The Third Circuit's Thomson Reuters v. ROSS ruling: five lessons for in-house teams on AI vendor data, indemnities, and protecting playbooks.

The first federal appeals court ruling on fair use and AI training landed on September 30. It isn't about chatbots, image generators, or a frontier lab. It's about Westlaw headnotes.
LawSites reported that the Third Circuit ruled for Thomson Reuters in its long-running copyright case against ROSS Intelligence, the now-shuttered legal research startup. IPWatchdog reported the same day that the court affirmed the District of Delaware's rulings that ROSS infringed copyrights in more than 2,000 Westlaw headnotes and that its fair use defense failed. One detail matters a lot here: the opinion was still sealed pending redactions when those reports came out. Much of what we know comes from the parties and early coverage, not the full text.
On October 2, LawSites reported that ROSS plans to ask the Supreme Court to review the ruling. The fight isn't over. But in-house teams don't have to wait for a cert petition to learn something useful.
You might say you don't train AI models and you don't sell legal research. That's fair. But your department now buys AI, feeds it your documents, and increasingly builds small tools on top of it. All three put you near the questions this case raised. MLex reported that the court treated the case largely as an ordinary copyright dispute about one competitor copying another to build a substitute product. That framing may keep the ruling narrow. A narrow ruling still gives you a useful checklist.
"Proprietary" isn't an answer. If a vendor's model or retrieval layer was built on licensed content, they should say so. If it was built on scraped or "publicly available" material, you want to know that before procurement signs. Put a data-provenance question in every AI vendor questionnaire. You can find tools to compare in the generative AI legal assistants directory.
Many AI contracts include an IP indemnity that sounds generous and turns out to have a lot of exceptions. Check whether it covers claims about the model's training data, not just the outputs. Check whether it's capped at fees paid. Check whether "modifications" or "customer prompts" void it. A ruling like this one is a good reason to send the indemnity section back for another pass.
Your clause library, negotiation playbooks, and annotated precedents are carefully edited work product. That's the kind of material at the center of this case. Make sure every vendor agreement says plainly whether your data can be used to train or improve models other customers use. "We may use aggregated, de-identified data to improve our services" should prompt a follow-up question, not a nod. The contract lifecycle management and drafting and clause management categories are good places to compare how vendors handle this.
Legal ops teams are wiring up workflows and copying third-party content into knowledge bases faster than ever. That's mostly great. But "we pasted a research service's summaries into our internal bot" is exactly the kind of fact pattern you don't want discovered later. Licensed content usually comes with license terms. Read them before anyone builds on top of them.
Coverage has repeatedly stressed that ROSS was a non-generative system, that the copying happened before generative AI, and that ROSS was building a direct competitor to Westlaw. Those facts may limit how far the ruling reaches into the generative AI cases. Don't rewrite your AI policy on the strength of one sealed opinion. Do flag it for your next AI governance update.
The first appellate AI training ruling ended up being about headnotes, not chatbots. Your vendor contracts should still assume a bigger ruling is coming.
This article is general information, not legal advice.