Key Takeaways
AI Adoption Is Outpacing AI Governance
Legal teams are embracing AI quickly, but many organizations are still working out how to govern it at scale. The priority is no longer whether to use AI, but how to use it responsibly, consistently, and defensibly.
The EU AI Act Is Becoming the Global Compliance Baseline
The EU AI Act remains the most prescriptive AI regulatory framework and is likely to shape global compliance programs, much like GDPR did for privacy. Even organizations outside the EU may use it as a benchmark for AI governance.
More Time Does Not Mean Less Urgency
Recent timeline shifts may give businesses more time to comply with certain high-risk AI obligations, but panelists warned against slowing down. Regulators may expect more mature, well-documented programs when deadlines arrive.
Shadow AI Is a Growing Risk
Employees may already be using unauthorized AI tools, including public AI platforms, without legal or security oversight. Companies need clear inventories, approval processes, training, and consequences for misuse.
AI Policies Must Be Practical and Continuously Updated
Static AI policies are not enough in a fast-changing environment. Organizations need living policies that address approved tools, data handling, confidentiality, privilege, cybersecurity risks, training, and escalation paths.
Start With Use Cases, Not Tools
Before buying or building AI solutions, legal teams should map their processes and identify the problems they actually need to solve. Strong AI implementation starts with clear use cases, clean data, and realistic workflows.
Human Judgment Remains Essential
AI can improve speed and efficiency, but it cannot replace legal judgment, negotiation skills, strategic thinking, or professional responsibility. Lawyers still need to understand, review, and challenge AI-generated outputs.
Implementation Requires Real Investment
Purchasing an AI tool is only the beginning. Successful adoption requires data cleansing, playbooks, workflow design, user training, testing, iteration, and cross-functional support from legal, IT, procurement, compliance, and business teams.
Law Firms and ALSPs Have a Bigger Role to Play
Legal teams expect external providers to use AI responsibly, improve efficiency, reduce costs, and help clients test new tools. ALSPs are especially well positioned to support AI-enabled legal transformation through tech-plus-talent models.
The Best Approach Is Intentional Adoption
Panelists emphasized the need to slow down enough to understand the technology, assess risks, and deploy AI where it truly adds value. The goal is not AI for its own sake, but smarter, safer, and more effective legal operations.
Agenda
The EU AI Act and UK regulatory frameworks today
- Key provisions and enforcement bodies in each jurisdiction
- The August 2025 high-risk compliance deadline and what it triggers
Where the two regimes create the most friction for in-house teams
- Navigating the EU's prescriptive requirements alongside the UK's principles-based, sector-led approach
- Practical tensions when your business has exposure in both markets
Common compliance blind spots
- Shadow AI usage across business units
- AI-related gaps in vendor and procurement contracts
- Internal governance that exists on paper but not in practice
Lessons from GDPR that apply to AI Act readiness
- What early GDPR implementation got right and wrong
- How to avoid repeating the same mistakes with AI compliance
Building governance that satisfies both regimes without over-engineering
- Designing a single compliance structure that covers EU and UK requirements
- Avoiding duplicative parallel workstreams
90-day action plan
12 May, 2026 |
and
