The EU Artificial Intelligence Act (EU AI Act) creates a risk-based framework for the development, supply and use of artificial intelligence. Although it is an EU law, it may apply to UK businesses that develop or supply AI systems to EU customers, place AI systems on the EU market, or provide AI-powered services whose outputs are used in the EU. This article explains the EU AI Act’s rules on prohibited AI practices, transparency obligations, high-risk AI systems and copyright-related requirements for certain AI models, before considering the UK’s current regulatory approach and the practical implications for data protection, automated decision-making, consumer protection and commercial contracts.
Changes have been made to the UK’s data protection regime through the introduction of the Data (Use and Access) Act 2025 (DUAA). Whilst the provisions considered in this article are already in force, others will be introduced over time. The DUAA does not replace the UK’s existing data protection legislation (including the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018 (DPA 2018) and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR)) but will make some changes to that legislation in order to simplify the UK’s data protection regime.
The recent high-profile cyber breaches at Marks & Spencer, the Co-operative Group, and the Legal Aid Agency underscore the risks that even large, well-resourced organisations face in managing personal data. These incidents also demonstrate the importance of maintaining not only effective security measures, but also robust breach response plans, as required by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
In today’s fast-paced commercial environment, Supply Agreements are the backbone of many business operations. Whether you’re a manufacturer, distributor, or retailer, having a robust and legally sound supply contract is essential to mitigate risk, ensure continuity, and maintain strong commercial relationships.
Richard Riley joined Bermans in March 2025 and is a Partner and Head of Commercial.
Richard works with SME’s and business owners, family managed companies, life sciences, scientific sectors advises on all areas of Commercial Law, including:
Data Protection (including advising on compliance/breaches and documentation)
Business Law (including business to business and business to consumer contracts)
Intellectual Property Law (including IP assignments and IP licensing)
IT Law (including drafting SaaS Agreements, Support and Maintenance contracts, and development agreements)
Consumer Law
Franchise Law
Richard studied Biology at the University of Edinburgh and Law at Manchester Metropolitan University, before qualifying as a Solicitor in 2009.
He is currently recognised in the Legal 500 for his work on commercial matters.
Outside of work, Richard is currently marathon running, and also enjoys spending his time Crossfit/Hyrox training, as well as going to theatre, gigs, stand up and movies.
All businesses should have robust terms and conditions in place which set out the legal framework for the relationship between the business and its customers. This will help to ensure clarity and protection for both parties involved in commercial transactions.
Concern for the environment is at an all-time high. There is greater awareness, both on an individual and corporate level, of the impact of our daily activities and choices on the environment. ‘Sustainability’, ‘carbon footprint’ and ‘environmental impact’ are topics that now regularly appear on company websites and on their meeting agendas.
Intellectual property (IP) covers ‘creations of the mind’ which can include inventions, designs, symbols and names and logos used in business. It is protected by law (copyright, trademarks, and various other forms), allowing people to earn recognition and/or money from what they create. Like other property, IP can be bought, sold, or licensed. There are different types of intellectual property rights including:
Last week, the UK Foreign Secretary, Liz Truss, announced a ban on certain professional and PR services exports from the UK to Russia. The banned services include management consulting, public relations and accounting. The Foreign Secretary commented that the ban will help to ensure that Putin fails in Ukraine, by cutting off service exports that are fundamental to the Russian economy.