Notes on law, regulation and AI
Short, practitioner pieces on the questions I keep returning to: how AI governance works in practice, how regulated digital markets are changing, and where legal operations can genuinely improve.
If you are new to these, start with three. How to measure a legal automation pilot is the one I would want a general counsel to read first. Evaluating a live AI workflow: the release gate is what happens after the pilot passes. AI citation errors: a verification protocol for legal teams is the one a partner asks for after the first bad reference.
- 29 July 2026 Legal AI Who keeps the agent? Custody clauses for an AI pilot An old custody rule, read as charter language: a named keeper, care you can prove, and a recourse trail for whatever startled the agent.
- 29 July 2026 Data protection KVKK standard contracts: what the first full year’s 2,497 notifications say The five-business-day filing was never the hard part. The Authority now holds a register of transfers, and it has started reading it.
- 28 July 2026 Legal AI Composing your own agentic workflow: what the canvas gives a legal team A bought product ships someone else's workflow. Composing your own puts the stages, the mandate and the records in the legal team's hands.
- 27 July 2026 Marketplace operations Marketplace compliance ops: one notice queue, set to the tightest clock Turkey gives you forty-eight hours and the DSA sets the shape of the decision. Which queues you own, and who is on the rota.
- 27 July 2026 AI governance Prompt injection in legal workflows: a filter is not a control A filter is a mitigation. The control is the capability set an agent holds while it reads a document nobody in your organisation wrote.
- 27 July 2026 Legal operations Evaluating a live AI workflow: the release gate A pilot is measured once. A live workflow is re-measured on every model, prompt, retrieval or connector change.
- 27 July 2026 Legal operations Workflow automation lock-in: what you can export, what you rebuild The Data Act gives you your data back, not your workflow. What the due diligence checklist should now ask for.
- 18 July 2026 AI regulation The EU AI Act on 2 August 2026: what actually applies Regulation (EU) 2026/1744, the Digital Omnibus on AI, entered into force on 27 July and moves the high-risk dates to 2027 and 2028. Article 50 duties still apply from 2 August.
- 18 July 2026 Legal AI AI citation errors: a verification protocol for legal teams On 9 September 2026, Damien Charlotin’s independent database listed 2,022 cases concerning generative-AI hallucinations or, in some entries, alleged AI use. The protocol I use against that runs to five steps and ends with a named signature.
- 11 July 2026 E-commerce law Marketplace intermediary liability in Turkey: three regimes to read together A marketplace’s liability in Turkey sits where three regimes meet: e-commerce Law 6563, consumer Law 6502, and the 5651 content regime.
- 11 July 2026 Platform regulation Marketplace ranking and algorithmic accountability: questions for the legal lead Ranking is now a legal surface under the DSA, DMA, P2B rules and Turkey’s e-commerce law. What an in-house legal lead should ask about it.
- 11 July 2026 Legal AI Legal AI: build, buy, or configure? Most legal teams should configure platforms, buy for commodity tasks, and build only the most sensitive work. A practitioner’s decision frame.
- 11 July 2026 Legal operations How to measure a legal automation pilot A pilot without metrics is a demo. Baseline the workflow, set error tolerances per task, and fix a kill-or-scale threshold before you start.
- 11 July 2026 AI governance AI governance for in-house legal teams: five minimum controls Five minimum controls an in-house legal team needs before scaling generative AI: data handling, accountability, human review, records, error handling.
- 11 July 2026 Data protection KVKK-compliant generative AI workflows for legal teams What KVKK expects when legal teams route personal data through generative AI: lawful basis, cross-border transfer mechanisms, minimisation, records.
- 11 July 2026 Legal operations An AI vendor due diligence checklist for legal teams Six questions a legal team should ask an AI vendor before signing: training data, prompt retention, subprocessors, IP indemnity, logging, and exit terms.
- 4 July 2026 Legal market The billable hour is running out of logic AI deflates the hour itself. Next generation firms price the work, not the time.
- 4 July 2026 Legal AI AI is quietly redrawing the legal industry Corporate legal use roughly doubled in a year; firm use rose by about half. The advantage is shifting from headcount to judgment and workflow design.
- 4 July 2026 AI governance What generative AI actually changes for in-house legal teams Where generative AI earns its place in legal work, and where careful human judgment still has to sit.
The workflows behind these notes are on the workflows page, and the method they run to is the operating standard.
If one of these is close to a question on your desk, get in touch.
New pieces are also published to the RSS feed.