Skip to main content
Security & Compliance•8 min read

Suno Lawsuits: Guardrails Are Not Your Legal Defence

November 8, 2026•By Ajan Kanagalingam

Two lawsuits landed against the AI music generator Suno on Friday. The copyright arguments will take years. One allegation inside them is relevant to any business publishing AI-generated content next week, and it has nothing to do with music.

What was filed

On 6 November 2026, in the Northern District of California, Elvis Presley rights holders including Elvis Presley Enterprises, an Authentic Brands Group unit, and Raleigh Music Publishing filed a 51-page complaint against Suno. The same legal team filed a separate copyright case the same night for Eight Mile Style, the Detroit publisher that controls hundreds of Eminem compositions, citing tracks including Lose Yourself and The Real Slim Shady. Eminem is not a party to it.

The Presley case claims copyright infringement over Presley recordings and a violation of Tennessee's Ensuring Likeness Voice and Image Security Act, the 2024 law generally called the ELVIS Act. That law treats a voice, real or simulated, as a protected right, and the part that makes it matter commercially is that it permits claims against the company supplying a cloning tool rather than only against the person typing the prompt. Reporting describes this as one of the first major tests of it.

Everything in the paragraphs above about what Suno did is an allegation. These are complaints, Suno had not filed a response in court at the time of writing, and no judge has ruled on anything. Suno has issued a statement saying it exists to help people create original music rather than to trade on anyone's name or likeness, that it does not allow prompts for specific artist names and songs, and that it works with third-party providers to screen uploaded audio and lyrics. It has argued in earlier proceedings that its training is fair use.

The allegation that generalises

Most coverage of this will be about whether training on recordings is fair use. That question is important and it is not the one that changes what a business does on Monday.

The transferable claim is narrower. The Presley complaint calls Suno's position that it blocks artist names in prompts unequivocally false, and says that as recently as last month the service produced a Presley-like clone from lyrics that merely included his name. The Eight Mile Style complaint goes a step further, alleging that a prompt naming no artist at all, describing only a sound and a style, produced a recognisable imitation.

Read those two allegations together and the shape is clear. A filter that blocks a name does not necessarily block the output, and a user who dutifully avoids the name may still end up publishing something that resembles a protected performance.

What a vendor saysWhat it isWhat protects you
We block protected namesA product featureReviewing the output yourself
Our training is lawfulA legal position, contestedAn indemnity in your contract
Output is yours to useA licence grant, with carve-outsReading the carve-outs
We screen uploadsA best-effort controlNot uploading other people's work

None of the things in the left column are worthless. They are simply representations about how a product behaves, and a representation that turns out to be inaccurate leaves the person who published the output holding the problem.

Why the tool-maker angle matters beyond music

The ELVIS Act claim is aimed at the supplier of the tool. If that theory survives, safeguards against voice cloning become a legal duty for the companies building these products rather than a product decision they make voluntarily.

That is good news for businesses using the tools, eventually. A duty on the vendor is better than a disclaimer pushed to the user. But it is a slow kind of good news, decided over years, and in the meantime the exposure sits where it always did, with whoever put the output in front of customers.

This is also a reminder of how fast the ground is moving on likeness. A state statute passed in 2024 is now being used against a tool maker in 2026, and the existing position for Canadian businesses is set out in what businesses can and cannot do with voice cloning.

What to actually do

Keep names, song titles, character names and other people's lyrics out of your prompts. It is free, it is sensible, and on the Eight Mile Style allegation it is not sufficient on its own, so do not treat it as the whole answer.

Read your vendor agreement for the output indemnity specifically. Many indemnities have an exclusion that removes cover where the user prompted for a protected name or style, which means the protection disappears in exactly the scenario you would want it. The general shape of these terms is covered in what AI terms of service actually say about your data and your output.

Keep the prompts. If published material is ever queried, being able to show exactly what was asked for is the difference between a conversation and a guess. This is ordinary record keeping of the kind in document control.

And review the output as content you are publishing, because that is what it is. The review question is not whether the prompt was clean, it is whether the result resembles a specific identifiable person or work. Put it on your risk register alongside the rest of your tooling exposure, which is the point of keeping that register current, and note that the broader copyright picture is still unsettled, as set out in what the AI copyright fights mean for businesses that use AI.

Frequently Asked Questions

What was filed?

Two separate federal lawsuits against the AI music generator Suno on 6 November 2026, in the Northern District of California, by the same legal team. One is brought by Elvis Presley rights holders including Elvis Presley Enterprises, an Authentic Brands Group unit, and Raleigh Music Publishing. The other is brought by Eight Mile Style, the publisher that controls hundreds of Eminem compositions. Eminem himself is not a party.

Has anything been decided?

No. These are complaints, which means every substantive statement in them is an allegation by the plaintiffs. Suno had not filed a response in court at the time of writing and no judge has ruled on any of it. Suno has issued a press statement disputing the characterisation, and has argued in earlier proceedings that its model training is fair use.

What is the ELVIS Act?

Tennessee’s Ensuring Likeness Voice and Image Security Act, passed in 2024, which treats a person’s voice, real or simulated, as a protected right. The feature that makes it significant here is that it allows claims against the company supplying a cloning tool rather than only against the person using it, and it lets individuals, estates and rights holders seek civil damages. The Presley complaint is reported as one of the first major tests of it.

Which allegation matters most to a business?

That the guardrail does not work as described. The Presley complaint calls Suno’s position that it blocks artist names in prompts “unequivocally false”, and the Eight Mile Style complaint alleges that a purely descriptive prompt naming no artist still produced output in a recognisable style. If either holds up, a business relying on the filter was relying on something that did not hold.

Does avoiding the artist name protect me?

It helps, and on the allegations here it is not sufficient. Keeping names, song titles and other people’s lyrics out of your prompts is sensible and cheap. But the Eight Mile Style claim is specifically that a prompt describing only a sound produced a recognisable imitation, so a business cannot treat name avoidance as a complete answer. Check what you actually published, not just what you typed.

What should we do about our own AI content?

Three things. Read your vendor agreement for whether output claims are indemnified and what the exclusions are, because many indemnities fall away if you prompted for a protected name. Keep a record of the prompts behind published material, so you can show what was asked for. And review commercially published AI output as content you are responsible for, because you are the one who published it.

Know what your AI terms actually cover

We review what your AI vendors promise about output, where the indemnity stops, and which content needs a human sign-off before it goes out.

Related Articles

Security & Compliance

Patch Management: Fast Is Good, Instant Is Not

August 24, 2026Read more →
Security & Compliance

Prompt Injection: The AI Risk You Have Not Heard Of

August 6, 2026Read more →
Security & Compliance

The AI Did Not Fail. The Setup Did.

July 31, 2026Read more →
AK
Ajan Kanagalingam
Founder & ChatGPT Consultant, ChatGPT.ca

Ajan leads the ChatGPT.ca team: 200+ custom GPT builds and automation projects for 50+ businesses across 20+ industries. Based in Markham, Ontario. PIPEDA-compliant solutions.

Stay ahead of AI in Canada

Weekly case studies, new tools, and ROI playbooks for Canadian SMEs. One email, zero spam.