In this edition, we explore the implications of the Getty Images v Stability AI ruling, practical steps for managing AI risks, and the latest updates in data protection law. We also examine new measures aimed at tackling ransomware threats and provide guidance on safeguarding sensitive information following the ChatGPT share feature breach.
Additionally, we showcase our collaboration with legal AI platform Legora, and share key highlights from recent industry events, including the SCL AI Conference and the ITechLaw European Conference.
In the recent judgment in Getty Images v Stability AI [2025], the High Court considered whether the generative AI model Stable Diffusion infringed copyright in works owned by/licensed to Getty Images, and further whether the model outputs infringed Getty Images’ trade marks. Getty argued that millions of its images had been used without permission to train the Stable Diffusion model, and that the model itself was therefore an infringing copy of the works.
In a GC100 poll of 106 companies, 8% of respondents reported they already regularly used Co-Pilot and Teams Premium for transcription of initial draft minutes; since then, there has been an influx of providers in the market that can prepare agendas, summarise discussions, and draft lists of action points. Before employing such AI tools in your company, it is essential to consider whether the use of AI is appropriate, and, if so, whether all the necessary risk-mitigation steps have been taken.

Legora recently announced the completion of a Series C round of $150 million at a $1.8 billion valuation. We were the third law firm in the UK to partner with Legora earlier this year.
It is a secure, purpose-built legal AI designed for lawyers to streamline legal workflows and enhance productivity. The solution accelerates legal reviews through AI-powered playbooks that enhance legal reviews, guiding juniors in the process.
The solution is capable of reviewing, comparing, and summarising lengthy documents, as well as extracting critical clauses, and analysing their content to support decisions on matters of law and risk.

We attended the 2025 Society for Computers & Law (SCL) AI Conference: AI Law – what every business (and their lawyers) needs to know. As ever, the event was fully booked and offered a fantastic day of insightful discussions and debates on the development, interpretation, and implementation of AI law across businesses, government and the legal industry.

On 30 October, partner Lizzie Williams spoke at the ITechLaw Association‘s 2025 European Conference. As a member of iTechLaw and its Dispute Resolution Committee, Lizzie appeared on a panel to share her insights and experience on commercial disputes involving AI. The conference brings together legal professionals, tech innovators and industry leaders from around the world to discuss key topics and challenges in tech law including AI, data privacy and cybersecurity.
In today’s fast-paced digital landscape, businesses are increasingly leveraging Artificial Intelligence (AI) tools such as OpenAI’s ChatGPT to streamline operations.
However, recent developments surrounding the now-discontinued “share” feature of ChatGPT should serve as a critical reminder of the importance of robust data governance and proactive measures to safeguard sensitive information, such as personal data and confidential business information.
Earlier this year, the UK government unveiled a set of measures designed to curb ransomware attacks and protect critical public and private sector services. Following public consultation, these steps aim to dismantle the business model of cyber criminals while fortifying national resilience against cyber threats.
This update outlines key changes, including the Data (Use and Access) Act 2025, which introduces reforms like a new lawful basis for data use, cookie exemptions and complaint procedures. The UK’s data adequacy status is likely to be extended to 2031, a Court of Appeal ruling confirmed compensation for non-material damage is recoverable, and plans for a secure digital ID scheme are underway. ICO consultations and enforcement actions on data breaches are also highlighted.
Please contact our technology experts if you would like to discuss anything in this briefing.