AIRiskAware
All role hubs
For General Counsel

General Counsel and In-House Legal

AI law is being made in regulator letters, court decisions, and statutory amendments simultaneously. General Counsel need a reliable, primary-source reference for the obligations that actually apply.

For: General Counsel, in-house legal teams, privacy officers, regulatory affairs

The legal landscape for AI is fragmenting and consolidating at the same time. The EU AI Act is now substantially built but the Digital Omnibus has just shifted key deadlines. The Colorado AI Act has been effectively frozen by federal litigation. Australia's Privacy Act ADM transparency obligation takes effect 10 December 2026. Major court decisions on AI training data are reshaping copyright law (Bartz v Anthropic, Thomson Reuters v Ross, Thaler v Perlmutter). For General Counsel and in-house legal teams, the challenge is identifying which obligations actually apply, advising the business on contract terms with AI vendors, and managing litigation exposure as AI-related disputes increase.

What this role is accountable for

The substantive AI governance responsibilities that fall to this role under current Australian and global expectations.

  • 1Jurisdictional obligation mapping — what AI laws apply, when, and to which activities
  • 2AI vendor contract negotiation — data handling, IP, liability, audit rights, exit provisions
  • 3Privacy law intersection — Privacy Act ADM, GDPR Article 22, sectoral privacy obligations
  • 4IP and copyright — training data, output ownership, infringement exposure
  • 5Employment law — AI in hiring, performance, and termination decisions
  • 6Consumer law — AI in customer-facing communications, automated decisions, deceptive use
  • 7Litigation readiness — discovery, audit trails, AI-generated evidence

Most relevant intelligence

Curated coverage selected for this role — frameworks, regulatory developments, and operational guidance you can act on.

10 min

EU AI Act Digital Omnibus: May 2026 Implications

The 7 May 2026 provisional agreement — what changed, what didn't, what to advise the business.

9 min

The Colorado AI Act, Frozen

What the litigation and SB 189 mean for US state AI regulation more broadly.

11 min

AI Copyright and Intellectual Property Governance

Bartz v Anthropic, Thomson Reuters v Ross, Thaler v Perlmutter — the law of AI training data.

9 min

AI Vendor Contracts: What Businesses Need

Contract terms that actually matter for AI procurement.

10 min

GDPR vs Privacy Act vs PDPA

The comparative landscape for AI-relevant privacy obligations.

11 min

AI Rights for Workers: A Global Guide

Employment law intersection with AI-driven workforce decisions.

13 min

AI Startup Due Diligence Checklist

For GC supporting investment or acquisition activity — the technical, legal, and governance questions.

13 min

AI Governance in the Legal Sector

Professional conduct rules, court filings, client confidentiality, and the practitioner operating model.

Frameworks that apply

The regulatory frameworks, standards, and guidance documents most relevant to this role.

EU AI Act

The most comprehensive AI law in force. Extraterritorial reach affects most multinationals.

Privacy Act 1988 (Australia)

ADM transparency obligation effective 10 December 2026.

GDPR (EU)

Article 22 right to human review of automated decisions.

Australian Consumer Law

Misleading and deceptive conduct provisions applied to AI claims and outputs.

Next steps