Tag: AI

  • Who Owns AI-Generated Content? Where U.S. Copyright Law Stands in 2026

    Who Owns AI-Generated Content? Where U.S. Copyright Law Stands in 2026

    Your marketing team produced a quarter’s worth of blog images in an afternoon. Your engineers shipped a feature with an AI coding assistant. Someone rewrote the landing page copy over lunch. Nobody stopped to ask whether you own any of it.

    The bottom line: you probably own less than you think, and what you do own turns entirely on what a human actually contributed. That isn’t a close question anymore, with no split in the U.S. Circuit Courts and the Copyright Office’s own guidance pointing in the same direction. The Supreme Court declined to take it up on March 2, 2026.

    What You Actually Own

    U.S. copyright protects works of human authorship. Material an AI system generates, without meaningful human creative control over its expressive elements, isn’t protected by copyright at all. Not by you, not by the AI vendor, not by the model. It’s unowned from the moment it exists.

    That doesn’t make AI output worthless, and it doesn’t stop you from using it commercially. It means the raw output carries no copyright you can enforce against a competitor who lifts it. Whatever protection you get attaches to the human contribution: the text a person wrote, the edits a person made, the creative selection and arrangement of AI-generated pieces into something larger.

    Looking at Oklahoma law, for example, businesses have no separate state copyright protections. And regardless of which state your business operates in, Copyright is exclusively federal. 17 U.S.C. § 301 preempts state-law rights equivalent to it, though contract, trade secret, and right-of-publicity claims aren’t preempted and can still matter in an AI-content dispute.

    Where the Copyright Office Has Drawn the Line

    The Copyright Office’s refusal letters are more useful than the abstract rule, because they show you the line applied to real facts. Three are worth knowing.

    Zarya of the Dawn. A graphic novel combining the author’s own written text with Midjourney-generated images. The Office split it. The author’s text, and her selection, coordination, and arrangement of the written and visual elements, were registered. The Midjourney-generated images were not, because they were “not the product of human authorship.” Prompts, the Office reasoned, work more like suggestions than orders, since you can’t predict what the system hands back.

    Théâtre D’opéra Spatial. Jason Allen’s award-winning image, refused even though he’d run more than 600 prompts before settling on an output. The problem wasn’t that Allen didn’t work hard enough. It’s that Midjourney “does not interpret prompts as specific instructions to create a particular expressive result.”

    SURYAST. The Copyright applicant fed his own photograph and Van Gogh’s The Starry Night into the AI image generator, then picked a number controlling how strongly thestyle transferred. Copyright refused by the Office. Even with a copyrightable input, the AI system decided where elements landed and what colors applied, and “selecting a single number for a style filter is the kind of de minimis authorship not protected by copyright.”

    The registration guidance itself, published at 88 Fed. Reg. 16190, adds an obligation many people miss. If your work contains more than a de minimis amount of AI-generated material, you have to disclose it and describe what the human contributed. Already registered something without disclosing? File a supplementary registration and correct the record.

    The Framework the Office Applies Now

    In January 2025 the Office published Copyright and Artificial Intelligence, Part 2: Copyrightability. It’s the document your team should be working from, and here is what it says.

    • Prompts alone aren’t enough. “Based on the functioning of current generally available technology, prompts do not alone provide sufficient control.” A longer, more elaborate prompt doesn’t change the analysis, which is worth passing along to anyone on your team convinced their prompt engineering amounts to authorship.
    • Using AI as a tool costs you nothing. “The use of AI tools to assist rather than stand in for human creativity does not affect the availability of copyright protection for the output.” Removing an object from a photo, cleaning up audio: assistive, and fine.
    • Your own expression survives. Feed your copyrightable work in, and whatever of your expression is still perceptible in the result is still yours.
    • Creative selection, coordination, arrangement, and modification of AI material are protectable, as to what the human actually did.

    The Office also declined to recommend new legislation, concluding that “the case has not been made for additional copyright or sui generis protection for AI-generated content.” I’d expect that to hold for a while as Congress has shown no indication of addressing the question, and the Office just spent two years explaining why nothing new is needed.

    Testifying to the Senate Judiciary IP Subcommittee on May 12, 2026, Register of Copyrights Shira Perlmutter said the Office “has to date registered more than 7,000 claims that include AI-generated materials where those materials have been disclaimed.” Works built with AI get registered all the time. They get registered because the applicant disclosed the AI material and claimed only the human part.

