# SRA AI client information (7 figures)

> 7 provisions of the SRA's rules, UK data protection, legal services and copyright law on client information, AI training, software providers, who may own a firm and staff work, each quoted from the regulator's or the law's own page, read 28 October 2026.

Sell Law Firm Data to AI · https://selllawfirmdatatoai.com/datasets/lawfirm-ai-data-law/ · computed 2026-10-28

**Provisions read:** 7 provisions (7 pages read; 8 named).

## The answers, question by question

- **Whose rule it is:** the Solicitors Regulation Authority 4, an Act of Parliament 2, the UK GDPR 1
- **What the provision settles:** who may own or invest in a law firm 3, who first owns work staff create 1, keeping client affairs confidential 1, putting client information into AI training 1, what a software provider holding client data may do with it 1
- **The rule, in its own words:** stated 7

## Every provision

| Provision | Whose rule it is | What the provision settles | The rule, in its own words |
|---|---|---|---|
| Copyright, Designs and Patents Act 1988, s.11(2) | an Act of Parliament | who first owns work staff create | is made by an employee in the course of his employment, his employer is the first owner… |
| Legal Services Act 2007, s.72 | an Act of Parliament | who may own or invest in a law firm | A body (“B”) is a licensable body if a non-authorised person… |
| SRA Code of Conduct, paragraph 6.3 | the Solicitors Regulation Authority | keeping client affairs confidential | It is a wider duty not to misuse it, ie, without the consent of a client or former client… |
| SRA warning notice on the misuse of AI | the Solicitors Regulation Authority | putting client information into AI training | Client information should only be entered into AI systems where appropriate contractual… |
| SRA, firm authorisation | the Solicitors Regulation Authority | who may own or invest in a law firm | When we authorise a licensable body, it is called a licensed body. This is also sometimes… |
| SRA, interests in a licensed body | the Solicitors Regulation Authority | who may own or invest in a law firm | Under the LSA, we must approve the holding of a material interest in a licensed body by… |
| UK GDPR, Article 28 | the UK GDPR | what a software provider holding client data may do with it | at the choice of the controller, deletes or returns all the personal data to the… |

## The sentence each answer rests on (21)

- Copyright, Designs and Patents Act 1988, s.11(2), [CDPA 1988, section 11](https://www.legislation.gov.uk/ukpga/1988/48/section/11), read 2026-10-08, Whose rule it is: "Where a literary, dramatic, musical or artistic work"
- Copyright, Designs and Patents Act 1988, s.11(2), [CDPA 1988, section 11](https://www.legislation.gov.uk/ukpga/1988/48/section/11), read 2026-10-08, What the provision settles: "his employer is the first owner of any copyright in the work subject to any agreement to the contrary"
- Copyright, Designs and Patents Act 1988, s.11(2), [CDPA 1988, section 11](https://www.legislation.gov.uk/ukpga/1988/48/section/11), read 2026-10-08, The rule, in its own words: "is made by an employee in the course of his employment, his employer is the first owner of any copyright in the work subject to any agreement to the contrary."
- Legal Services Act 2007, s.72, [Legal Services Act 2007, section 72](https://www.legislation.gov.uk/ukpga/2007/29/section/72), read 2026-10-28, Whose rule it is: "A body (“B”) is a licensable body if a non-authorised person—"
- Legal Services Act 2007, s.72, [Legal Services Act 2007, section 72](https://www.legislation.gov.uk/ukpga/2007/29/section/72), read 2026-10-28, What the provision settles: "non-authorised persons are entitled to exercise, or control the exercise of, at least 10% of the voting rights in A."
- Legal Services Act 2007, s.72, [Legal Services Act 2007, section 72](https://www.legislation.gov.uk/ukpga/2007/29/section/72), read 2026-10-28, The rule, in its own words: "A body (“B”) is a licensable body if a non-authorised person—"
- SRA Code of Conduct, paragraph 6.3, [SRA guidance, confidentiality of client information](https://www.sra.org.uk/solicitors/guidance/ethics-guidance/confidentiality-client-information/), read 2026-10-08, Whose rule it is: "Paragraph 6.3 of the Code of Conduct for Solicitors, RELs and RFLs and of the Code of Conduct for Firms"
- SRA Code of Conduct, paragraph 6.3, [SRA guidance, confidentiality of client information](https://www.sra.org.uk/solicitors/guidance/ethics-guidance/confidentiality-client-information/), read 2026-10-08, What the provision settles: "requires you to keep the affairs of current and former clients confidential unless disclosure is required or permitted by law or the client consents."
- SRA Code of Conduct, paragraph 6.3, [SRA guidance, confidentiality of client information](https://www.sra.org.uk/solicitors/guidance/ethics-guidance/confidentiality-client-information/), read 2026-10-08, The rule, in its own words: "It is a wider duty not to misuse it, ie, without the consent of a client or former client to make any use of it or to cause any use to be made of it by others otherwise than for the client's benefit."
- SRA warning notice on the misuse of AI, [SRA warning notice on the misuse of AI](https://www.sra.org.uk/solicitors/guidance/misuse-ai/), read 2026-10-28, Whose rule it is: "This warning notice is relevant to all firms and individuals we regulate."
- SRA warning notice on the misuse of AI, [SRA warning notice on the misuse of AI](https://www.sra.org.uk/solicitors/guidance/misuse-ai/), read 2026-10-28, What the provision settles: "is not used to train AI models except where explicitly authorised and appropriate to do so"
- SRA warning notice on the misuse of AI, [SRA warning notice on the misuse of AI](https://www.sra.org.uk/solicitors/guidance/misuse-ai/), read 2026-10-28, The rule, in its own words: "Client information should only be entered into AI systems where appropriate contractual, technical and organisational safeguards are in place to protect confidentiality."
- SRA, firm authorisation, [SRA, firm authorisation guidance](https://www.sra.org.uk/solicitors/guidance/firm-authorisation/), read 2026-10-28, Whose rule it is: "When we authorise a licensable body, it is called a licensed body. This is also sometimes referred to as an alternative business structure (ABS)."
- SRA, firm authorisation, [SRA, firm authorisation guidance](https://www.sra.org.uk/solicitors/guidance/firm-authorisation/), read 2026-10-28, What the provision settles: "In simple terms, they must have at least one lawyer manager and one non-lawyer manager or interest holder."
- SRA, firm authorisation, [SRA, firm authorisation guidance](https://www.sra.org.uk/solicitors/guidance/firm-authorisation/), read 2026-10-28, The rule, in its own words: "When we authorise a licensable body, it is called a licensed body. This is also sometimes referred to as an alternative business structure (ABS)."
- SRA, interests in a licensed body, [SRA, interests in a licensed body that need approval](https://www.sra.org.uk/solicitors/guidance/interest-licensed-body-require-approval/), read 2026-10-28, Whose rule it is: "Under the LSA, we must approve the holding of a material interest in a licensed body by any non-authorised person."
- SRA, interests in a licensed body, [SRA, interests in a licensed body that need approval](https://www.sra.org.uk/solicitors/guidance/interest-licensed-body-require-approval/), read 2026-10-28, What the provision settles: "Under the LSA, we must approve the holding of a material interest in a licensed body by any non-authorised person."
- SRA, interests in a licensed body, [SRA, interests in a licensed body that need approval](https://www.sra.org.uk/solicitors/guidance/interest-licensed-body-require-approval/), read 2026-10-28, The rule, in its own words: "Under the LSA, we must approve the holding of a material interest in a licensed body by any non-authorised person."
- UK GDPR, Article 28, [UK GDPR, Article 28](https://www.legislation.gov.uk/eur/2016/679/article/28), read 2026-10-08, Whose rule it is: "Where processing is to be carried out on behalf of a controller, the controller shall use only processors providing sufficient guarantees"
- UK GDPR, Article 28, [UK GDPR, Article 28](https://www.legislation.gov.uk/eur/2016/679/article/28), read 2026-10-08, What the provision settles: "processes the personal data only on documented instructions from the controller"
- UK GDPR, Article 28, [UK GDPR, Article 28](https://www.legislation.gov.uk/eur/2016/679/article/28), read 2026-10-08, The rule, in its own words: "at the choice of the controller, deletes or returns all the personal data to the controller after the end of the provision of services relating to processing, and deletes existing copies"

