Skip to content
23 May 2026

AI regulation and outsourcing: what lawyers and sourcing leaders need to know

Discover legal and commercial developments around AI, cross‑border work, and IP in modern outsourcing

AI regulation and outsourcing: what lawyers and sourcing leaders need to know

The rise of artificial intelligence is reshaping corporate strategy and driving investment in supporting systems. Economists highlight the potential for significant technology spending tied to AI adoption, but realizing that growth depends on robust infrastructure, secure data flows, and clear contractual models. Companies must now align commercial planning with legal, regulatory, and operational frameworks that govern the use, development, and transfer of advanced technologies.

Against this backdrop, recent jurisdictional moves and industry gatherings demonstrate how policy, market dynamics, and contracting practice are converging. From legislative actions in California to regulatory drafts in China, stakeholders are adapting to new obligations while industry groups and law firms host forums to translate legal trends into commercial practice. These developments influence hiring, outsourcing, and the allocation of intellectual property rights across complex technology ecosystems.

Regulatory shifts that matter

Regulators around the world are paying close attention to AI and related services, and several concrete examples show momentum. In California, Governor Gavin Newsom vetoed SB 1047 while approving AB 2013 on September 29, 2026, signaling selective legislative intervention focused on transparency for certain models. Meanwhile, Chinese authorities published a consultation on the Draft Measures for the Administration of National Network Identity Authentication Public Services on July 26, 2026, an initiative aimed at defining rules for network identity services. Together, these actions illustrate how different regulators are prioritizing disclosure, accountability, and system integrity.

Implications for contracts and compliance

For practitioners drafting and negotiating agreements, these policy shifts translate into practical contract terms: transparency clauses, audit rights, and security obligations are becoming standard negotiation points. Contracts must also address cross‑border data flows, model explainability, and vendor obligations around data privacy and cybersecurity. Parties should consider including tailored performance metrics and remediation paths to reflect evolving regulatory expectations and to limit commercial and compliance risk.

Employment, mobility, and operational concerns in Asia

Competition for technology talent in the Asia region is driving employers to offer remote and flexible work options as a differentiator. While these arrangements help attract and retain skilled workers, they create a web of legal and operational consequences. Employers must analyze immigration rules, payroll and tax obligations, local employment law, and the impact on benefits and social security. In addition, enabling remote access raises questions about cross‑border data privacy and information security, requiring updated policies and contractual protections for both employees and third‑party suppliers.

Practical steps for employers

Organizations adopting hybrid or remote models should map employee locations, assess tax nexus and compliance, and implement technical safeguards such as encryption and least‑privilege access. Drafting clear internal policies and updated employment agreements will help manage compliance exposure. When engaging external providers, incorporate provisions that address data residency, incident response timelines, and vendor security certifications to maintain regulatory alignment and operational resilience.

Events, industry dialogue, and sectoral focus

Industry gatherings continue to play a central role in interpreting these trends for market participants. Morgan Lewis will host a Space and Satellite Night in Houston on September 26, featuring a panel on space commercialization followed by networking. Separately, the firm’s partners Christopher C. Archer, Anastasia Dergacheva, and J. Daniel Skees, together with associate Arjun Prasad Ramadevanahalli, will present on cybersecurity and digital transformation for the energy sector on November 29. Such events provide forums where counsel, company executives, and vendors compare practical approaches to regulatory compliance and commercial contracting.

Next‑gen BPO and the centrality of IP

The evolution of outsourcing toward next‑gen business process outsourcing centers on automation, analytics, and enriched customer experiences. Key elements include the deployment of bots, performance tools, and platforms that capture actionable data. This transformation generates new forms of value and raises complex questions about intellectual property: who owns the data, who controls enhancements to automation workflows, and how rights to algorithms or training datasets are allocated. Addressing these issues early in procurement and contract negotiations is essential to preserve competitive advantage and avoid future disputes.

To manage these concerns, contracting teams should clearly define ownership, licensing, and permitted uses of outputs and underlying technology; establish governance for jointly created IP; and set terms for migration and transition services. Including robust definitions, usage limits, and change‑management mechanisms helps align commercial incentives and protect long‑term operational continuity. As AI and outsourcing strategies mature, careful contract drafting will remain a cornerstone for balancing innovation with legal certainty.

Author

Andrea Conforti

Andrea Conforti, a 46-year-old from Turin with a casual, natural look, is a tactical analyst who turns data and clips into social narratives. He remembers noting the comeback at the press box of the Stadio Olimpico Grande Torino: that note originated his editorial approach, which advocates visual explanations for the critical supporter. A unique detail: one season as under-15 coach at Chieri and urban cyclist.