AI governance and liability for automated decisions
Introduction
Governance frameworks for the AI systems a company builds or buys, and advice on who answers when an automated decision goes wrong.
The Kingdom has named 2026 the Year of Artificial Intelligence, but there is still no single AI statute. The rules come from existing law: the Personal Data Protection Law whenever a model uses personal data, the new Copyright Law on training data and outputs, the Civil Transactions Law on liability for harm, and SDAIA's AI ethics principles and generative AI guidelines, which regulators and counterparties increasingly treat as the benchmark.
Our Artificial Intelligence and Technology department builds AI governance from the earliest design of a product or service: an inventory of AI systems, a risk assessment for each, human oversight where decisions affect people, documentation, and clear responsibility within the company.
When automated decisions cause harm, the question is who answers: the developer, the supplier, the company that deployed the system or the person who relied on it. We allocate that liability in contracts before deployment and advise on it when disputes arise.
How we help
What the work covers
AI inventory
Mapping the AI systems in use, their data and their purpose.
Governance framework
Policies, risk assessments, human oversight and accountability.
Liability
Allocating responsibility for automated decisions in contracts and policies.
Outputs & data
Rights in training data and outputs under the new Copyright Law.
Contact