Category: Regulation &amp; Compliance

Websites, payments, digital marketing, AI automation, consultancy and practical technology training — for businesses and aspiring professionals worldwide.

Monday – Friday: open 24 hours
Saturday – Sunday: closed

October 29, 2025

The $1.5bn AI Copyright Settlement: What It Means for Content Owners and AI Users

Our AI & data notice Ask Xuru AI

XURUTECHNOLOGIES

Blog · Trends · 5 min read

A $1.5bn settlement: where data comes from matters

After a court found that using pirated books was not protected, an AI company agreed to one of the largest copyright settlements on record. The message: lawful sourcing is non-negotiable.

By the Xuru Technologies team · 7 September 2025

Key takeaways

On 5 September 2025 Anthropic agreed to pay at least US$1.5 billion to settle a class action by authors, roughly US$3,000 per covered work, subject to court approval.
The case followed a June ruling that training on lawfully acquired books was fair use, but pirated copies were not.
Anthropic also agreed to destroy the pirated files.
Businesses should source training and content data lawfully and respect creators' rights.

The AI copyright story is no longer theoretical. Real money is changing hands, and the line between lawful and unlawful sourcing is becoming clearer.

What happened

AP via NHPR and JURIST reported the settlement, which covered around 500,000 works.

What it means for businesses

Using AI tools is not the same as training models. Most businesses use AI under provider terms, but should check those terms.
Fine-tuning on your own data should use content you own or are licensed to use.
Content creators gain leverage — licensing deals with AI companies are growing.
Don't publish copied content generated by AI; review for originality.

Good practice

Activity	Check
Choosing AI providers	Data sourcing commitments and indemnities in business terms
Training on documents	Use only content you own or license
Publishing AI-assisted content	Human review and originality checks
Your own content	Clear terms of use; crawler settings

Frequently asked questions

Can I still use Claude or other AI tools at work?

Yes. The settlement concerns how training data was obtained, not business use of AI tools under provider terms.

Do AI providers protect business users from copyright claims?

Several major providers offer some indemnities for paid business plans. Check the specific terms.

Is it final?

Settlements in class actions require court approval. This is not legal advice.

Responsible content

Original content, responsibly produced.

We use AI to speed up content and code while checking originality and respecting rights at every step.

Have a project in mind?

Let’s build
what’s next.

Websites, payments, digital marketing, AI automation, consultancy and practical technology training — for businesses and aspiring professionals worldwide.

Monday – Friday: open 24 hours
Saturday – Sunday: closed

September 7, 2025

Illinois Bans AI Therapy: Where the Line Sits for AI in Health and Wellness

Talk to our team Ask Xuru AI

XURUTECHNOLOGIES

Blog · Trends · 5 min read

Illinois bans AI therapy: where AI helps and where it stops

AI can book appointments and send reminders. It cannot be your client's therapist — at least not in Illinois. The new law draws a line many health businesses will recognise.

By the Xuru Technologies team · 10 August 2025

Key takeaways

In August 2025 Illinois enacted the Wellness and Oversight for Psychological Resources Act.
It prohibits using AI to provide therapy or make independent therapeutic decisions, with penalties for violations.
Licensed professionals may still use AI for administrative and supplementary support, within limits and with consent.
Health and wellness businesses everywhere should be clear about what their AI does and doesn't do.

Mental health is where the stakes of AI mistakes are highest. Expect more rules like this, and more scrutiny of wellness apps' claims.

What happened

Illinois's professional regulation department announced the law, and Taft summarised its scope and the permitted administrative uses.

What it means for health and wellness businesses

Admin AI is fine in many places: scheduling, reminders, billing and note support with consent.
Clinical claims need care. Don't present chatbots as therapists or clinicians.
Disclose AI use clearly on your website and in intake forms.
Escalation routes to humans and crisis resources are essential in any wellness chat.

Website checklist for wellness providers

Item	Detail
AI disclosure	What AI does (booking, reminders) and doesn't (therapy)
Consent	Clear consent for any AI-assisted note-taking
Crisis information	Visible links to emergency and crisis support
Practitioner details	Qualifications and licence information

Frequently asked questions

Can therapists use AI to write notes?

Under the Illinois law, licensed professionals can use AI for certain supplementary support with client consent, but not for therapeutic decisions. Check the rules where you practise.

Does this apply outside Illinois?

No, but similar debates are happening elsewhere, and professional bodies may issue their own guidance.

Can a wellness website have a chatbot?

