The UK Insolvency Service recently issued guidance on artificial intelligence tools in corporate insolvency proceedings. This new guidance clarifies the legal and regulatory framework for AI deployment in sensitive areas like asset tracing and claims management. It immediately affects insolvency practitioners' legaltech use, standardising compliance expectations for data handling and decisions. The update provides certainty, limiting ambiguities around professional responsibilities when using advanced technologies.

Full News Breakdown

The growing use of AI in insolvency practice, particularly for complex tasks like asset tracing, raised concerns over data privacy, accuracy, and practitioner oversight. The core disagreement centered on how existing insolvency and data protection frameworks applied to autonomous or semi-autonomous AI functions. The Insolvency Service responded with detailed guidance, addressing these ambiguities and establishing clear compliance paths.

• Court / Authority: UK Insolvency Service

• Date: 22 April 2024

• EU Instruments: General Data Protection Regulation (Regulation (EU) 2016/679)

• UK Legislation Cited: Data Protection Act 2018, Insolvency Act 1986

• Key Provisions: GDPR Articles 5 (principles relating to processing of personal data) and 22 (automated individual decision-making), alongside the Data Protection Act 2018 and Insolvency Act 1986 provisions on liquidators' duties and asset realisation.

• Primary Legal Issue: Regulatory compliance for AI use in corporate insolvency, specifically concerning data processing, automated decision-making, and professional liability for insolvency practitioners.

• Applicant Arguments: Insolvency practitioners argued for clear, pragmatic guidelines that foster innovation, ensure legal certainty, and mitigate liability risks. Legaltech providers highlighted efficiency gains and potential for more thorough AI-driven investigations.

• Respondent Arguments: Privacy advocates and consumer groups raised concerns about data security, algorithmic bias, and potential for reduced human oversight affecting fairness for creditors and debtors.

• Court Reasoning / Regulatory Rationale: The Insolvency Service balanced the need for technological advancement in insolvency against the imperative to uphold data protection principles, maintaining the integrity and fairness of proceedings. The guidance emphasizes human oversight remains paramount, practitioner accountability for AI outputs, and essential robust data protection impact assessments.

• Holding / Guidance Summary: The guidance mandates specific due diligence for AI tool selection, requires transparent disclosure of AI use to stakeholders, and clarifies ultimate responsibility for AI-driven actions rests with the insolvency practitioner. It provides frameworks for data minimisation, accuracy, and security when deploying AI for tasks like asset tracing.

• Operative Order / Key Directives: Compliance with the GDPR and the Data Protection Act 2018 is paramount. Insolvency practitioners conduct thorough risk assessments, ensure human review of critical AI-generated outputs, and maintain clear audit trails of AI usage.

• Practical Outcome: Insolvency practitioners gained clarity on AI deployment, necessitating reviews of current legaltech usage and internal policies to ensure compliance.

How Does This Affect You?

Before this guidance, insolvency practitioners faced significant uncertainty regarding the lawful and responsible application of AI tools in their practice, particularly concerning data protection and professional accountability. The Insolvency Service has now specifically resolved these ambiguities, providing a definitive framework for compliant AI deployment in areas like asset tracing. This shift means practitioners review and adapt their legaltech strategies and internal processes to align with new regulatory expectations, creating distinct considerations for lawyers, students, and businesses.

For Lawyers & Advocates

• Compliance Audits for Insolvency Practitioners: Lawyers advising insolvency practitioners may wish to conduct urgent audits of their clients' AI tool usage for asset tracing and claims management, reviewing alignment with the UK Insolvency Service's new guidance and the requirements of the General Data Protection Regulation and the Data Protection Act 2018. This matters operationally for mitigating enforcement risks under both insolvency and data protection regimes.

• Contractual Review for Legaltech Solutions: In-house counsel and external advisors may want to review and potentially renegotiate contracts with legaltech providers. New terms may consider explicitly addressing data processing responsibilities, auditability of AI outputs, and indemnity clauses related to taking into account the guidance, affecting due diligence for procurement of new solutions.

