critical public and private sector services. Following public consultation, these steps aim to dismantle the business model of cyber criminals while fortifying national resilience against cyber threats.

Read more >


Data protection update

This update outlines key changes, including the Data (Use and Access) Act 2025, which introduces reforms like a new lawful basis for data use, cookie exemptions and complaint procedures. The UK’s data adequacy status is likely to be extended to 2031, a Court of Appeal ruling confirmed compensation for non-material damage is recoverable, and plans for a secure digital ID scheme are underway. ICO consultations and enforcement actions on data breaches are also highlighted.

Read more >

Please contact our technology experts if you would like to discuss anything in this briefing.