A technology company deploys a generative AI tool to produce marketing copy, product designs, and software modules. The outputs are commercially valuable. The company files for protection in Cyprus – and then discovers that intellectual property legislation was not drafted with machine-generated content in mind. Who owns the work? Who bears liability if the output infringes a third party's rights? These questions are not yet settled in Cyprus, and the cost of getting the answer wrong is measured in lost competitive position, voided licensing deals, and unenforceable rights.
AI-generated works occupy an unresolved space in Cypriot intellectual property law. Copyright, patent, and design protection in Cyprus all require a human author or inventor as the rights-holder, leaving outputs produced predominantly by automated systems in a legal grey zone. International businesses operating in or through Cyprus must address ownership, licensing, and liability questions through contract and policy before disputes arise.
This analysis examines the doctrinal foundations, competing interpretations under Cypriot and EU law, the practical gap between statute and practice, cross-border implications for European clients, and strategic recommendations for businesses that rely on AI-generated content.
Doctrinal foundations: what Cypriot IP law was built to protect
Cyprus inherits a mixed legal tradition. Its intellectual property legislation draws heavily on English common law models, supplemented by EU harmonisation directives transposed into Cypriot law. This dual influence shapes how courts and practitioners approach novel questions – including those raised by AI.
Under Cypriot copyright legislation, protection attaches to original works of authorship. Originality has consistently been understood to require a human creative act. The relevant body of law does not define "author" to include software or automated systems. Courts in Cyprus, applying EU harmonisation principles, follow the position established at the European level: a work qualifies for protection when it reflects the author's own intellectual creation. That standard presupposes a person capable of making creative choices.
Patent law in Cyprus similarly demands a human inventor. An application that names only an AI system as the source of an invention will not satisfy the formal requirements of the intellectual property registration system administered by the Τμήμα Εφόρου Εταιρειών και Διανοητικής Ιδιοκτησίας (Cyprus Registrar of Companies and Intellectual Property). This position mirrors decisions reached in multiple EU jurisdictions, where patent offices have refused applications listing AI as the sole inventor.
Registered design protection follows the same logic. Designs must originate with a human designer. Where a human uses an AI tool as an instrument – directing its outputs through detailed prompts, selection, and editing – the human's contribution may satisfy the originality threshold. Where the AI operates with minimal human direction and generates outputs autonomously, that threshold becomes contested.
The practical consequence is immediate. Businesses that assume AI-generated works are automatically protected risk investing in content, code, or designs that fall into the public domain the moment they are created. Competitors could reproduce those works freely. Licensing the works to third parties becomes legally uncertain. And the investment in AI-driven production yields no proprietary advantage.
Competing interpretations and the gap between statute and practice
Three interpretive positions exist in academic and practitioner discourse across EU member states, and Cyprus is not immune to this debate.
The first position holds that AI outputs receive no intellectual property protection unless a qualifying human creative act can be identified. The output belongs to no one. It enters the public domain immediately. Practitioners who favour this view point to the text of copyright legislation: protection is for authors, and authors are persons. No amount of judicial creativity can insert a machine into that category.
The second position attributes ownership to the person who made the creative choices upstream. the developer who trained the model, the business that designed the prompting system, or the individual who directed the generation process. This approach imports a chain-of-causation analysis. If human creative decisions sufficiently shaped the output, protection may attach. Courts in several EU jurisdictions have begun to explore this reasoning, though clear precedent remains limited.
The third position, most contested among legal specialists, argues that for AI systems operating under close human supervision. The output should be treated analogously to a work produced by an employee or contractor. with ownership vesting in the deploying business. This relies on the employer-creation provisions present in most EU copyright legislation. The analogy is imperfect. Employment and contractor doctrines presuppose a human worker. Extending them to AI requires statutory amendment, not judicial interpretation.
Cypriot courts have not yet issued definitive rulings on AI-generated works. The Ανώτατο Δικαστήριο Κύπρου (Supreme Court of Cyprus) and the lower civil courts are likely to follow EU-level guidance when cases eventually arrive. In the interim, practitioners in Cyprus note that the absence of local precedent creates both risk and opportunity. Risk, because rights are uncertain. Opportunity, because well-drafted contractual arrangements can define ownership before any dispute crystallises.
The gap between statute and practice is particularly visible in the digital services sector. Technology companies operating through Cyprus as a base for EU market entry often license AI-generated software, training datasets, and content libraries across borders. A technology licensing agreement that fails to specify who owns AI-generated deliverables is an agreement waiting to generate a dispute. In practice, many such agreements are drafted without reference to AI authorship questions at all. an oversight that surfaces only when a licensee seeks to enforce exclusivity or a licensor attempts to sub-license the same output to a competitor.