• Enhanced Due Diligence in Precedent Use: When preparing applications or reports, advocates may wish to review that any facts or analyses derived from AI tools take into account the guidance's transparency and verification requirements. This affects the evidentiary weight and potential challenges to AI-generated information in court proceedings or creditor meetings, particularly concerning the Insolvency Act 1986.

• Risk Assessment and Liability Planning: Firms may want to develop detailed risk assessment matrices for AI adoption in insolvency, addressing potential algorithmic bias, data breaches, and human oversight failures. This impacts professional indemnity insurance requirements and internal governance frameworks for practitioners, reducing potential legal considerations for professional negligence claims.

• Training and Policy Updates: Legal departments may wish to develop and implement comprehensive training programs for insolvency teams on the responsible and compliant use of AI tools, updating internal policies and procedures to reflect the Insolvency Service's expectations on accountability and ethical deployment.

For Law Students

The decision provides an opportunity to examine how regulatory bodies exercise their power under EU and UK law to interpret and apply existing statutory frameworks to novel technological advancements. The core legal doctrine students may consider focusing on is the balance between regulatory flexibility in addressing new technologies and the imperative to uphold fundamental rights and existing professional duties through guidance rather than primary legislation.

The decision is particularly relevant for the study of:

• UK Insolvency Law

• Data Protection Law

• Administrative Law

• Legal Technology and Ethics

The comparison with R (on the application of Friends of the Earth) v Heathrow Airport Ltd [2020] UKSC 52 on judicial review of administrative decisions highlights the extent of regulatory bodies' duties in considering wider impacts when issuing guidance. Additionally, juxtaposing this with Google Spain SL v Agencia Española de Protección de Protección de Datos (AEPD) [2014] EUECJ C-131/12 on the territorial scope and fundamental principles of data protection illuminates the enduring challenge of integrating data protection principles into new technological domains.

For Businesses

• Insolvency Practitioners & Accountancy Firms: These firms may want to audit their legaltech stack and internal processes for using AI in insolvency work, particularly for asset tracing and claims management. Inaction could lead to potential implications from the UK Insolvency Service, reputational damage, and potential legal considerations for breaches of data protection or professional duties.

• Legaltech Developers & AI Providers: Companies developing and supplying AI solutions for the legal and insolvency sectors may wish to review their products and services facilitate taking into account the new guidance. Non-compliance could result in their products being deemed unsuitable for the UK market, leading to a loss of contracts and market share.

• Companies Undergoing Restructuring/Insolvency: Boards and General Counsel of distressed companies may consider asking their appointed insolvency practitioners about the specific AI tools being used, how data is processed, and what human oversight is in place. Failure to understand these processes could affect the integrity of the insolvency proceedings or data protection rights.

• Financial Services Firms (Creditors/Lenders): These firms rely on accurate and compliant insolvency processes for debt recovery. Boards may consider assessing whether their chosen insolvency practitioners adhere to the new AI guidance to review the integrity of asset tracing and claims processing, which could affect recovery rates and legal standing.

Key Takeaways

• The legal principle established: Regulatory bodies can issue detailed guidance to interpret and apply existing legal frameworks to new technologies, establishing clear compliance standards for AI use in specific professional contexts.

• The practice consequence: Insolvency practitioners must implement robust governance and oversight frameworks for AI tools, ensuring human accountability and strict adherence to data protection principles.

• The enforcement consequence: The UK Insolvency Service can now enforce compliance with its guidance, potentially leading to professional disciplinary actions or fines under data protection laws for non-compliant use of AI in insolvency proceedings.

• What to watch next: Upcoming amendments to the UK Insolvency Act 1986 or new EU legislative initiatives (e.g., EU AI Act implementation guidance) that might further integrate or regulate AI in legal and financial services, building on sector-specific regulatory interpretations.

• A named audience and a named action they should take before a specific trigger event: Legal departments may consider initiating an immediate review of their firm's AI usage policies and client engagement agreements before undertaking new insolvency mandates involving AI-driven tasks.

Source: Troutman Hires New Partner of Bankruptcy, Restructuring Practice Group in Boston