Risk · R-149 · Intellectual Property & Legal Liability
Uncertain ownership of AI-generated work
The organisation cannot establish or protect rights in material created with AI, because protection depends on human authorship that it cannot show.
- Severity
- Medium
- Audience
- Heads-of · Practitioner
- Frameworks
- Intellectual Property · Chapter 6
- Responsible AI domain
- Lifecycle stage
- Reviewed
- 2026-11-11
What it is
Copyright and patent law were written with human creators in mind. How they apply to work made with AI differs between countries and is still being decided: some systems refuse protection to material with no human author, others have provisions for computer-generated works whose scope is disputed. In practice an organisation that generates code, designs, text or inventions with AI may find that it does not own them in the way it assumed, cannot stop others copying them, or cannot give the warranties a customer or buyer asks for. The provider's terms add a second question: what rights the provider keeps.
How it happens
- Work is generated with little human contribution and treated as owned.
- No record is kept of what a person contributed and what the tool produced.
- Contracts promise customers full ownership of deliverables made with AI.
- The provider's terms on output ownership were not read.
Why it matters
Assets may be worth less than the balance sheet or the business plan assumes. Warranties given to customers may be untrue. In a sale of the business, uncertain title to core material is a significant finding.
Warning signs
- Policies do not address ownership of AI-assisted work.
- Development records do not distinguish human from generated contribution.
- Customer contracts assign rights the organisation may not have.
- Patent or registration filings do not mention the use of AI.
Mitigating controls
Primary controls
- Intellectual property and licence clearance Preventive
- Assesses the rights position of AI-generated material before the organisation relies on owning it. Training data, models, components and significant outputs are checked for rights and licence terms before they are used, published or shipped.
Supporting controls
- AI contract terms Directive
- Settles ownership of outputs with the provider. Contracts with AI suppliers cover data use, change notification, information and audit rights, sub-contracting, incident notification, liability and exit.
- AI record-keeping and audit trail Detective
- Evidence of human contribution supports a claim. Inputs, outputs, model and prompt versions, decisions and human interventions are recorded automatically and retained for a defined period, so that any past event can be reconstructed.
Framework and clause references
| Framework | Clause | Title |
|---|---|---|
| NIST Generative AI Profile (NIST AI 600-1) | Intellectual Property | Intellectual Property The intellectual property risk. |
| SS2/21: Outsourcing and Third-Party Risk Management | Chapter 6 | Outsourcing agreements Ownership of outputs is settled in the agreement with the provider. |
Sources
- SS2/21: Outsourcing and Third-Party Risk Management Bank of England PRA · official text
- NIST Generative AI Profile NIST · framework
How to cite
Axiom Verity (2026). Uncertain ownership of AI-generated work. Reference Library, R-149. https://axiom-verity.com/risks/uncertain-ownership-of-ai-generated-work. Reviewed 2026-11-11.
Found an error or a better source? Report a correction.