SRA AI client information (7 figures)
7 provisions of the SRA's rules, UK data protection, legal services and copyright law on client information, AI training, software providers, who may own a firm and staff work, each quoted from the regulator's or the law's own page.
More
read 28 October 2026.
Whose rule it is
What the provision settles
The rule, in its own words
How every provision answered
Every row is a single provision, and every answer expands to the wording it was taken from, the page it came from and when it was read. "Not stated" is used when the page says nothing on the point.
| Provision | Whose rule it is | What the provision settles | The rule, in its own words |
|---|---|---|---|
| Copyright, Designs and Patents Act 1988, s.11(2) | an Act of Parliament | who first owns work staff create | is made by an employee in the course of his employment, his employer is the first owner… |
| Legal Services Act 2007, s.72 | an Act of Parliament | who may own or invest in a law firm | A body (“B”) is a licensable body if a non-authorised person… |
| SRA Code of Conduct, paragraph 6.3 | the Solicitors Regulation Authority | keeping client affairs confidential | It is a wider duty not to misuse it, ie, without the consent of a client or former client… |
| SRA warning notice on the misuse of AI | the Solicitors Regulation Authority | putting client information into AI training | Client information should only be entered into AI systems where appropriate contractual… |
| SRA, firm authorisation | the Solicitors Regulation Authority | who may own or invest in a law firm | When we authorise a licensable body, it is called a licensed body. This is also sometimes… |
| SRA, interests in a licensed body | the Solicitors Regulation Authority | who may own or invest in a law firm | Under the LSA, we must approve the holding of a material interest in a licensed body by… |
| UK GDPR, Article 28 | the UK GDPR | what a software provider holding client data may do with it | at the choice of the controller, deletes or returns all the personal data to the… |
Where each answer was read (21)
- Copyright, Designs and Patents Act 1988, s.11(2), CDPA 1988, section 11, read 2026-10-08, Whose rule it is:
Where a literary, dramatic, musical or artistic work
- Copyright, Designs and Patents Act 1988, s.11(2), CDPA 1988, section 11, read 2026-10-08, What the provision settles:
his employer is the first owner of any copyright in the work subject to any agreement to the contrary
- Copyright, Designs and Patents Act 1988, s.11(2), CDPA 1988, section 11, read 2026-10-08, The rule, in its own words:
is made by an employee in the course of his employment, his employer is the first owner of any copyright in the work subject to any agreement to the contrary.
- Legal Services Act 2007, s.72, Legal Services Act 2007, section 72, read 2026-10-28, Whose rule it is:
A body (“B”) is a licensable body if a non-authorised person—
- Legal Services Act 2007, s.72, Legal Services Act 2007, section 72, read 2026-10-28, What the provision settles:
non-authorised persons are entitled to exercise, or control the exercise of, at least 10% of the voting rights in A.
- Legal Services Act 2007, s.72, Legal Services Act 2007, section 72, read 2026-10-28, The rule, in its own words:
A body (“B”) is a licensable body if a non-authorised person—
- SRA Code of Conduct, paragraph 6.3, SRA guidance, confidentiality of client information, read 2026-10-08, Whose rule it is:
Paragraph 6.3 of the Code of Conduct for Solicitors, RELs and RFLs and of the Code of Conduct for Firms
- SRA Code of Conduct, paragraph 6.3, SRA guidance, confidentiality of client information, read 2026-10-08, What the provision settles:
requires you to keep the affairs of current and former clients confidential unless disclosure is required or permitted by law or the client consents.
- SRA Code of Conduct, paragraph 6.3, SRA guidance, confidentiality of client information, read 2026-10-08, The rule, in its own words:
It is a wider duty not to misuse it, ie, without the consent of a client or former client to make any use of it or to cause any use to be made of it by others otherwise than for the client's benefit.
- SRA warning notice on the misuse of AI, SRA warning notice on the misuse of AI, read 2026-10-28, Whose rule it is:
This warning notice is relevant to all firms and individuals we regulate.
- SRA warning notice on the misuse of AI, SRA warning notice on the misuse of AI, read 2026-10-28, What the provision settles:
is not used to train AI models except where explicitly authorised and appropriate to do so
- SRA warning notice on the misuse of AI, SRA warning notice on the misuse of AI, read 2026-10-28, The rule, in its own words:
Client information should only be entered into AI systems where appropriate contractual, technical and organisational safeguards are in place to protect confidentiality.
- SRA, firm authorisation, SRA, firm authorisation guidance, read 2026-10-28, Whose rule it is:
When we authorise a licensable body, it is called a licensed body. This is also sometimes referred to as an alternative business structure (ABS).
- SRA, firm authorisation, SRA, firm authorisation guidance, read 2026-10-28, What the provision settles:
In simple terms, they must have at least one lawyer manager and one non-lawyer manager or interest holder.