    The Courts Agree

    Stephen Thaler applied to register an image naming his AI system as the author. The Office refused. On March 18, 2025, the D.C. Circuit affirmed: “As a matter of statutory law, the Copyright Act requires all work to be authored in the first instance by a human being.” Thaler v. Perlmutter, 130 F.4th 1039 (D.C. Cir. 2025). The reasoning is structural, not philosophical. The Act measures the copyright term by “the life of the author,” passes termination rights to a widow, widower, or surviving children, and requires transfers signed by the owner. None of that works if the author is a machine.

    The line worth keeping is the court’s own caveat: “the human authorship requirement does not prohibit copyrighting work that was made by or with the assistance of artificial intelligence.” Using AI isn’t the disqualifier. Letting AI do the authoring is.

    The Supreme Court denied certiorari on March 2, 2026. Thaler v. Perlmutter, No. 25-449. The same answer had already landed on the patent side, where the Federal Circuit held that an inventor has to be a natural person. Thaler v. Vidal, 43 F.4th 1207 (Fed. Cir. 2022).

    The Part Nobody Has Answered

    Pure AI output isn’t protected. Substantial human authorship is. Where the line falls between those two is still anyone’s guess, and no court has ruled on it.

    Allen v. Perlmutter, No. 1:24-cv-02665 (D. Colo.), is the case to watch. Cross-motions for summary judgment were fully briefed in January 2026 and it’s still pending. It’s the first real chance for a federal court to say how much iterative prompting, curation, and editing adds up to authorship. My guess is the court affirms the Office and says very little about the middle, which would leave everyone roughly where they are now. Worth watching regardless.

    The evidentiary standard is undeveloped too, so nobody knows what proof of human creative contribution a court will want to see. And here’s the one that catches people, a work that isn’t copyrightable can still infringe somebody else’s copyright. Having no protection in your output says nothing about your exposure.

    What a Registrable AI-Assisted Work Looks Like

    Put the negative rules together and a usable path falls out. Nothing about AI in your workflow blocks registration. What blocks it is a deliverable where you can’t point to what the human did.

    The safest version looks like this. A person writes, drafts, photographs, or designs something copyrightable. AI assists somewhere in the process, or generates components. A person then selects among outputs, arranges them, and edits them in ways that add original expression. On the application you claim the human contribution, describe it, and disclaim the AI-generated material. What you get is a registration covering the human layer, which is narrower than a registration covering everything, and considerably better than nothing.

    Zarya of the Dawn is the model here, not the cautionary tale it usually gets cited as. The author walked away with a registration covering her text and her arrangement. She lost the images. That’s the trade, and for most business content it’s a perfectly acceptable one.

    What to Do About It

    Read your AI vendor’s output clause for what it actually says. OpenAI’s consumer Terms of Use, under the Content section, assign you “all our right, title, and interest, if any, in and to Output.” Those two words, “if any,” are doing real work. If the output isn’t copyrightable, the assignment conveys nothing, because there’s nothing to convey. It’s a promise not to claim the material against you, not a warranty that you own it.

    Let me point you to another example in the OpenAI consumer Terms of Use. Look under the Content section at the paragraph titled, “Ownership of content.” It reads, “Due to the nature of our Services and artificial intelligence generally, output may not be unique and other users may receive similar output from our Services. Our assignment above does not extend to other users’ output….” That provision certainly supports another perspective on why you must be vigilant when incorporating AI-generated content into your company’s “hopefully” proprietary assets.

    Assume a competitor can lawfully copy anything you generated purely with AI, or received the same or similar output from their AI tool. That should change what you build with AI and what you don’t. A logo, a mascot, a signature illustration style, anything whose value depends on nobody else being able to use it, needs real human authorship in it, and you need to be able to prove it. Keep the drafts, the prompt histories, the redlines, the version history. Reconstructing that record two years into a dispute is expensive and unconvincing.

    Disclose AI material on registration applications, and do it accurately. A knowing misstatement of material fact can put the registration itself at risk, and the registration is the asset you need in order to sue. Candor costs almost nothing; claim the human contribution, disclaim the rest.

    Fix your IP assignment language. This is the one that occurs most often in SaaS and professional services agreements, and it’s the easiest to miss, because the clause looks fine until you read it against this rule. Most assignment clauses transfer works of authorship the person creates. If your contractor hands you AI output with thin human involvement, there may be no work of authorship to assign, and you’ve paid for a deliverable nobody owns. Address AI-assisted deliverables expressly, add a disclosure obligation, and get a warranty about the human contribution.