Yes, for practical questions like booking and services, clearly labelled as AI and with routes to a person.

Wellness websites

Helpful automation, human care.

Websites for therapists and wellness providers with online booking, clear AI disclosures and secure intake.

Have a project in mind?

Let’s build
what’s next.

Websites, payments, digital marketing, AI automation, consultancy and practical technology training — for businesses and aspiring professionals worldwide.

Monday – Friday: open 24 hours
Saturday – Sunday: closed

August 10, 2025

EU AI Act Phase Two: General-Purpose AI Rules and What They Mean for AI Users

Websites for Europe Ask Xuru AI

XURUTECHNOLOGIES

Blog · Trends · 5 min read

EU AI Act, phase two: rules for the model makers

The latest obligations fall mainly on companies that build large AI models. For businesses that use them, they bring more transparency — and a few things to check.

By the Xuru Technologies team · 3 August 2025

Key takeaways

From 2 August 2025, providers of general-purpose AI (GPAI) models placed on the EU market must meet transparency, documentation and copyright-related obligations.
Models with systemic risk face additional duties such as evaluations and incident reporting.
The Commission published guidelines and a template for summarising training data; a voluntary code of practice supports compliance.
Businesses using these models benefit from better documentation and should still meet their own obligations.

If your business uses AI built by OpenAI, Anthropic, Google, Meta or Mistral, the makers of those models now have specific EU obligations.

What happened

Mayer Brown and Baker McKenzie summarised the obligations and the supporting guidance. Enforcement powers relating to GPAI providers follow from August 2026.

What it means for businesses using AI

More information from providers about capabilities, limitations and training data.
Your own duties remain: AI literacy, transparency to users and data protection.
Choose providers carefully. Check whether they commit to the EU code of practice.
Building on top of models? Significant modification can create provider obligations for you too.

What to check

Question	Where to look
Does our AI provider document its models?	Provider's model cards and policies
Is our use transparent to customers?	Website chatbot labels and notices
Have staff had AI training?	Your AI literacy records
Are we fine-tuning or modifying models?	Discuss obligations with your adviser

Frequently asked questions

Does a small business using ChatGPT have new obligations from August 2025?

The GPAI obligations fall on model providers. Users still have duties such as AI literacy and, for some uses, transparency. This is not legal advice.

What is the GPAI code of practice?

A voluntary code developed with industry and experts that helps GPAI providers show how they meet AI Act obligations.

When do high-risk AI rules apply?

Most high-risk obligations were scheduled for August 2026 and 2027, subject to any later changes.

Responsible AI

AI that's clear about what it is.

We build transparent, well-documented AI assistants and workflows for businesses serving EU customers.

Have a project in mind?

Let’s build
what’s next.

Websites, payments, digital marketing, AI automation, consultancy and practical technology training — for businesses and aspiring professionals worldwide.

Monday – Friday: open 24 hours
Saturday – Sunday: closed

August 3, 2025

America’s AI Action Plan: What It Means for Businesses Building and Buying AI

See AI & automation Ask Xuru AI

XURUTECHNOLOGIES

Blog · Trends · 6 min read

America's AI Action Plan: speed over rules

While the EU phases in its AI Act, the US has set out a plan focused on innovation, infrastructure and exports. Businesses selling on both sides of the Atlantic need to understand both.

By the Xuru Technologies team · 25 July 2025

Key takeaways

On 23 July 2025 the White House released "Winning the Race: America's AI Action Plan" with more than 90 policy actions.
Three executive orders addressed data centre permitting, AI exports and "unbiased" AI in federal procurement.
The approach emphasises deregulation and infrastructure rather than new broad AI rules.
US states, sector regulators and other countries' rules still apply.

For businesses, AI regulation is now a patchwork: light-touch federal policy in the US, state laws, and comprehensive rules in the EU.

What happened

Wiley summarised the plan's three pillars — accelerating innovation, building American AI infrastructure, and leading in international diplomacy and security — along with the accompanying executive orders.

What it means for businesses

Fewer federal hurdles for building AI products in the US.
Existing laws still apply: consumer protection, privacy, discrimination and sector rules.
Global sellers need two playbooks — EU AI Act obligations don't disappear for US companies selling in Europe.
Trust is a market advantage regardless of regulation: transparency and good data practice win customers.

A practical approach

If you sell in…	Focus
The US	Consumer protection, state privacy and AI laws, honest marketing claims
The EU	AI Act transparency, AI literacy, GDPR
Both	One high standard: label AI, protect data, keep humans accountable

Frequently asked questions

Does the US now have an AI law like the EU?

