Counseling Clients on Managing the Risks of Artificial Intelligence – Texas Bar Journal

I would like to say a big ole Texas-sized “Thank You” to the Texas Bar Journal for publishing Legal Reasoning: Counseling Clients on Managing the Risks of Artificial Intelligence, in the May 2024 issue of the Journal. I wrote this article along with my colleague Kristen Petry, whose work was invaluable in the preparation of this article. 

As would only be appropriate for an article of this nature, I asked one of the AI tools to write a blog post about the article and here goes — completely unedited — compare the accuracy for yourself!

Navigating the Risks of AI: A Legal Perspective

Artificial Intelligence (AI) has undeniably transformed the global landscape. According to Stephen Hawking, “Success in creating AI would be the biggest event in human history. Unfortunately, it might also be the last unless we learn how to avoid the risks.” This assertion underscores the importance of managing the risks associated with AI – a task that falls significantly on legal practitioners advising clients on this innovative technology.

The Role of Legal Counsel in AI Risk Management

From a legal standpoint, AI presents two distinct challenges. First, lawyers must understand the technology and the risks it poses. Second, they must advise clients on the legal aspects of the technology and how to manage associated risks. One of the major hurdles in providing such advice is the fact that the law often lags behind technological advancements. However, lawyers have always navigated unchartered territory by applying known and binding principles, persuasive guidance, and logical reasoning to predict outcomes based on the best available information.

The NIST AI Risk Management Framework

Fortunately, legal practitioners are not operating in a void. The National Institute of Standards and Technology (NIST) and the U.S. Department of Commerce have published the Artificial Intelligence Risk Management Framework (AI RMF) to assist individuals and companies in managing AI risks. Although the AI RMF is not a law or regulation, it provides robust guidance on managing AI risks and is often used as an example of the appropriate standard of care for such issues. The AI RMF addresses risks at every stage of the AI lifecycle, from design and development to deployment and use.

Implementing the AI RMF: Key Considerations for Lawyers

The AI RMF recommends four high-level functions to manage AI risks: Govern, Map, Measure, and Manage. For lawyers, the ‘Govern’ function, which involves understanding, managing, and documenting policies, processes, procedures, and practices, is particularly relevant. Here are some key areas to focus on when advising clients:

  1. Understand the client: Lawyers should have a thorough understanding of the client’s business, environment, activities, information, and relationships.
  2. Understand the AI’s intended use: It’s essential to have a clear understanding of the client’s objectives for using AI.
  3. Analyze legal and regulatory requirements: Lawyers should ensure that any existing legal and regulatory requirements involving AI that pertain to the client are understood, managed, and documented.
  4. Develop transparent policies: Clients should recognize the need to develop, understand, manage, document, and effectively implement transparent policies, processes, procedures, and practices related to AI.

Addressing AI risks is a continuous, timely process that must be performed throughout the AI system lifecycle. With the NIST AI RMF as a guide, legal practitioners can help clients navigate the complex landscape of AI risk management and ensure the responsible development and use of AI systems.

Published by Shawn E. Tuma

Shawn Tuma is an attorney who is internationally recognized in cybersecurity, computer fraud and data privacy law, areas in which he has practiced for nearly two decades. He is a Partner at Spencer Fane, LLP where he regularly serves as outside cybersecurity and privacy counsel to a wide range of companies from small to midsized businesses to Fortune 100 enterprises. You can reach Shawn by telephone at 972.324.0317 or email him at stuma@spencerfane.com.

Leave a comment

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Discover more from Business Cyber Risk

Subscribe now to keep reading and get access to the full archive.

Continue reading