You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

November 27, 2023

Navigating Legitimate Use of Intellectual Property in Generative AI

Subscribe to Updates

The emergence of generative artificial intelligence (AI) has transformed the landscape for innovators and creators. As many legal practitioners have pointed out, it’s imperative for both developers of AI and artists using generative AI to understand the intricacies of intellectual property (IP) strategies so they can navigate this evolving terrain successfully. This article lays out some essential considerations relating to the major types of IP for both developers and creators in the realm of generative AI.

IP Strategies for Developers of Generative AI

Developers of generative AI technologies play a pivotal role in the innovation landscape. There are three overarching IP-related issues to consider: protecting their own intellectual property, mitigating the risk of violating other people’s IP rights, and IP commercialization. Key aspects of these concerns, along with suggested approaches for developers, are outlined below.

Protecting IP

  • Copyrights. One of the primary considerations for AI developers is the protection of AI-generated works, such as art and source code. The good news is that in most countries, these creations enjoy copyright protection without the need for registration. As a result, the works are automatically protected from the moment of creation. However, it’s crucial to maintain comprehensive records of your work to establish your ownership.
  • Trademarks. Trademarks are vital for AI developers looking to establish and protect their brand. Pay close attention to Nice classifications, particularly class 9 (for software), class 35 (for business management and online marketing), and class 42 (for software design and development). Registering trademarks in these classes can provide robust protection for your brand and products.
  • Patents. For truly innovative AI algorithms, techniques, or processes, consider the option of patenting. Patents offer strong protection, but they require a thorough application process and the documentation of your innovation, including evidence that the invention is novel, non-obvious, and practically applicable.
  • Trade secrets. Protect valuable assets such as training datasets and algorithms through trade secrets. Keep them confidential and restrict access to maintain their secrecy. Legal agreements, including nondisclosure agreements (NDAs), can be invaluable in safeguarding these critical components.

Mitigating the Risk of Infringing Others’ IP Rights

  • Data collection. When collecting datasets for training AI models, ensure that you use legally obtained data. Commissioned datasets and orphan works (copyright-protected works for which the author cannot be identified or found) often come with clear usage rights, making them safer choices. Exercise caution when dealing with datasets of uncertain origin to avoid potential infringement issues.
  • Data protection laws. AI training datasets may contain personal data, which can be subject to data protection laws such as the General Data Protection Regulation (GDPR) in Europe or the Personal Data Protection Act (PDPA) in Thailand. Noncompliance with applicable data protection laws such as these can harm individuals’ privacy rights and risk legal consequences.

IP Commercialization

  • Ownership issues. Ownership of IP can become complex, especially when multiple parties are involved in creating it. To avoid future disputes and legal complications, be diligent in clarifying ownership rights and potential liability issues.
  • Licensing components. Licensing IP rights is a fundamental tool for exploiting them commercially. The license should also define the scope of ownership over the work, including elements created independently by the author and those developed through the use of generative AI. When commercializing your AI-generated products, identify the components that you own or have created. Distinguishing between your own IP and components that incorporate open-source or others’ licensed IP can make it easier to craft effective licensing agreements while protecting your interests.

IP Strategies for Creators and Artists

Creators and artists using generative also face a range of IP challenges. While some of these relate to the broader topics identified above, the specific concerns and recommended approaches differ. For instance, creators and artists have their own unique concerns when it comes to IP commercialization and the risk of infringing IP rights. The issue of IP ownership, particularly in relation to derivative works and jointly created inventions using generative AI, also comes to the fore.

IP Commercialization and Licensing

  • Licensing and selling. Creators and artists using generative AI have the opportunity to license or sell their works if the end-user license agreement permits. This can provide a pathway for monetization and sharing your creative endeavors with a broader audience.
  • Ownership of IP rights: Determining ownership rights is a necessary prerequisite when considering the commercialization of IP created through generative AI and prompts. Factors such as the “sweat of the brow doctrine,” which considers the level of user contribution to the generated work, can influence ownership. Carefully examine the terms of use and licensing agreements for any AI tools and platforms used in creating a work. If explicit ownership terms are absent, the local laws in each jurisdiction may determine ownership.
  • Commercial arrangements. The type of service model, such as licensing or subscription, can also impact copyright ownership rights. Whether it’s a free or paid subscription, be aware of their implications on your ownership when using a third party’s AI software to create your works, as the ownership rights may be influenced by the chosen licensing or subscription models.

Ownership

  • Derivative works. When creating derivative works using generative AI, it may be necessary to obtain authorization from the original sources, especially if the original works are copyright protected.
  • Jointly created inventions. In situations involving jointly created inventions or when using generative AI as a collaborative tool, clearly defining ownership and responsibilities among collaborators (e.g., via agreement) can prevent disputes and ensure that all contributions are acknowledged and protected.

Risk of Infringing Others’ IP Rights

  • Utilizing trusted generative AI. To mitigate the risk of infringing others’ IP rights or breaking other laws (such as the GDPR), always use generative AI with legally sourced materials, including datasets and pretrained models.
  • Exercise caution with fair-use doctrine. Fair use requirements and exceptions can vary significantly across jurisdictions. What qualifies as fair use in one place may not be in another, so it’s necessary to understand the local legal context and be cautious about relying on fair use as a defense.

Conclusion

Generative AI presents both exciting opportunities and complex challenges for innovators, developers, creators, and artists. Legal complexities—particularly those related to IP—are prominent among the implications of this technology, so effective IP strategies are essential for safeguarding creations, avoiding legal pitfalls, and capitalizing on the benefits of innovation. Careful and well-thought-out legal IP strategies will help creators, innovators, and their organizations make meaningful progress in this dynamic landscape.