No. The Action Plan is a policy roadmap, not a comprehensive AI statute. Various state laws and existing federal laws still apply.

Do I need to follow the EU AI Act if I'm a US company?

If your AI systems or outputs are used in the EU, relevant obligations can apply. This is not legal advice.

What's the simplest compliance strategy?

Adopt good practice everywhere: disclose AI use, protect data, test for errors and keep people responsible for outcomes.

Responsible AI

AI features built for every market.

We build AI assistants and automation with transparency and data protection that work in the US, UK and EU.

Have a project in mind?

Let’s build
what’s next.

Websites, payments, digital marketing, AI automation, consultancy and practical technology training — for businesses and aspiring professionals worldwide.

Monday – Friday: open 24 hours
Saturday – Sunday: closed

July 25, 2025

The European Accessibility Act Now Applies: What Changes From 28 June 2025

Website accessibility Ask Xuru AI

XURUTECHNOLOGIES

Blog · Trends · 6 min read

The European Accessibility Act is live: what to do now

Accessibility is now a legal requirement for many digital services in the EU. If you're not fully ready, you're not alone — but the time to act is now.

By the Xuru Technologies team · 28 June 2025

Key takeaways

The European Accessibility Act applies from 28 June 2025 across EU member states.
Covered services include e-commerce, consumer banking, e-books, electronic communications and passenger transport booking.
Enforcement is by national authorities, with penalties set nationally.
Fix the key journeys first and publish an accessibility statement explaining your progress.

Around one in four adults in the EU has some form of disability, and many more benefit from accessible design. That's a big market to leave behind.

What is changing

Travers Smith summarised the new obligations as they took effect, including requirements for accessible websites and apps, information about how services meet accessibility requirements, and compliance procedures. The Directive sets the framework, with national laws applying it.

If you're not ready yet

Prioritise the money path. Product, basket, checkout, booking and account pages.
Fix the common failures: missing labels, poor contrast, keyboard traps, images without alt text.
Check third-party tools. Booking engines, chat widgets and payment pages must be accessible too.
Document and communicate. An honest accessibility statement and contact route show good faith.

First 30 days

Week	Action
1	Automated scan plus manual keyboard test of key journeys
2	Fix forms, buttons, headings and contrast
3	Screen reader test; fix or replace failing third-party widgets
4	Publish an accessibility statement; plan remaining fixes

Use our WCAG 2.2 AA checklist as a guide.

Frequently asked questions

Will authorities fine businesses immediately?

Enforcement approaches differ by country. Many expect authorities to prioritise complaints and serious failures, but you should act now rather than wait.

Do accessibility overlays make us compliant?

No. Overlays don't fix underlying code problems. Real fixes in your site are needed.

Does the EAA cover existing services?

Generally yes for services, with some transitional provisions for certain contracts and products. Check the rules in each country where you operate. This is not legal advice.

Accessibility

Accessible, compliant and open to everyone.

We audit and fix websites and booking flows against WCAG 2.2 AA, and help you publish an honest accessibility statement.

Have a project in mind?

Let’s build
what’s next.

Websites, payments, digital marketing, AI automation, consultancy and practical technology training — for businesses and aspiring professionals worldwide.

Monday – Friday: open 24 hours
Saturday – Sunday: closed

June 28, 2025

AI Training and Copyright: What the First Big Fair Use Ruling Means for Your Content

See SEO services Ask Xuru AI

XURUTECHNOLOGIES

Blog · Trends · 6 min read

AI training and copyright: the first big ruling

For the first time, a US court has weighed in on whether training AI on books is fair use. The answer was nuanced — and it matters to anyone who publishes content online.

By the Xuru Technologies team · 25 June 2025

Key takeaways

On 23 June 2025, in Bartz v. Anthropic, Judge William Alsup ruled that training on lawfully acquired books was fair use.
He found the use "transformative" but allowed claims over pirated copies held in a central library to proceed to trial.
It is one ruling in one court; other cases may reach different conclusions.
Businesses should decide how they want AI crawlers to treat their content and protect original work.

Every business that writes blog posts, guides or product descriptions is, in a sense, a publisher. How AI companies may use that content is now a live legal question.

What happened

As Akin and ArentFox Schiff explain, the court distinguished between using purchased and scanned books for training, which it found fair use, and downloading pirated copies, which it did not excuse.

