legal ai penalties small firms