Software liability raises a related but distinct question. Under Cypriot law and the EU product liability regime, liability for defective digital products is in a period of active legislative development. Where AI-generated software causes harm – through faulty code, biased outputs, or inaccurate advice – questions of algorithmic accountability intersect with intellectual property ownership. The entity that holds the IP rights is not necessarily the entity that bears liability. Separating these questions requires careful structuring at the outset.
To receive an expert assessment of AI-generated IP ownership arrangements in Cyprus, contact us at info@ferrazwhitmore.com.
The EU dimension: AI Act compliance, harmonisation, and what remains national
The EU AI Act introduces a risk-based regulatory system for AI systems placed on the market or put into service in the EU. Cyprus, as a member state, will apply the AI Act directly. Its provisions on algorithmic accountability, transparency obligations, and conformity assessments are directly relevant to businesses deploying AI tools in Cyprus.
AI Act compliance does not, however, resolve intellectual property ownership questions. The AI Act is a product safety and fundamental rights instrument. It regulates how AI systems are designed, documented, and supervised. It does not amend copyright, patent, or design legislation. The two regimes operate in parallel.
This distinction matters practically. A business that achieves full AI Act compliance – registering its high-risk system, maintaining technical documentation, implementing human oversight mechanisms – has not thereby acquired intellectual property rights over its AI outputs. It has satisfied a regulatory obligation. The IP question remains open and must be addressed through the relevant intellectual property legislation and through contract.
EU-level discussions on amending copyright legislation to address AI-generated works are ongoing. The European Parliament and the Commission have both identified the authorship gap as requiring attention. Several member states have begun domestic consultations. Cyprus, as a small jurisdiction with a sophisticated financial and technology services sector, has a direct interest in how these questions are resolved. Businesses establishing IP holding structures in Cyprus – a common strategy given the jurisdiction's tax treaty network and EU membership – need certainty about what rights those structures actually hold.
The interaction between the AI Act's transparency requirements and intellectual property protection is also emerging as a tension point. AI Act compliance may require disclosing information about training data, model architecture, and output generation processes. That disclosure could, in some circumstances, undermine trade secret protection for proprietary AI systems. The intersection of technology licensing arrangements, trade secret law, and AI Act obligations is an area where legal advice specific to Cyprus is essential.
For clients with cross-border exposure, the analysis of AI-generated works and intellectual property questions in Portugal offers a useful comparative perspective from another EU civil law jurisdiction facing identical doctrinal challenges.
Clients using Cyprus as a holding jurisdiction for EU technology assets should also review the full scope of AI and technology law advisory services in Cyprus to understand how regulatory and IP considerations interact in practice.
Strategic recommendations for international businesses
Given the unsettled state of Cypriot and EU law on AI-generated works, a reactive approach – waiting for courts or legislators to resolve the question – carries meaningful commercial risk. Businesses that generate significant value from AI outputs need a proactive strategy now.
The first priority is ownership mapping. Every AI-generated asset should be categorised: what human creative input was involved, who directed the generation process, and what contractual arrangements govern the relationship between the deploying business and the AI developer. Where the human creative contribution is substantial and documentable, copyright claims are stronger. Where AI operated autonomously, the business should assess whether the output is commercially sensitive enough to warrant trade secret protection instead.
Trade secret protection is available under Cypriot law and the EU trade secrets directive. It does not require registration. It protects information that has commercial value, is kept confidential, and is subject to reasonable steps to maintain that confidentiality. For AI outputs that cannot qualify for copyright or patent protection, trade secret law may offer the most immediately available protection – provided the business implements appropriate confidentiality measures from the moment of generation.
The second priority is contractual precision. Technology licensing agreements, employment contracts. Additionally, service agreements with AI developers should all address three questions explicitly: who owns the AI-generated output. Who bears liability for third-party IP infringement caused by that output. Additionally, what obligations arise under AI Act compliance regimes. Boilerplate agreements drafted before generative AI became commercially significant will not answer these questions adequately.
The third priority is monitoring the legislative trajectory. EU-level copyright reform discussions are likely to produce amendments within the next several years. Cyprus will transpose those amendments. Businesses that have structured their IP holdings in Cyprus should model how proposed legislative changes – including potential recognition of AI-assisted authorship or new neighbouring rights for AI outputs – would affect their existing arrangements.
The self-assessment checklist below identifies the conditions under which a Cyprus-based AI IP strategy is most defensible and the steps that should precede any enforcement or licensing action.
A Cyprus-based IP strategy for AI-generated works is most defensible when:
- Human creative choices – prompting, selection, editing – are documented for each category of output.