What it means for businesses

Your public content may be used in AI training unless you take steps to limit crawlers, and even then rules are evolving.
Visibility vs control is a trade-off. Blocking AI search crawlers can remove you from AI answers.
Original, expert content keeps value. First-hand experience and data are hard for AI to replicate.
Use AI tools responsibly — don't publish AI output that copies others' work.

What to do now

Decision	How
Which AI crawlers to allow	Configure robots.txt for search vs training crawlers
Protect premium content	Keep it behind login or licence terms
State your terms	Add content-use terms to your website
Create original work	Publish your own data, cases and expertise

Frequently asked questions

Can I stop AI companies training on my website?

You can signal preferences with robots.txt for crawlers that respect it, and some providers offer opt-outs. It is not a complete guarantee.

Will blocking AI crawlers hurt my visibility?

Blocking crawlers used for AI search can reduce your presence in AI answers. Many sites allow search crawlers while limiting training crawlers.

Is this ruling final?

No. It's a district court decision in one case; appeals and other cases will shape the law further. This is not legal advice.

Content strategy

Visible to AI search, in control of your content.

We configure crawler access, structure your content and help you publish original work that earns trust.

Have a project in mind?

Let’s build
what’s next.

Websites, payments, digital marketing, AI automation, consultancy and practical technology training — for businesses and aspiring professionals worldwide.

Monday – Friday: open 24 hours
Saturday – Sunday: closed

June 25, 2025

EU Finds Shein Broke Consumer Law: Fake Discounts and Pressure Tactics to Avoid

Websites for Europe Ask Xuru AI

XURUTECHNOLOGIES

Blog · Trends · 6 min read

Fake discounts and false deadlines: what the Shein findings mean for every shop

Countdown timers, "was" prices that never were, pop-ups that won't let go. Regulators are calling these tactics what they are — and smaller retailers use them too.

By the Xuru Technologies team · 28 May 2025

Key takeaways

On 26 May 2025 the EU's Consumer Protection Cooperation Network and the European Commission said Shein's practices breached EU consumer law.
Issues included fake discounts, pressure selling with false deadlines, misleading information and unclear contact routes.
Shein was given a deadline to respond and commit to changes.
Honest pricing and calm design are both safer and better for long-term loyalty.

Many online shops borrow tactics from big marketplaces without thinking twice. Regulators now treat several of them as unlawful.

What happened

Euronews and The Register reported the findings, which also covered misleading product labels and sustainability claims. White & Case summarised the legal points for e-commerce businesses.

Tactics to avoid

Fake reference prices. Under EU rules, a "was" price should reflect the lowest price in the prior 30 days.
False urgency. Countdown timers that reset, or "only 2 left" when it isn't true.
Hidden contact details. Customers must be able to reach you easily.
Vague green claims. "Eco-friendly" without evidence invites scrutiny.

A better approach

Instead of…	Try
Fake countdowns	Real, dated sale periods
Inflated "was" prices	Honest savings based on recent prices
Aggressive pop-ups	One polite, easy-to-close offer
Vague eco claims	Specific, evidenced product facts

Frequently asked questions

Do these rules apply to small online shops?

Yes. EU consumer law applies to traders of all sizes selling to EU consumers. This is not legal advice.

Are countdown timers illegal?

Not if they're genuine. A timer showing the real end of a real offer is fine; one that resets or invents urgency is misleading.

How should I show discounts?

Base the reference price on the lowest price charged in the previous 30 days, as required for price reductions in the EU.

Honest e-commerce

Sell more without the tricks.

We design online stores with clear pricing, genuine offers and calm checkouts that build repeat business.

Have a project in mind?

Let’s build
what’s next.

Websites, payments, digital marketing, AI automation, consultancy and practical technology training — for businesses and aspiring professionals worldwide.

Monday – Friday: open 24 hours
Saturday – Sunday: closed

May 28, 2025

The UK Bans Fake Reviews: What the DMCC Act Means for Your Online Reputation

See how to automate review requests without breaking the rules.

XURUTECHNOLOGIES

Blog · Trends · 6 min read

The UK bans fake reviews: earn them, don't buy them

Reviews decide where people eat, stay and shop. From this week, faking or hiding them is explicitly unlawful in the UK, and the regulator can fine businesses directly.

By the Xuru Technologies team · 7 April 2025

Key takeaways

The consumer protection parts of the Digital Markets, Competition and Consumers Act 2024 came into force on 6 April 2025.
Commissioning or publishing fake reviews, and misleadingly presenting reviews, are banned practices.
The CMA can now impose fines of up to 10% of global turnover for consumer law breaches.
Drip pricing — adding unavoidable fees late in the buying process — is also targeted.

