AI Legal and Governance Advice

Herrington Carmichael is a full service law firm offering legal advice to UK and international businesses as well as individuals and families.
/
/
/
AI Legal and Governance Advice

AI Readiness Audit

Artificial intelligence is quickly becoming part of everyday business operations, whether through standalone tools or features built into existing software and systems. Used well, AI can improve efficiency, support decision-making and help businesses innovate. It can also raise legal and regulatory issues that may not be obvious at the outset.

Our Commercial & Regulatory team advises businesses on the legal risks associated with adopting, developing and using AI. We help organisations understand how AI fits within their existing contracts, policies and governance arrangements, and where those documents may need to be updated to reflect how the business is operating in practice.

We can support businesses that are exploring AI for the first time, already using AI tools, sharing business or customer data with AI providers, or relying on AI-generated outputs internally or externally. We can also assist with AI-related customer requirements, supplier arrangements, internal policies and approval processes.

Our work can include reviewing customer contracts, supplier terms, AI provider terms, NDAs, standard terms, privacy policies and governance documents. We focus on the issues that most often create risk, including data use, confidentiality, IP ownership, liability, audit rights and contractual restrictions.

For businesses looking for a structured starting point, our AI Readiness Audit provides a practical review of current or proposed AI use, followed by a concise red flag report with clear recommendations. The aim is to help businesses adopt and use AI safely, responsibly and in line with their legal, regulatory and commercial obligations.

Key contact

Rhian Hazeldene PNG
Rhian Hazeldene
Solicitor, Commercial

Insights

Get valuable insights from our articles.

Concept of justice, law and legal system

IP & Brand Protection in 2026: Key Trade Mark Developments UK Businesses Should Act on Now

2026 is shaping up to be a pivotal year for brands, design and AI-generated content, with significant legal developments beginning…
Busy crypto trader using computer analyzing digital stock market trading graph.

Cracking CASS 16: The New Playbook for Stablecoin Issuers in the UK

The Client Assets Sourcebook (CASS) is a highly detailed set of regulations developed by the UK’s Financial Conduct Authority (FCA)…
Registered trademark TM concept with icons, brand

UK Trade Mark Registration: Why Your Business Should Protect Its Brand

Protect your brand with UK trade mark registration. Discover the benefits, ownership considerations and international protection strategies.In this mid-year update,…

Meet our experts

Dedicated professionals ready to assist you.

Siddhartha Saxena PNG
Siddhartha Saxena
Senior Co Sec Paralegal, Corporate
Christine Tretzmueller-Szauer PNG
Christine Tretzmueller-Szauer
Legal Director, Company Secretarial & Corporate Governance
Mark Chapman PNG
Mark Chapman
Partner, General Counsel, Head of Commercial & Regulatory
Rhian Hazeldene PNG
Rhian Hazeldene
Solicitor, Commercial

Frequently Asked Questions

Find answers to your most pressing questions about our services and processes.

We advise businesses on the legal and governance issues that arise when adopting, developing or using AI. This can include reviewing contracts, supplier terms, internal policies and governance processes, as well as advising on issues such as data use, confidentiality, IP ownership, liability and regulatory compliance.

No. The AI Readiness Audit is one option, and is useful where a business wants a structured review of its current or proposed AI use. We can also provide standalone advice on specific AI-related contract issues, supplier terms, customer requirements, policies or governance arrangements.

An AI Readiness Audit is a practical legal review of how AI is being used, or may be used, within a business. It helps identify legal, contractual and governance risks and provides practical recommendations for managing those risks.

This service is suitable for businesses that are considering AI, already using AI tools, sharing business or customer data with AI providers, using AI-generated outputs, or looking to introduce or improve internal AI policies and governance.

AI use can create risk where contracts, policies or internal processes have not kept pace with how the business is operating. For example, there may be limits on sharing customer data with AI tools, uncertainty around ownership of AI-generated outputs, or gaps in approval processes.

Yes. We can review customer contracts, supplier terms, AI provider terms, NDAs, standard terms, privacy policies and internal governance documents to identify restrictions, gaps or areas that may need updating.

You will receive a concise red flag report setting out the key legal and contractual risks identified, together with practical recommendations to help strengthen your approach to AI use.

Still have questions?

We’re here to help you.