- Technology licensing agreements explicitly assign ownership and allocate infringement liability.
- Trade secret protocols are in place for outputs that cannot qualify for registered protection.
- AI Act compliance documentation is maintained separately from IP ownership records.
- The business has assessed whether its AI system constitutes a high-risk system under the AI Act.
Before initiating enforcement or licensing action in Cyprus. Verify that: the claimed work can be linked to a specific human creative act. no prior art or pre-existing copyright in the training data creates a third-party claim. the technology licensing agreement governing the AI tool does not vest output ownership in the tool's developer. and digital services terms with end users are consistent with the ownership position being asserted.
For a tailored strategy on AI-generated intellectual property protection in Cyprus, reach out to info@ferrazwhitmore.com.
Outlook: where this area of law is heading
The legal treatment of AI-generated works in Cyprus will not remain static. Several developments are likely to shape the position over the next three to five years.
At the EU level, legislative reform of copyright law to address AI authorship is a live policy debate. The most probable outcome is not full AI authorship – that would require a fundamental reconceptualisation of what intellectual property law protects. More likely is a neighbouring rights model: a separate, shorter-term protection for AI-generated outputs, vesting in the human or business that deployed the system. This would resolve the current gap without disturbing the authorship doctrine that underpins all existing copyright frameworks.
Cypriot courts will eventually be called upon to rule on these questions. When they do, the common law heritage of Cypriot IP legislation means that practitioners will look both to EU Court of Justice guidance and to decisions from English courts. The English courts have addressed computer-generated works through a specific statutory provision that does not exist in Cypriot law – creating a doctrinal gap that Cypriot legislators may need to fill explicitly.
Algorithmic accountability obligations under the AI Act will generate new documentation practices. Those practices will, in turn, create evidentiary records that courts can use when assessing whether a human creative act occurred in the generation process. A business that maintains detailed records of its prompt engineering, output selection, and human review processes is better positioned to assert IP rights than one that treats AI generation as a black box.
The intersection of digital services regulation and intellectual property will also develop. Obligations on digital services platforms to address infringing AI-generated content are already present in EU law. How Cyprus implements and enforces those obligations will affect the practical value of IP rights asserted by businesses operating through the jurisdiction.
Businesses that invest now in clear contractual structures, documented human creative processes. Additionally, AI Act compliance programmes will be better positioned to claim. Licence. Additionally, enforce IP rights as the law develops. rather than finding themselves locked out of protection by decisions made before the legal questions were fully understood.
For Cypriot and international clients seeking comprehensive protection for their IP portfolios, including works with AI involvement, our analysis of intellectual property law in Cyprus provides the broader doctrinal context within which AI-specific questions sit.
Frequently asked questions
Q: Can an AI system be named as an author or inventor under Cypriot intellectual property law?
A: No. Cypriot intellectual property legislation, aligned with EU directives, requires a natural person as the author or inventor. An AI system cannot hold rights. Ownership typically falls to the human developer or the business that deployed the AI tool, depending on contractual arrangements and the degree of human creative input.
Q: How long does it take to register a copyright or patent for a work involving AI in Cyprus?
A: Copyright protection in Cyprus arises automatically upon creation and requires no registration. Patent applications before the Cyprus Registrar of Companies and Official Receiver typically take between eighteen months and three years to process. Depending on the complexity of the technical claims and whether prior art objections are raised.
Q: Is it a misconception that AI Act compliance in the EU also resolves IP ownership questions for AI outputs in Cyprus?
A: Yes, this is a widespread misconception. AI Act compliance addresses risk classification, transparency, and algorithmic accountability obligations – it does not determine who owns the output a model produces. IP ownership questions remain governed by national intellectual property legislation and, where relevant, by contractual arrangements with technology licensing partners.
About Ferraz & Whitmore
Ferraz & Whitmore is an international law firm based in Lisbon, advising business clients across 46 jurisdictions. Our team combines Portuguese civil law expertise with English common law tradition to deliver cross-border legal solutions in AI and technology law, intellectual property protection, and digital services regulation. In Cyprus, we advise technology companies, IP holding structures, and international investors on AI Act compliance, software liability, technology licensing, and the full spectrum of intellectual property questions arising from AI-generated works. Our AI and technology law practice covers jurisdictions across Europe, the Americas, and Asia, supported by practitioners with experience before international arbitral bodies and EU regulatory forums. As an international law firm advising clients in Cyprus and across Europe, Ferraz & Whitmore brings the analytical depth that AI and IP questions at the frontier of law demand. To discuss how emerging Cypriot and EU intellectual property rules apply to your AI-generated assets, contact us at info@ferrazwhitmore.com.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.