Lexus Nexus AI Webinar: The Future of Law - Ethics, Security, and Privacy in Generative AI

Introduction

• Chair: Emma Dickin, Head of In-house and Public Sector Practical Guidance Teams, Lexus Nexus UK
• Panelists:
  • Jeff Jenkins: Chief Information Security Officer, Lexus Nexus
  • Jessica Clay: Partner, Regulatory Team, Kingsley Napley
  • Allison Woodis: Head of Risk and Compliance Group, Lexus Plus UK

Scene Setting

• Emma Dickin shared findings from Lexus Nexus report:
  • 26% of legal professionals use generative AI tools monthly, up from 11%
  • 35% plan to use AI tools in the future
  • Common uses: drafting documents, researching, communication, document analysis
  • Concerns: ethical implications, security, trust in accuracy

Security Challenges in Generative AI

• Jeff Jenkins:
  • Security challenges involve understanding data use and protection
  • Importance of how technology and data are integrated

Data Protection Perspective

• Allison Woodis:
  • No specific UK AI laws yet, rely on UK GDPR
  • ICO toolkit on AI and data protection risks
  • Importance of transparency and lawful data processing

Regulatory Perspective

• Jessica Clay:
  • Fast-moving environment requiring adaptive approaches
  • UK AI White Paper principles: safety, transparency, fairness, accountability, contestability
  • Law firms must balance innovation with regulatory obligations

Risks and Ethical Implications

• Jessica Clay:
  • SRA's risk outlook on AI: innovation vs regulatory compliance
  • Ethical concerns include bias and potential misinformation
  • Importance of human verification

Data Protection Risks

• Allison Woodis:
  • Risks include client confidentiality breaches, mission creep, and data subject requests

Protecting Firms While Using AI

• Importance of understanding AI use in the firm
• Educate staff on AI functionalities and risks
• Conduct Data Protection Impact Assessments

Regulatory Compliance for Law Firms

• Integrate AI risk management into broader risk management strategies
• Importance of training, effective supervision, and diverse team structures

Questions to Consider When Implementing AI

• Jeff Jenkins:
  • Types of data input
  • Employee training
  • Third-party security measures

Real-world Implementation: Lexus Plus AI

• Jeff Jenkins:
  • Involved privacy, ethics, and security teams from the start
  • Focus on reducing hallucinations, ensuring accurate responses
  • Customer prompts not used to train models
  • Secure data handling practices

Future Considerations for Law Firms

• Business planning for AI integration in services
• Re-evaluating team structures and pricing models

Conclusion

• Thank audience and panelists
• Encouragement to integrate AI responsibly and securely into legal practices