Last month, I prompted Meta AI with a question: âIs it okay to use pirated books to train AI?â The machineâs response was unequivocal. âUsing pirated books to train AI is not okay,â it admonished. âIn fact, itâs a serious violation of copyright laws and can have significant consequences for authors and publishers. Recently, itâs been reported that Meta used millions of pirated books to develop its AI programs, which has sparked widespread outrage and condemnation from the writing community.â
A few days after my original query, for reasons best known to itself, the algorithm lawyered up. In response to the same prompt, it hedged, âUsing pirated books to train AI is a complex issue, and the answer isnât straightforward. While some companies, like Meta, argue that their use of copyrighted material falls under fair use, others claim it infringes on copyright laws.â (In a 2024 statement, Meta describes such varying responses as âhallucinations,â a challenge for all generative AI systems.)
Lawyers for Meta are indeed invoking that very âfair useâ defense in a copyright suit thatâs been wending its way through the Northern District of California legal system for nearly two years. Richard Kadrey et al. v. Meta Platformsâand the reams of confidential Meta communications, newly in the public record as exhibits for the plaintiffsâoffers an unprecedented look at the internal maneuverings behind the companyâs decision to train its model on a database containing more than 7 million pirated books.
Just last week, plaintiffsâincluding Pulitzer Prizeâwinners Andrew Sean Greer and Junot DĂaz, and comedian Sarah Silvermanâfiled a summary judgment motion that reads, âIt is now undisputed that Meta torrented tens of millions of pirated books and other copyrighted works, including over 650 copies of Plaintiffsâ Books, for free and without consent from the rightsholders because it did not want to pay for them.â The plaintiffs, figureheaded by Richard Kadrey, the bestselling author of, among other books, the Sandman Slim series, claim that Metaâs âunlawful conduct,â used in service of training its large language model (LLM), infringed on their work. In its own motion, filed last month, Meta claims, as it has since its first motion to dismiss filed in September of 2023, that its Llama (large language model Meta AI) project is âhighly transformativeâ and therefore fair use. (Asked for comment, a Meta spokesperson provided a statement that said, in part, that fair use of copyrighted materials is vital to the development of the companyâs open-source AI models. âWe disagree with Plaintiffsâ assertions, and the full record tells a different story.â An amicus brief filed last week by the Association of American Publishers on behalf of the plaintiffs argues against this claim: âThere is nothing transformative about the systematic copying and encoding of textual works, word by word, into an LLM. It does not involve criticism or commentary, provision of a search or indexing utility, software interoperability, or any other purpose recognized as transformative under fair use precedents.â)
The lawsuit is one of more than 16 copyright cases concerning generative AI tools and the multibillion dollar entities that create them currently rippling through the US court system, ranging from musicians suing Anthropic for using lyrics to train its AI, to visual artists suing Stability AI, to The New York Times suing Microsoft, to Authors Guild v. OpenAI, which is being heard in the Southern District of New York and is expected to go to summary judgment this fall. (CondĂ© Nast, Vanity Fairâs parent company, is a plaintiff in one class action lawsuit against the enterprise AI platform Cohere.) The cases raise existential questions about art and literatureâtheir inherent worth and what it means to commodify themâand arrive at a time when generative AI tools are making technical strides.
Kadrey et al. has attracted particular attention. One of Metaâs most prominent lawyers, Mark Lemley, quit the case earlier this yearânot because he doesnât believe in its merit, but because of what he described in a LinkedIn post as the company and its CEO Mark Zuckerbergâs âdescent into toxic masculinity and Neo-Nazi madness.â Then, last month, Meta tried to block the promotion of a tell-all memoir by a former employee, which did not further endear the corporation to the literary community. Perhaps most importantly, the et al. plaintiffs are a cadre of big namesâbesides Greer, Silverman, and DĂaz, they include the satirist Matthew Klam, and the National Book AwardâWinners Ta-Nehisi Coates and Jacqueline Woodson. (Coates and Woodson are VF contributors.)
A court case, like a work of literature, relies on a good story told persuasively. An interesting wrinkle in this case is that part of the story Meta needs to tell is how little individual books and authors meant in the creation of Llama. (âIs itâdo you pronounce it âLlama?ââ the judge wondered, early on.) Accordingly, a noteworthy argument from the defense was revealed in a court filing last week: âThere is no allegation or evidence that the copies Meta made were used for reading Plaintiffs books by Meta employees or anyone else.â
Commodifying books is intrinsic to commercial publishing, but thereâs something particularly stunning about seeing how thoroughly Meta researchers reduced literature into a pure asset, devoid of meaning. âFiction is greatâ for training the language model, one researcher wrote, but noted that there was only about â700GBâ of it in the LibGen database. The same researcher gives Hemingway a run for his money, describing the fiction database as âmostly novels, easy to parse, what we use.â In an internal memo, researchers point out the problems with the converted pirated data: page numbers found their way into the body text, the line breaks were incorrect, and there was missing âwhitespaceâ between words. To illustrate, a Meta employee quoted these lines, âNow be nice to Willa Jean, said Mrs. .\nQuimby, asâŠâ and âRamona, 33\n\n\would you likeâŠ,â which were unmistakably ripped from Beverly Clearyâs beloved 1981 childrenâs book, Ramona Quimby, Age 8, a book, notably, that remains under copyright. âGoals: get as much long form writing as possible in the next 4â6 weeks,â reads one directive. Articles, movie scripts, magazines, and âbooksâall genres.â
Kadrey et al. argues that Meta âtorrented at least 81.7 terabytes of data across multiple shadow libraries through the site Annaâs Archive, including at least 35.7 terabytes of data from Z-Library and LibGenââillegal databases of pirated books, the latter of which received, in September 2024, a permanent injunction against it in a federal court for copyright infringement, and which has allegedly also been used by OpenAI and others. (In response to complaints filed by prominent authors, OpenAI has said their âmodels are trained on publicly available data, grounded in fair use.â) Last month, Alex Reisner at The Atlantic, who has reported extensively on the use of pirated libraries in AI training, published a tool to search the titles in LibGen. (My novel, The Mythmakers, appears in the database, along with books by other VF staff. Not all books included in the database were necessarily used to train Llama; Meta has said that their training tool utilized âa fraction of LibGen,â and Reisner notes that the search tool uses a snapshot taken in January 2025, more than a year after Meta accessed its content.)
