LIFTING THE AI VEIL IN COMPANY LAW
In September 2024, the United Nations published a report titled “Governing AI for Humanity,” which addressed the international governance of artificial intelligence. In March 2024, the European Union adopted the Artificial Intelligence Act, which establishes uniform legal rules governing the use of artificial intelligence systems. Governments and companies throughout the world are continuously adopting strategies, laws, and guidelines, resulting in a disparate array of global approaches to AI. Amid this global regulatory diversity, the role of AI in company law raises pressing questions about its governance within corporate structures. This article will give an overview of international and EU standards regarding liability issues that arise through the use of artificial intelligence in company law with the aim of identifying potential opportunities and challenges that could be anticipated in Bosnia and Herzegovina. Are robot-directors and AI board members the future of modern companies? If so, how should their liability be treated? This paper analyses several possibilities for AI liability adding to the discussion of a two-fold problem that will emerge in company law: who is liable if AI is used as a tool to help management and board members in decision making, and second, can AI participate in decision-making without human intervention. This paper argues that AI liability should be approached through an extension of traditional addressees of liability’ under the existing doctrines such as duty of care for directors’ liability, and the piercing of the veil doctrine for shareholder liability. It establishes suggestions regarding which situations the veil of the corporate entity should be lifted and when shareholders’ liability should be extended. It suggests that the focus on AI should be on whether the human actors in the company acted reasonably and with the duty of care in using the technology.
Keywords: EU AI Act, robo-directors, legal personality of AI, AI Liability Directive, Product Liability Directive.
Almada, M. 2025. The EU AI Act in a Global Perspective. In: Furendal, M. & Lundgren, M. (eds.), Handbook on the Global Governance of AI. Edward Elgar – forthcoming. Available at: https://papers.ssrn.com/sol3/papers.cfm?abstract_id=5083993 (22. 5. 2025). https://doi.org/10.2139/ssrn.5083993
Bainbridge, S. M. 2017. Corporate directors in the United Kingdom. William & Mary Law Review, 59(3), pp. 67-83.
Blackstone, W. 1809. Rights of persons (Vol. 1). London: A. Strahan.
Bradford, A. 2020. The Brussels Effect: How the European Union Rules the World. Oxford: Oxford University Press. https://doi.org/10.1093/oso/9780190088583.001.0001
Bryson, J. J. et al. 2017. Of, for, and by the people: the legal lacuna of synthetic persons. Artificial Intelligence and Law, 25(3), pp. 273-291. https://doi.org/10.1007/s10506-017-9214-9
Cheong, B. C. 2021. Granting legal personhood to artificial intelligence systems and traditional veil-piercing concepts to impose liability. SN Social Sciences, 1(9), 231, pp. 1-20. https://doi.org/10.1007/s43545-021-00236-0
Code, C. 1992. The financial aspects of corporate governance. London: The Committee on the Financial Aspects of Corporate Governance and Gee and Co. Ltd.
Davenport, T. H. & Ronanki, R. 2018. Artificial intelligence for the real world. Harvard business review, 96(1), pp. 108-116.
Davis, J. P. 2018. Law without mind: AI, ethics, and jurisprudence. California Western Law Review, 55(1), pp. 165-219. https://doi.org/10.2139/ssrn.3187513
Dewey, J. 1925. The historic background of corporate legal personality. Yale Law Journal, 35, pp. 655-673. https://doi.org/10.2307/788782
Eager, J. et al. 2020. Opportunities of artificial intelligence. European Parliament.
Eidenmüller, H. 2019. Machine Performance and Human Failure: How Shall We Regulate Autonomous Machines? Journal of Business and Technology Law, 15(1), pp. 109-134. https://doi.org/10.2139/ssrn.3414602
Fenwick, M., McCahery, J. A. & Vermeulen, E. P. 2019. The end of ‘corporate’governance: Hello ‘platform’ governance. European Business Organization Law Review, 20, pp. 171-199. https://doi.org/10.1007/s40804-019-00137-z
Fenwick, M. & Vermeulen, E. P. 2019. Technology and corporate governance: Blockchain, crypto, and artificial intelligence. Texas Journal of Business Law, 48(1), pp. 1-22 .