Related Professionals

Industries

Technology

Practices

Intellectual Property

Locations

RELATED INSIGHTS​

April 4, 2024
On March 18, 2024, the president of the Supreme Court of Thailand announced the establishment of a specialized Technology Crime Division within the Criminal Court of Thailand. This represents a significant commitment to cybercrime within the Thai judiciary and a step forward in Thailand’s ability to investigate cybercrime. The rise in cybercrime investigations in recent years has made it increasingly difficult for Thailand’s traditional criminal courts to consider and issue enforcement orders in support of ongoing investigations in a timely manner. The new Technology Crime Division addresses this challenge. This new division has jurisdiction over cybercrime and technology-related crime, fraud or extortion using computers, and criminal offenses relating to personal data protection laws. In addition, this new division has jurisdiction over all requests from competent law enforcement officers seeking court orders under the Computer Crimes Act B.E. 2550, the Personal Data Protection Act B.E. 2562, and the Cybersecurity Act B.E. 2562. The Technology Crime Division will have trainees and judges with expertise in technology and cybercrime—not only to facilitate expert prosecution of cybercrime but also to offer critical and time-sensitive support to law enforcement investigations of alleged cybercrime. The Technology Crime Division is not yet operational. The president of the Supreme Court is expected to announce the division’s opening date in the coming months. For more details on Thailand’s measures for dealing with cybercrime, please contact Michael Ramirez at [email protected] or Piyawat Vitooraporn at [email protected].
Read More
March 29, 2024
Thailand’s Cybersecurity Regulating Committee (CRC) released a notification under the Cybersecurity Act on February 22, 2024, setting key operational obligations for critical information infrastructure (CII) organizations. The notification takes effect on June 20, 2024. CII organizations are state or private entities that carry out services related to national security, public services, banking and finance, information technology and telecommunications, transportation and logistics, energy and public utilities, or public health. CII organizations will be identified by the National Cyber Security Committee (NCSC) and notified of their status. The key obligations of CII organizations are laid out below. Reporting to the National Cyber Security Agency (NCSA) CII organizations must provide the following to the NCSA: A list of executive and operational staff, along with emergency contacts who can be reached within 60 minutes in the event of a cyber threat. The NCSA must be notified of any updates to this list within 15 days following any changes. A list of internal departments or individuals who are the responsible persons, owners, and holders of the computer systems, along with emergency contacts who can be reached within 60 minutes in the event of a cyber threat. The NCSA must be notified of any updates to this list at least 7 days prior to any changes (or within 15 days after the change if there is a necessary reason). Policies, Guidelines, and Procedures As specified in the National Cyber Security Committee (NCSC) guidelines, CII organizations must prepare the following internal documents by June 20, 2025: Cybersecurity practice guidelines, consisting of an inspection plan, risk assessment, and incident response plan. Cybersecurity standards framework, consisting of measures for risk identification, risk prevention, threat detection and monitoring, incident responses, and resilience and recovery. CII organizations must also prepare the following: Mechanisms, procedures, and steps for monitoring and detecting
Read More
March 29, 2024
Vietnam’s Ministry of Public Security (MPS) is drafting two reports to present to the government in May 2024 to advocate for the development and adoption of a Law on Personal Data Protection. These reports include an assessment of the policy impact of the proposal to develop a personal data protection law, and an assessment of the current state of social relations related to personal data protection. Decree No. 13/2023/ND-CP on Personal Data Protection (PDPD), adopted in April 2023, became the first comprehensive legal instrument on data protection in Vietnam. When the National Assembly was debating its text and adoption in 2022 and 2023, questions were raised as to the status of this new regulation and the legality to adopt a decree before a law. In accordance with the public announcements made throughout the development of the PDPD assuring that a law would be developed at a later stage, the MPS is now advocating for the development of a Personal Data Protection Law and has drafted the two reports pursuant to the Law on the Promulgation of Legal Documents. The main arguments advanced by the MPS in the two reports are as follows: As the right to privacy is enshrined in the Constitution, any restrictions thereof must be made through a law and not a decree. The MPS is notably referring to the lawful basis for processing and limited exceptions to consent under the PDPD. This may be a sign that the MPS intends to widen the exceptions to consent under the new law. The definitions of “personal data” and “personal data protection” need to be harmonized to consolidate the regulatory framework. The MPS indicates that there are 69 legal documents directly related to “personal data protection” in Vietnam with more than 10 different definitions, while “personal information” appears in
Read More
March 28, 2024
Recently, Vietnam has witnessed a dramatic increase in cyber fraud, causing significant financial losses and posing a grave threat to both Vietnamese and foreign entities. With the increasing reliance on digital technology and the widespread adoption of online platforms, the country has become fertile ground for cybercriminals to exploit vulnerabilities and conduct various fraudulent activities. This article aims to present an overview of addressing cyber fraud in Vietnam and offers practical advice for businesses to safeguard themselves from becoming victims of such illicit activities.
Read More

Contact

We have seven offices in six countries
across Southeast Asia.

Contact Us

Careers

We are always seeking great people to grow
our amazing team.

Join Us

Networks

© 2023 Tilleke & Gibbins International Ltd. All rights reserved.

© 2020 Tilleke & Gibbins International Ltd. All rights reserved.

Privacy Policy

| Legal Notice