    Know whether you’re dealing with an employee or a contractor. Everything above assumes a contractor, because that’s where the assignment clause trap lives. A different rule applies to your own people.

    If your employee creates the work within the scope of employment, and there’s enough human authorship to support a copyright, you own it automatically as a work made for hire under 17 U.S.C. § 201(b). No assignment needed, no signature required. But work made for hire only decides who owns a copyright that already exists. It doesn’t create one. An employee’s purely AI-generated output is exactly as unowned as a contractor’s, work made for hire or not. The question isn’t whose payroll the creator is on. It’s whether a human did enough for there to be a copyright to own.

    One Question to Put to Your Team This Week

    Pick the ten most commercially valuable pieces of content your company produced this year and ask two things about each: did AI make it, and can you prove what the human did? Where the answer runs yes and no, that asset isn’t protected, and any decision you’ve made assuming otherwise needs revisiting.

    The law here is more settled than the headlines suggest. What isn’t settled is the middle, and a ruling out of Colorado could move it one direction or the other before the year is out.

    This post is provided for general informational purposes only and does not constitute legal advice. Reading this post does not create an attorney-client relationship. Contact Ken McConkey to discuss your company’s specific circumstances.

  • AI vs. Bots vs. Assistants vs. Agents: What Business Owners Should Know

    AI vs. Bots vs. Assistants vs. Agents: What Business Owners Should Know

    “AI,” “bot,” “assistant,” and “agent” get used interchangeably in most business conversations, and that’s costing companies real clarity when they decide what to actually deploy.

    Here’s the plain-language version:

    AI is the underlying technology, the algorithms and data that let software learn, reason, and recognize patterns. It’s the brain, not a product you install.

    Bots are narrow, task-specific tools built to automate one job well: a website chat window answering FAQs, a script that files data, a crawler that indexes pages. Efficient, but limited to what they were built to do.

    Assistants sit a level up. They’re built on AI, understand natural language, hold context across a conversation, and connect into your other tools and workflows, drafting a document, checking a calendar, summarizing a contract. But an assistant still waits for you to ask, one step at a time.

    Agents go a step further. Give an agent a goal, and it plans and carries out a multi-step task on its own, chaining actions and pulling in other tools without waiting for a prompt at each step. An assistant waits for you to ask; an agent runs the workflow itself. Gartner treats assistants as the precursor to agents, not the same thing, and has a name for the common mistake of blurring the two: “agentwashing,” marketing a tool as an agent when it isn’t actually autonomous.

    Why this distinction matters for your business, not just semantics:

    • Gartner projects that 40% of enterprise applications will carry task-specific AI agents, the autonomous, multi-step version of these tools, by the end of 2026, up from under 5% a year earlier. That’s a fast shift from “AI as add-on” to “AI as infrastructure.”
    • A Harvard Business School and BCG field study found knowledge workers using AI on tasks within its strengths worked over 25% faster and produced work rated more than 40% higher in quality, but were also more likely to get it wrong on tasks outside that zone.

    The takeaway: AI tools are not interchangeable, and neither is the level of trust you should place in their output. A bot is right for high-volume, predictable work. An assistant earns its keep on workflow and coordination. An agent earns its keep by taking a multi-step task off your plate entirely. And every one of them still needs a human checking the tasks that fall outside what the tool is actually good at.

    Before your business rolls out the next AI tool, get clear on which of these four you’re actually buying, and what job it’s suited for. What’s your team using AI for right now: automating a task, assisting a workflow, or letting an agent run it end to end?

    Ken McConkey is an attorney in Oklahoma City focusing on SaaS and technology commercial contracts, entity formation and governance, and data privacy compliance. He is Of Counsel to Derryberry & Naifeh, LLP. This Post is general information about legal and business developments, not legal advice, and it does not create an attorney-client relationship.


    Sources

    Gartner: 40% of Enterprise Apps Will Feature Task-Specific AI Agents by 2026 (press release, Aug. 2025).

    Gartner: Agentic AI — Autonomy Is Coming, Are You Ready to Control It? (gartner.com, definitions of AI agent, agentic AI, and “agentwashing”)

    Navigating the Jagged Technological Frontier — Harvard Business School AI Institute / BCG field study

  • Paying for ChatGPT or Claude Doesn’t Make Your Business Data Confidential

    Paying for ChatGPT or Claude Doesn’t Make Your Business Data Confidential

    A growing number of business owners run day-to-day work, drafting emails, summarizing contracts, brainstorming strategy, through a paid AI subscription, and assume that because they’re paying, their conversations are private. That assumption is often wrong. Consumer-paid plans like ChatGPT Plus or Pro, Claude Pro or Max, and Gemini Advanced buy you speed, higher limits, and better models than the free tiers, but they remain consumer products governed by individual terms of service and privacy policies, not the enterprise contracts that come with real confidentiality guarantees.