Foss, N. J. & Saebi, T. (eds.). 2015. Business model innovation: The organizational dimension. Oxford: Oxford University Press. https://doi.org/10.1093/acprof:oso/9780198701873.001.0001
Georganta, E. & Ulfert, A. S. 2024. Would you trust an AI team member? Team trust in human–AI teams. Journal of Occupational and Organizational Psychology, 97(3), pp. 1212-1241. https://doi.org/10.1111/joop.12504
Gerner-Beuerle, C., Paech, P. & Schuster, E.P., 2013. Study on directors’ duties and liability. Available at: https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3886382 (22. 5. 2025). https://doi.org/10.2139/ssrn.3886382
Grbo, Z. 2017. Uvod u pravo privrednih društava. Sarajevo: Pravni fakultet Univerziteta u Sarajevu.
Grbo, Z. 2016. Režim posebnih dužnosti prema privrednom društvu u pravu Federacije Bosne i Hercegovine. Godišnjak Pravnog fakulteta u Sarajevu, 59, pp. 411-429.
Haim, A. 2023. The Administrative State and Artificial Intelligence: Toward an Internal Law of Administrative Algorithms. UC Irvine Law Review – Forthcoming, 14(1), pp. 1-55. Available at: https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4498470
(22. 5. 2025).
Hasanović, L. 2024. Expansion and Improvement of the Use of Digital Tools and Processes in Company Law. Godišnjak Pravnog fakulteta u Sarajevu, 67, pp. 209-238.
Hickman, E. & Petrin, M. 2021. Trustworthy AI and corporate governance: the EU’s ethics guidelines for trustworthy artificial intelligence from a company law perspective. European Business Organization Law Review, 22, pp. 593-625. https://doi.org/10.1007/s40804-021-00224-0
Horwitz, M. J. 1992. The transformation of American law, 1870-1960: The crisis of legal orthodoxy. Oxford: Oxford University Press. https://doi.org/10.1093/oso/9780195070248.001.0001
Kim, P. T. 2016. Data-driven discrimination at work. William & Mary Law Review, 58(3), pp. 857-936.
Koevski, G., Gavrilovik, B. T. & Spasevski, D. 2020. Twenty Years after the First Virtual-Only Annual Shareholders’ Meeting: Can the Virtual-Only Meeting Be a Solution during the Time of COVID-19? Iustinianus Primus Law Review, 11(2), pp. 1-10.
Kolbjørnsrud, V., Amico, R. & Thomas, R. J. 2016. How artificial intelligence will redefine management. Harvard business review, 2(1), pp. 3-10.
Leonard-Barton, D. & Swap, W. C. 2005. Deep smarts: How to cultivate and transfer enduring business wisdom. Boston: Harvard Business Press.
Maitland, F. W. 1900. Corporation sole. Law Quarterly Review, 16, pp. 335-354.
Millon, D. 1990. Theories of the Corporation. Duke Law Journal, 39(2), pp. 201-262. https://doi.org/10.2307/1372611
Mosco, G. D. 2020. AI and the board within Italian corporate law: preliminary notes. European Company Law, 17(3), pp. 87-96. https://doi.org/10.54648/EUCL2020014
Möslein, F. 2018. Robots in the boardroom: artificial intelligence and corporate law. In: Barfiel, W. & Pagallo, U. (eds.), Research Handbook on the Law of Artificial Intelligence. Cheltenham: Edward Elgar Publishing, pp. 649-670. https://doi.org/10.4337/9781786439055.00039
Muftić, N. 2025. Artificial Intelligence and Tortious Liability Case Study of Bosnia and Herzegovina. Cham: Springer. https://doi.org/10.1007/978-3-031-86453-7
Muftić, N. 2021. Liability for artificial intelligence. In: Slakoper, Z. & Tot, I. (eds.), Digital Technologies and the Law of Obligations. London: Routledge.