- SRA, firm authorisation, SRA, firm authorisation guidance, read 2026-10-28, The rule, in its own words:
When we authorise a licensable body, it is called a licensed body. This is also sometimes referred to as an alternative business structure (ABS).
- SRA, interests in a licensed body, SRA, interests in a licensed body that need approval, read 2026-10-28, Whose rule it is:
Under the LSA, we must approve the holding of a material interest in a licensed body by any non-authorised person.
- SRA, interests in a licensed body, SRA, interests in a licensed body that need approval, read 2026-10-28, What the provision settles:
Under the LSA, we must approve the holding of a material interest in a licensed body by any non-authorised person.
- SRA, interests in a licensed body, SRA, interests in a licensed body that need approval, read 2026-10-28, The rule, in its own words:
Under the LSA, we must approve the holding of a material interest in a licensed body by any non-authorised person.
- UK GDPR, Article 28, UK GDPR, Article 28, read 2026-10-08, Whose rule it is:
Where processing is to be carried out on behalf of a controller, the controller shall use only processors providing sufficient guarantees
- UK GDPR, Article 28, UK GDPR, Article 28, read 2026-10-08, What the provision settles:
processes the personal data only on documented instructions from the controller
- UK GDPR, Article 28, UK GDPR, Article 28, read 2026-10-08, The rule, in its own words:
at the choice of the controller, deletes or returns all the personal data to the controller after the end of the provision of services relating to processing, and deletes existing copies
Set aside after reading
After reading, 1 named document was excluded as off the board's subject; the reason sits below. It counts as read but gives no answer.
- SRA Code of Conduct for Solicitors, RELs and RFLs: the stored page is the Code's index (headings and the making note) without paragraph 6.3's text; 6.3 is recorded from the SRA's confidentiality guidance, which quotes it
Method
Each provision's own the SRA Code and guidance, the SRA's warning notices, the UK GDPR, the Legal Services Act 2007 and the copyright statute were read through estate-fetch and stored whole (sha256 on every row).
For every page, three questions were answered from its own words: whose rule it is, what the provision settles, the rule, in its own words.
Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the page read does not address the question.
A provision with several pages reads 'varies' where they disagree.
7 provisions, 7 pages.
8 sources, with links
- SRA Code of Conduct for Solicitors, RELs and RFLs (read, set aside)
- SRA warning notice on the misuse of AI (the publisher's the SRA Code and guidance, the SRA's warning notices, the UK GDPR, the Legal Services Act 2007 and the copyright statute, cited for reporting)
- Copyright, Designs and Patents Act 1988, section 11 (the publisher's the SRA Code and guidance, the SRA's warning notices, the UK GDPR, the Legal Services Act 2007 and the copyright statute, cited for reporting)
- SRA guidance, confidentiality of client information (the publisher's the SRA Code and guidance, the SRA's warning notices, the UK GDPR, the Legal Services Act 2007 and the copyright statute, cited for reporting)
- UK GDPR Article 28, processor (the publisher's the SRA Code and guidance, the SRA's warning notices, the UK GDPR, the Legal Services Act 2007 and the copyright statute, cited for reporting)
- Legal Services Act 2007, section 72 (the publisher's the SRA Code and guidance, the SRA's warning notices, the UK GDPR, the Legal Services Act 2007 and the copyright statute, cited for reporting)
- SRA, firm authorisation guidance (the publisher's the SRA Code and guidance, the SRA's warning notices, the UK GDPR, the Legal Services Act 2007 and the copyright statute, cited for reporting)
- SRA, interests in a licensed body that need approval (the publisher's the SRA Code and guidance, the SRA's warning notices, the UK GDPR, the Legal Services Act 2007 and the copyright statute, cited for reporting)
Cite it or embed it
7 provisions of the SRA's rules, UK data protection, legal services and copyright law on client information, AI training, software providers, who may own a firm and staff work, each quoted from the regulator's or the law's own page, read 28 October 2026.
Whose rule it is, by provision: the Solicitors Regulation Authority 4 of 7, an Act of Parliament 2 of 7, the UK GDPR 1 of 7 (7 provisions, read 28 October 2026).
What the provision settles, by provision: who may own or invest in a law firm 3 of 7, putting client information into AI training 1 of 7, keeping client affairs confidential 1 of 7, who first owns work staff create 1 of 7, what a software provider holding client data may do with it 1 of 7 (7 provisions, read 28 October 2026).
The rule, in its own words, by provision: stated 7 of 7 (7 provisions, read 28 October 2026).
Reference: "Client information, AI, software providers and law firm ownership", updated 2026-10-28, https://selllawfirmdatatoai.com/datasets/lawfirm-ai-data-law/.
CSV download (21 answers, worked out 2026-10-28)