Who Owns the Code That Claude Writes?
O'Reilly Radar raises the question most legal teams are ignoring: if Claude wrote your function, do you own it? Here's what we know so far.
When a developer opens Claude Code, writes a prompt, and gets two hundred lines of working TypeScript back, they rarely ask who owns that output. They copy it, paste it, run it through their own reviews, and push it to the repository. No one raises a hand. No one takes credit. But the question exists, and more law firms want to answer it before a court does.
O'Reilly Radar published an analysis on Saturday, June 20 titled Who Owns the Code Claude Wrote? that maps out the legal frameworks currently applied to code generated by LLMs, with Claude as an explicit case study. It's not the first to do so, but it's one of the most systematic: it distinguishes jurisdictions, cites recent precedent, and doesn't shy away from the areas where the law simply hasn't caught up yet.
The core problem: authorship requires a human author
In most Western jurisdictions, the US, EU, and UK, copyright requires a human author with sufficient creative contribution. An AI cannot hold rights. This isn't new: the USPTO and EUIPO have held this position for years. What's new is the scale. When millions of lines of production code have Claude as an undeclared coauthor, the risk landscape changes size.
The O'Reilly piece distinguishes three common scenarios:
- The developer gives a very specific prompt and reviews line by line. Here the human contribution is clearly identifiable; the authorship argument is stronger.
- Claude generates most of the function from a broad prompt and the developer only fixes bugs. The human creative contribution is diffuse. Copyright protection is uncertain.
- An autonomous agent, for example a Claude Code subagent, generates code without direct intervention. This is the most problematic scenario: no human wrote it, no one can claim creative ownership of the output.
What Anthropic says (and doesn't say)
Anthropics terms of service state that the user retains rights over generated outputs, to the extent applicable law permits. This is a contractual transfer, not a legal guarantee. If the law doesn't recognize authorship of that output, the transfer grants nothing that doesn't already exist.
Anthropic isn't alone in this language: OpenAI, Google, and the rest of the industry use similar formulations, precisely because no company can promise something courts haven't confirmed.
Why it matters now and for whom
The discussion matters primarily in three practical contexts:
Companies with software IP. If your competitive advantage lies in proprietary code and some of that code was generated by an LLM with no clear traceability, your intellectual property portfolio has gaps an auditor (or a competitor) can exploit.
Freelance developers and agencies. When you deliver code to a client and part of it comes from Claude, what exactly are you transferring? Contracts that don't specify the use of generative AI tools contain originality warranties that are no longer safe.
Open source projects. Licenses like MIT or Apache assume the contributor has rights to contribute. A commit partially generated by Claude without sufficient review is uncharted territory in terms of contribution validity.
The Hacker News debate (or lack thereof)
Notable: the Hacker News thread opened with a score of zero and no comments at publication. It's not indicative of disinterest in the topic, the debate has been active for months in legal and engineering forums, but perhaps suggests the technical community is starting to treat this as settled without actually resolving it.
The silence might be worse than the debate.
---
At ClaudeWave we've been watching engineering teams build on Claude Code without any internal policy on output traceability. The O'Reilly piece doesn't solve anything (it can't), but it's useful for forcing that conversation internally before someone external forces it. Just because the question remains uncomfortable doesn't mean we should keep dodging it.
Sources
Read next
Synthesia moves from corporate video to avatar roleplay
Synthesia launches AI Roleplay Sessions: employees rehearse tough conversations with avatars that score and give feedback. What changes and for whom.
AI mania is degrading decision-making at large companies
Nik Suresh collects anecdotes from his consulting work: AI strategies signed off by executives who never used the tools, plus internal token consumption leaderboards. Simon Willison recommends it.
Spotify removes 75 million spam and 'AI slop' tracks
Spotify says it pulled 75 million fraudulent tracks in a year and rolls out a spam filter, AI use disclosure and a tougher rule against voice impersonation.