    This post covers general business confidentiality. It doesn’t address the separate, more demanding duty attorneys owe under the rules of professional conduct, that’s a different discussion for another day. If you’re a lawyer, the short version is: do not put client information into a free or consumer-tier AI tool. And to be clear, nothing here is a recommendation of one platform over another; each has its own strengths, and this is simply a look at what their policies actually say.

    Are Your Prompts and Responses Actually Confidential?

    Not completely. Your prompts and the model’s responses are processed and stored on the provider’s own systems, not end-to-end encrypted the way a secure messaging app is. Providers retain data for operational, safety, legal, and, depending on your settings, model-improvement purposes. Consumer paid plans don’t come with the contractual protections, a data processing agreement, zero-data-retention options, audit rights, that commercial and enterprise tiers typically include. Treating a paid consumer chat as a private notebook is a real risk for client data, employee or customer personal information, or anything covered by an NDA or a regulatory obligation.

    Will Your Conversations Be Used to Train the Model?

    This is where the platforms diverge most, and it’s worth checking your own account settings rather than assuming.

    • OpenAI (ChatGPT, including Plus): the default is on. Your conversations may be used to train future models unless you turn off “Improve the model for everyone” under Settings, Data Controls. Temporary Chats are never used for training and are deleted after 30 days regardless. Business, Enterprise, Team, and Edu plans include additional controls and generally exclude customer data from training by default.
    • Anthropic (Claude Free, Pro, Max): the default is off. Anthropic only uses your chats to improve Claude if you affirmatively turn that setting on in Privacy Settings, with one exception: conversations flagged by Anthropic’s safety systems can still be analyzed to improve abuse detection regardless of your setting. Incognito chats are excluded from training even when the general setting is on. Feedback submitted through the thumbs up or down button is retained for up to five years and may be used regardless of your training preference. Claude for Work and API accounts don’t train on customer content by default.
    • Google (Gemini, including Advanced): controlled by the “Keep Activity” setting. When it’s on, your chats, and Gemini Live audio, video, or screenshares, may be used to improve Google’s AI models, with your activity auto-deleted after 18 months by default (adjustable). When it’s off, chats aren’t used for training, but Google still retains them for 72 hours to operate the service and guard against abuse, and submitting feedback can bring part of that conversation back into scope for review.

    Across all three, an opt-out, or a decision not to opt in, is forward-looking only. Data already folded into a completed training run can’t be pulled back out after the fact.

    Can a Human Actually Read What You Typed?

    Yes, in a limited way, on every platform. A restricted set of employees or contractors can review flagged or sampled conversations to investigate abuse, respond to a support request you initiated, handle legal process, or check response quality when training and improvement settings are enabled. Google is explicit that a subset of chats go through human review to improve its models and keep the platform safe, and that reviewed conversations are retained separately for up to three years, even after you delete your own activity history. None of the major platforms promise that no human will ever see a given conversation; they promise that access is limited, logged, and tied to a specific business reason.

    What This Means for Your Business.

    A paid subscription buys you capability, faster responses, higher limits, stronger models, not enterprise-grade confidentiality. If your team is putting anything sensitive into an AI tool, contract terms, financial data, employee information, unreleased product details, the safer path is an approved commercial or enterprise account whose contract actually restricts training and human access, backed by an internal policy that keeps that kind of information off personal accounts.

    Even on a consumer plan, you can meaningfully cut your exposure:

    • Turn off the model-improvement or training setting, and use Temporary, Incognito, or “Keep Activity off” modes where available.
    • Keep confidential, personal, or regulated data out of the tool entirely.
    • Review and delete chat history on a regular schedule.
    • Check the current settings and policy language for the specific plan your team actually uses, these terms change, and the version that matters is the one attached to your account today.

    Policies on all three platforms have shifted meaningfully over the past year, and they’ll shift again. The summary above reflects each provider’s stated policy as of this writing; the only reliable source going forward is the terms and privacy settings tied to your own account.

    This post is provided for general informational purposes only and does not constitute legal advice. It does not address the separate confidentiality obligations attorneys owe under the rules of professional conduct. Reading this post does not create an attorney-client relationship. Contact ME to discuss your company’s specific circumstances.