Generative AI counsel: training data, model outputs and intellectual property

Training data rights and licensing

Investors and acquirers now diligence training data the way they diligence code ownership. Penwell Law documents the provenance of a training corpus, licenses datasets and catalogs where a license is available, and gives a written fair-use analysis under the Copyright Act where it is not, stating which uses current case law supports and which remain open. The analysis is written for review by a buyer's counsel. California's AB 2013 requires generative AI developers to post a high-level summary of their training data, and the provenance record supports that summary. The AI Transparency Act separately requires provenance disclosures in AI-generated content.

Web scraping and the chain of custody for data

Scraped web data is the most common source of training data and the most contested. Penwell Law reviews a scraping program source by source before the first request is sent.

Access. Liability under the federal Computer Fraud and Abuse Act turns on whether the scraper passed an authorization gate, not on its purpose. California Penal Code section 502 reaches further: it requires only knowing access followed by taking, copying or using data without permission. For a public page, an IP block or a cease-and-desist letter does not create an authorization gate under the Computer Fraud and Abuse Act; behind a login, a cease-and-desist letter revokes permission and further access is unauthorized. A robots.txt file is not an access control, and Penwell Law also treats it as evidence of what the site owner wanted.

Terms. A site's terms of use bind a visitor who had conspicuous notice of them and took an action showing assent, and whether an automated client that never renders a page can assent is an open question; Penwell Law drafts the customer representations and the indemnity so that the risk sits with the party that chose the target.

Conduct. An accurate user-agent, compliance with rate limits and the sourcing of any proxy pool affect whether a crawl is treated as legitimate or as evasion under California's Unfair Competition Law and the fraud provision of the Computer Fraud and Abuse Act. Trespass to chattels requires actual or threatened damage to, or impairment of, the target's systems, which a crawl that stays within the site's rate limits is unlikely to cause on its own, although a court may also weigh what would happen if many crawlers did the same.

Copyright. Copyright protects authored expression, not facts, so only the authored portions of a page are protected. Fair-use decisions on training have turned on the purpose of the use, how the copies were acquired and proof of market harm, and removing copyright management information from a page creates exposure under section 1202(b) of the Digital Millennium Copyright Act when the removal furthers an infringement. Courts assess training and output separately, so a fair-use finding on training does not protect an infringing output.

Personal data. Pages containing personal information bring the CCPA, CPRA and GDPR into the program, including whether the scraper acts as a controller or a processor, and the EU database right protects databases built on substantial investment, which U.S. law leaves unprotected.

Penwell Law then builds the chain of custody that diligence requires: a provenance record for each dataset showing its source, the terms or license it was collected under, the collection date, the filters applied, the handling of personal information and who approved it, so that a buyer's counsel, a regulator or a court can trace any training example to its origin. A company should not warrant that scraped pages are free of third-party rights; its indemnity should cover how the content was obtained, not a customer's later use of it. The provenance record also lets the company answer removal requests from rights holders and data subjects.

Model outputs: ownership, warranties and the reliance problem

The U.S. Copyright Office does not register output that lacks sufficient human authorship, and customer contracts must account for that position. Penwell Law drafts output terms a company can defend: what the customer owns, what the company disclaims, the limits on reliance on a model's output, and the allocation of indemnities when a third party claims an output infringes. For consumer products, the work includes age-gating, non-affiliation and output-reliance disclosures.

Likeness, voice and the DMCA

Digital replicas and synthetic voices raise right-of-publicity claims under California Civil Code section 3344 and its common-law counterpart, alongside trademark and false-endorsement exposure under the Lanham Act. Penwell Law counsels on consent and licensing frameworks for replica products, and it advises clients facing those claims. On the platform side, it builds the DMCA section 512 notice-and-takedown process and the repeat-infringer policy that keep the safe harbor available, and the content-provenance and labeling practices that regulators and platforms expect.

Content and catalog licensing

Penwell Law also represents rights holders in these deals. It advises artists, labels, publishers and creative businesses on recording and publishing agreements, synchronization and catalog licensing, performance contracts, and royalty and rights management, and it advises the AI companies that license those catalogs. The same practice handles the AI versions of these questions: licensing sound recordings and other works for training, and ownership of AI-assisted output.