## Read and set aside

- [SRA Code of Conduct for Solicitors, RELs and RFLs](https://www.sra.org.uk/solicitors/standards-regulations/code-conduct-solicitors/): the stored page is the Code's index (headings and the making note) without paragraph 6.3's text; 6.3 is recorded from the SRA's confidentiality guidance, which quotes it

## Methodology

Each provision's own the SRA Code and guidance, the SRA's warning notices, the UK GDPR, the Legal Services Act 2007 and the copyright statute were read through estate-fetch and stored whole (sha256 on every row). For every page, three questions were answered from its own words: whose rule it is, what the provision settles, the rule, in its own words. Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the page read does not address the question. A provision with several pages reads 'varies' where they disagree. 7 provisions, 7 pages.

## Sources

- [SRA Code of Conduct for Solicitors, RELs and RFLs](https://www.sra.org.uk/solicitors/standards-regulations/code-conduct-solicitors/) (not-terms)
- [SRA warning notice on the misuse of AI](https://www.sra.org.uk/solicitors/guidance/misuse-ai/) (read)
- [Copyright, Designs and Patents Act 1988, section 11](https://www.legislation.gov.uk/ukpga/1988/48/section/11) (read)
- [SRA guidance, confidentiality of client information](https://www.sra.org.uk/solicitors/guidance/ethics-guidance/confidentiality-client-information/) (read)
- [UK GDPR Article 28, processor](https://www.legislation.gov.uk/eur/2016/679/article/28) (read)
- [Legal Services Act 2007, section 72](https://www.legislation.gov.uk/ukpga/2007/29/section/72) (read)
- [SRA, firm authorisation guidance](https://www.sra.org.uk/solicitors/guidance/firm-authorisation/) (read)
- [SRA, interests in a licensed body that need approval](https://www.sra.org.uk/solicitors/guidance/interest-licensed-body-require-approval/) (read)

## Cite or embed

- 7 provisions of the SRA's rules, UK data protection, legal services and copyright law on client information, AI training, software providers, who may own a firm and staff work, each quoted from the regulator's or the law's own page, read 28 October 2026.
- Whose rule it is, by provision: the Solicitors Regulation Authority 4 of 7, an Act of Parliament 2 of 7, the UK GDPR 1 of 7 (7 provisions, read 28 October 2026).
- What the provision settles, by provision: who may own or invest in a law firm 3 of 7, putting client information into AI training 1 of 7, keeping client affairs confidential 1 of 7, who first owns work staff create 1 of 7, what a software provider holding client data may do with it 1 of 7 (7 provisions, read 28 October 2026).
- The rule, in its own words, by provision: stated 7 of 7 (7 provisions, read 28 October 2026).

Cite as: "Client information, AI, software providers and law firm ownership", updated 2026-10-28, https://selllawfirmdatatoai.com/datasets/lawfirm-ai-data-law/.

CSV: https://selllawfirmdatatoai.com/datasets/lawfirm-ai-data-law.csv
JSON: https://selllawfirmdatatoai.com/datasets/lawfirm-ai-data-law.json
Embed (plain HTML, static link back): see https://selllawfirmdatatoai.com/datasets/lawfirm-ai-data-law/#lead