Articles

OpenMDW 1.1: A practical guide for companies adopting AI models

What the licence permits, what remains outside its scope, and what companies should check before adopting an OpenMDW model.

16 min read

Memorised copyleft code in open-weight models and the obligations European Union law leaves undefined

The exposure open-weight adopters carry, and why ordinary open-source compliance was never designed to find it.

32 min read

Is the model the infringement? Memorisation, reproduction and the weights of AI models under European Union law

Two Munich judgments have held that a trained model can be a reproduction of the works it memorised. This article defends that conclusion for European Union law, and argues the correct test is causal: a model contains a reproduction where the work in the output is best explained by encoding during training rather than by the prompt or the conventions of the genre.

31 min read

Chardet: clean rooms, copyleft and the AI rewrite problem

What an AI-assisted rewrite of a small Python library reveals about the cost structure that copyleft has always depended on

17 min read

Is my subsidiary in scope of NIS2?

Why the answer is decided at group level

13 min read

Beyond the source code: the hidden licensing crisis in open AI

Open-weight AI models carry licence obligations at every stage of their distribution chain. Cloud-based inference providers eliminate the visibility that makes those obligations enforceable.

26 min read

Beyond the source code: your infrastructure vendor changed its licence, and your legal team probably does not know

MongoDB, Redis, Elastic, and HashiCorp all changed their licences without warning. Some have since reversed. The commercial risks for companies that built on these products have not.

17 min read

Beyond the source code: one GPL violation, five compounding legal exposures

A single unnoticed GPL violation does not stop at copyright infringement. It opens five compounding legal exposures, each with its own enforcement route, its own plaintiff, and its own remedy.

17 min read

Supply chain email fraud: how NIS2, DORA and the GDPR reshape civil liability

NIS2, DORA, and the GDPR have done more than create regulatory fines. They have given courts statutory benchmarks against which a supplier's cybersecurity conduct can now be measured in civil proceedings.

25 min read

Supply chain email fraud: which party pays when the supplier gets hacked?

When a buyer pays the wrong account because its supplier's email was compromised, the legal question is deceptively simple. The answer varies by jurisdiction, contract, and the conduct of both parties.

29 min read

When the Cloud goes down: who really bears the risk?

After the November 2025 Cloudflare outage, I went back to the enterprise SLA. Service credits are usually the best outcome a customer can hope for. The economic risk is almost always theirs.

7 min read

When does software become “AI”? The EU definition that catches businesses off guard

Most companies think they are not using AI. The EU AI Act may disagree. The legal definition captures systems that businesses use every day and excludes others that are marketed as AI.

23 min read

McLaren v Palou: the legal limits of a promise in Formula 1

McLaren v Palou asks when a pre-contractual assurance becomes an enforceable term. The English court's reasoning on the parol evidence rule and misrepresentation applies well beyond Formula 1.

6 min read

Truth can change, history can’t: the legal story behind a 17-Year-old F1 scandal

Massa v Formula One Management turns on one question: can a limitation clock run when key facts were deliberately concealed? The High Court has confirmed the claim will go to trial.

7 min read

The EU AI Act’s operator model: what every company needs to know before deploying AI

Under the EU AI Act, the line between "user" and "provider" depends on what you do with a system, not who built it. Companies that integrate, adapt, or fine-tune AI may acquire provider obligations without realising it.

20 min read

Can copyright survive AI? The legal storm that’s changing everything

Generative AI has outpaced copyright doctrine. Courts in the US, China, UK, and EU are now deciding whether training on protected works is infringement, and whether AI output can be owned at all.

7 min read

Stay in the conversation

New analysis sent when it is published.