The Upper Tribunal has ruled. Privilege can be waived by a single AI upload. The SRA referral and ICO notification obligations are live. SovereignBrief tells you exactly what your firm needs to do — before the next incident happens to you.
The Upper Tribunal ruled this month that uploading privileged documents to public AI tools permanently waives legal professional privilege — with SRA referral and ICO notification obligations. Cork and another v Mark Smith confirmed AI-hallucinated authority going to court at Pinsent Masons unchecked. The firm self-referred to the SRA. This briefing sets out what both cases require your firm to do now.
The SRA has issued AI guidance that most firms have read but few have actioned. This briefing maps exactly what the SRA expects — on oversight, disclosure, competence, and supervision — with specific Code of Conduct references and a 10-point compliance checklist.
Fee earners across UK law firms are using personal ChatGPT, Gemini, and Claude accounts on client matters without firm knowledge. This is a live SRA Code breach and an active UK GDPR Article 28 violation — happening right now in most firms.
Law firms are deploying AI agents that take autonomous actions. The governance frameworks built for supervised AI tools do not apply. This briefing introduces the six-element supervision framework law firms need before deploying agentic AI.
The EU AI Act applies directly to UK law firms with EU clients, EU offices, or EU-facing work. This briefing covers which firms are in scope, which obligations apply, how this interacts with SRA and UK GDPR obligations, and what to do before the August 2026 deadline.
SRA updates, ICO enforcement actions, UK GDPR developments, and AI governance intelligence — distilled into one monthly briefing sent directly to your inbox. Read by Innovation Partners, COOs, and compliance teams at UK law firms.
Founder of Cardinal AI Systems. AI Governance Architect. 30 years of corporate governance, legal education, Harvard Leadership, Oxford Saïd AI Governance, and 40+ live AI platforms deployed across government, financial services, healthcare, legal, oil & gas, and enterprise — many under NDA. SovereignBrief is published monthly for UK law firms and regulated organisations navigating AI governance.