Nilsson, N. J. 2009. The quest for artificial intelligence. Cambridge: Cambridge University Press. https://doi.org/10.1017/CBO9780511819346
Page, A. 2009. Unconscious bias and the limits of director independence. University of Illinois Law Review, 1, pp. 237-294.
Petrin, M. 2019. Corporate Management in the Age of AI. Columbia Business Law Review, 3, pp. 965-1030. https://doi.org/10.2139/ssrn.3346722
Petrin, M. 2024. The impact of AI and new technologies on corporate governance and regulation. Singapore Journal of Legal Studies, 1, pp. 90-106. https://doi.org/10.2139/ssrn.4891647
Smith, M. & Miller, S. 2022. The ethical application of biometric facial recognition technology. AI & Society, 37(1), pp. 167-175. https://doi.org/10.1007/s00146-021-01199-9
Smuha, N. A. 2019. From a ‘Race to AI’ to a ‘Race to AI Regulation’ – Regulatory Competition for Artificial Intelligence. Law, Innovation and Technology, 13(1), pp. 1-25. https://doi.org/10.2139/ssrn.3501410
Villalobos R. & Maas, M. M. 2024. Beyond a Piecemeal Approach: Prospects for a Framework Convention on AI. In: Hacker, P. et al. (eds.), The Oxford Handbook on the Foundations and Regulation of Generative AI – Forthcoming. Oxford: Oxford University Press. Available at: https://papers.ssrn.com/sol3/papers.cfm?abstract_id=5020616 (22. 5. 2025). https://doi.org/10.2139/ssrn.5020616
Von Gierke, O. 1873. Das deutsche genossenschaftsrecht: Geschichte des deutschen körperschaftsbegriffs. Berlin: Weidmannsche Buchhandlung.
Voeneky, S. et al. (eds.). 2022. The Cambridge handbook of responsible artificial intelligence: Interdisciplinary perspectives. Cambridge: Cambridge University Press. https://doi.org/10.1017/9781009207898
Wagner G. 2019. Robot Liability. In: Lohsee, S., Schulze, R. & Staudenmayer, D. (eds.), Liability for Artificial Intelligence and the Internet of Things: Münster Colloquia on EU Law and the Digital Economy IV. Baden-Baden: Nomos, pp. 27-41. https://doi.org/10.5771/9783845294797-25
Wachter, S., Mittelstadt, B. & Floridi, L. 2017. Why a Right to Explanation of Automated Decision-Making Does Not Exist in the General Data Protection Regulation. International Data Privacy Law, 7(2), pp. 76-99. https://doi.org/10.1093/idpl/ipx005
Online Sources
Directorate-General for Neighbourhood and Enlargement Negotiations, Bosnia and Herzegovina Report. 2024. Available at: https://enlargement.ec.europa.eu/bosnia-and-herzegovina-report-2024_en#details (3. 3. 2025).
Lussana, A. 2024. AI in Business: Opportunities and challenges for companies and business. European AI Alliance. Available at: https://futurium.ec.europa.eu/en/european-ai-alliance/blog/ai-business-opportunities-and-challenges-companies-and-business (10. 2. 2025).
Otto Group. 2025. Key Figures. Available at: https://www.ottogroup.com/en/ueber-uns/kennzahlen.php (9. 2. 2025).
Legal sources and case law
High-Level Expert Group on Artificial Intelligence. 2019. Ethics guidelines for trustworthy AI. European Commission. Available at: https://ec.europa.eu/digital-strategy/our-policies/ethics-guidelines-trustworthy-ai (22. 5. 2025).
Company Law of the Federation of Bosnia and Herzegovina, Official Gazette of the Federation of Bosnia and Herzegovina, no. 81/2015 and 75/2021.