Online reviews are worth real money, which is exactly why some businesses have been tempted to fake them. That temptation now carries serious risk in the UK.

What happened

As CMS and Hill Dickinson explain, the DMCC Act adds new banned practices to UK consumer law, including fake reviews and concealed incentivised reviews, and gives the Competition and Markets Authority direct enforcement powers.

What it means for businesses

No buying, swapping or writing reviews for your own business, and no fake negative reviews of competitors.
Don't cherry-pick misleadingly. Showing only five-star reviews in a way that misleads customers is risky.
Incentives need care. Rewards for reviews must not be conditional on positive feedback and should be disclosed.
Platforms must act too, so expect more review removals and verification.

What to do now

Do	Don't
Ask every customer for an honest review after their visit	Ask only customers you think are happy, then present that as representative
Show a live feed or a fair selection of recent reviews	Edit or invent testimonials
Reply to negative reviews calmly and quickly	Offer rewards only for five-star reviews
Keep records of how reviews are collected	Use review-writing services

Frequently asked questions

Can I still use testimonials on my website?

Yes, if they are genuine, from real customers, not misleadingly edited and presented fairly.

Can I offer a discount for leaving a review?

Incentives must not depend on the review being positive and should be disclosed. Check current CMA guidance before running any incentive.

Does this apply to businesses outside the UK?

It applies to commercial practices affecting UK consumers, so overseas businesses selling to UK customers should follow it. This is not legal advice.

Reputation, done right

More genuine reviews, shown honestly.

We set up compliant review requests and display real reviews on your website where they help customers decide.

Websites for UK businesses Ask Xuru AI

Have a project in mind?

Let’s build
what’s next.

Websites, payments, digital marketing, AI automation, consultancy and practical technology training — for businesses and aspiring professionals worldwide.

Monday – Friday: open 24 hours
Saturday – Sunday: closed

April 7, 2025

23andMe’s Bankruptcy: Why Customer Data Is Your Most Sensitive Asset

Talk to our team Ask Xuru AI

XURUTECHNOLOGIES

Blog · Trends · 6 min read

23andMe's bankruptcy: your customers' data is your reputation

When a company holding millions of DNA profiles goes bankrupt, the question is no longer "is our data secure?" but "who will own it next?" Every business that collects personal data should be ready to answer.

By the Xuru Technologies team · 28 March 2025

Key takeaways

23andMe filed for Chapter 11 bankruptcy on 23 March 2025 and announced plans to sell its business.
Several US state attorneys general urged customers to consider deleting their data.
Personal data can change hands in a sale, which is why privacy policies and data minimisation matter.
Health and wellness businesses should collect less, keep it shorter and explain clearly what happens to it.

Most businesses do not hold genetic data. But clinics, gyms, therapists, salons and online shops all hold information customers would not want to see sold or leaked.

What happened

After years of losses and a 2023 data breach, 23andMe sought bankruptcy protection. Michigan's attorney general urged users to consider deleting their accounts, and Arizona's attorney general issued a consumer alert explaining how. Demand for deletions reportedly slowed the company's website.

What it means for businesses

Data is a liability as well as an asset. The more you hold, the more there is to protect — and to explain.
Customers read privacy policies when it matters. Vague wording about "business transfers" erodes trust.
Deletion must be easy. If customers struggle to delete their data, regulators and reviews notice.
Health data has extra rules in the UK, EU, US states and India.

What to do now

Step	Example
Collect only what you need	Drop "date of birth" from forms that don't need it
Set retention periods	Delete enquiry data after an agreed time
Offer self-service deletion	A clear "delete my account" route
Rewrite your privacy notice in plain English	What you collect, why, who sees it, how long you keep it

Frequently asked questions

Can customer data be sold if a company is acquired?

Often, yes, subject to privacy law and the company's own policy. That is why clear policies and minimal data collection matter.

Does a small clinic need a privacy notice?

Yes. Any business collecting personal data online should explain what it collects and why, in line with local law.

How long should we keep enquiry form data?

Only as long as needed for the purpose. Many businesses set a fixed period, such as 12 to 24 months for unconverted enquiries.

Privacy-first websites

Forms that collect less and earn more trust.

We build privacy-first websites with clear notices, consent and data retention built in from day one.

Have a project in mind?

Let’s build
what’s next.