Company Law of Republika Srpska, Official Gazette of the Republika Srpska, no. 127/2008, 58/2009, 100/2011, 67/2013, 100/2017, 82/2019 and 17/2023.
Company Law of Brčko District of Bosnia and Herzegovina, Official Gazette Brčko District of Bosnia and Herzegovina, no. 49/11 and 01-02-815/20.
Directive (EU) 2017/1132 of the European Parliament and of the Council of 14 June 2017 Relating to Certain Aspects of Company Law.
Directive (EU) 2019/1151 on the use of digital tools and procedures in company law.
European Commission, Directorate-General for Justice and Consumers. 2021. Study on the relevance and impact of artificial intelligence for company law and corporate governance: final report. Publications Office. Available at: https://data.europa.eu/doi/10.2838/790784 (22. 5. 2025).
European Commission, 2022. Commission Staff Working Document. On possible national regulatory barriers to the use of new digital technologies in the interaction between investors, intermediaries and issuers (Action 12 of 2020 Capital Markets Union Action Plan). Brussels. Available at: a980fad9-a674-453f-8495-c5bda6117d77_en (22. 5. 2025).
European Parliament. 2017. Report with recommendations to the Commission on Civil Law Rules on Robotics, 2015/2103(INL). Available at: https://www.europarl.europa.eu/doceo/document/A-8-2017-0005_EN.htm (22. 5. 2025).
G20. 2019. G20 AI Principles – Osaka Leaders’ Declaration.
Law on Companies of the Federation of Bosnia and Herzegovina, Official Gazette of the Federation of Bosnia and Herzegovina, no. 81/2015 and 75/2021.
Law on Companies of the Republic of Srpska, Official Gazette of the Republic of Srpska, no. 127/2008, 58/2009, 100/2011, 67/2013, 100/2017, 82/2019 and 17/2023.
Law on Enterprises of the Brčko District of Bosnia and Herzegovina – Consolidated Text, Official Gazette of the Brčko District of Bosnia and Herzegovina, no. 49/11 and 01-02-815/20.
OECD. 2015. G20/OECD Principles of Corporate Governance. Paris: OECD Publishing. Available at: https://doi.org/10.1787/9789264236882-en (22. 5. 2025).
OECD. 2019. OECD Principles on Artificial Intelligence. Paris: OECD Publishing.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation). Official Journal of the European Union, L 119, 1–88.
Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence and amending Regulations (EC) No 300/2008, (EU) No 167/2013, (EU) No 168/2013, (EU) 2018/858, (EU) 2018/1139 and (EU) 2019/2144 and Directives 2014/90/EU, (EU) 2016/797 and (EU) 2020/1828 OJ L, 2024/1689 (AI Act).
Regulation (EU) 2022/2065 of the European Parliament and of the Council of 19 October 2022 on a Single Market for Digital Services and amending Directive 2000/31/EC (Digital Services Act). Official Journal of the European Union, L 277, 1–102.
Regulation (EU) 2022/1925 of the European Parliament and of the Council of 14 September 2022 on contestable and fair markets in the digital sector and amending Directives (EU) 2019/1937 and (EU) 2020/1828 (Digital Markets Act). Official Journal of the European Union, L 265, 1–66.
Regulation (EU) 2024/2847 of the European Parliament and of the Council of 23 October 2024 on horizontal cybersecurity requirements for products with digital elements and amending Regulations (EU) No 168/2013 and (EU) 2019/1020 and Directive (EU) 2020/1828 L, 2024/2847.
Regulation (EU) 2023/2854 of the European Parliament and of the Council of 13 December 2023 on harmonised rules on fair access to and use of data (Data Act). Official Journal of the European Union, L 2023/2854.
Regulation (EU) 2022/868 of the European Parliament and of the Council of 30 May 2022 on European data governance and amending Regulation (EU) 2018/1724 (Data Governance Act). Official Journal of the European Union, L 151, 1–44.
UNESCO. 2021. Recommendation on the Ethics of Artificial Intelligence.