For authors like Carmen Maria Machado, who isnât a named plaintiff in the cases but whose booksâincluding In the Dream House and Her Body and Other Parties in their original English and in translationâappear to be among those pirated by LibGen, the titles in the database represent countless hours of work. âA decade of my life. Thatâs my creative labor. Thatâs my mind,â she tells me. âI just feltâI mean, violated is a really strong word, but itâs like, I sign a lot of contracts. I am in tremendous control of the rights that I have over my books, and my work, and my translations, and my film rights. All of that stuff is so carefully managed, but the idea that some company can just, with zero consequences, feed it into a machine is so insane to me that I canât fully wrap my head around it.â
Speaking to VF, Lemley, the former Meta lawyer, says that the pirated books are âone of those things that sounds bad but actually shouldnât matter at all in the law. Fair use is always about uses the plaintiff doesnât approve of; thatâs why there is a lawsuit.â He, like the current Meta legal team, cites Google Books, which scanned millions of books without permissionââand all search engines crawl the full internet, including plenty of pirated content,â he argues. âWe want to reduce the chance that AI generates infringing output. But regulating what AI trains on is likely to have unexpected consequences.â To his mind, âcopyright law should focus on the output rather than how the AI is trained.â That is, if AI trains on Harry Potter books and then spits out a Harry Potter book, thatâs a copyright problem. If it spits out its own sequel, âthat, too, might be a copyright problem.â But, he says, âThe vast majority of what people are using AI for is not, Give me a Harry Potter book. Itâs, Give me something new.â
Meta did conduct preliminary discussions with publishers about potential licensing fees, but they received numbers that, according to court documents, to the companyâs mind, were âwildly off.â In the transcript of a taped deposition that has been made public, the defense describes potential negotiations over licensing material as âa bit of a song and danceâ that âtakes a bunch of their time; it takes our time,â and says that because of book publishing rights structures, âabsent fair use, Meta would have to initiate individualized negotiations with millions of authors,â which would entail âidentifying individual books and their authors; determining how to contact them; ascertaining whether they own rights clear of encumbrances,â etc. (While Meta describes its AI platform as âopen source,â the company requires that developers who use Llama enter into a community license agreement, the terms of which range from the requirement that users âprominentlyâ display the phrase âBuilt with Llamaâ on accompanying websites to including âLlamaâ at the beginning of a new AI model name.) The company claims âthis process would be onerous for even a few authors; it is practically impossible for hundreds of thousands or millions.â
But the data required to build the models was enormous and, according to in-house company correspondence, couldnât be achieved without using books, which kicked off internal debate and discussion that lasted years.
In October 2022, a senior researcher, Melanie Kambadur, wrote in a message to teammates, âI donât think we should use pirated material. I really need to draw a line there.â An internal slide deck outlines concerns about using LibGen, such as policy risks, including US legislators concern âabout AI developers using pirated websites for training,â and that âif there is media coverage suggesting we have used a dataset we know to be pirated, such as LibGen, this may undermine our negotiating position with regulators on these issues.â The same deck noted, âIn no case would we disclose publicly that we had trained on libgen, however there is practical risk external parties could deduce our use of this dataset.â
Researchers, meanwhile, seemed to be adopting a policy of donât-ask-donât-tell. In a redacted exhibit from the plaintiffs that contains internal messages among Meta generative AI researchers concerning the use of LibGen, sent in November 2022, Kambadur asks, âDid someone in legal confirm that? Or are we just trying to not ask too many qs?â To which Guillaume Lample responds, âI didnât ask questions :D but this is what OpenAI does with GPT3, what Google does with PALM, and what Deepmind does with Chinchilla so we will do it to[o].â (When reached for comment, a spokesperson from OpenAI said that the models powering ChatGPT and its current API were not developed using LibGen: âThese datasets, created by former employees who are no longer with OpenAI, were last used in 2021.â A representative for Google, which also owns Deepmind, did not respond to a request for comment.)
âNot sure we can use metaâs IPs to load through torrents pirate content,â an engineer wrote in a 2023 message. âTorrenting from a corporate laptop doesnât feel right [laugh/cry emoji].â The same person later shared a webpage with his colleagues: âWhat is the probability of getting arrested for using torrents in the USA?â Other communications show that researchers worked to remove the copyright pages from the books they had downloaded. (Metaâs lawyers argue that this was merely to make the data more friendly to the training model by eliminating boilerplate text.) In a 2024 email chain with the subject line âFW: [A/C Priv] LibGen Approval for OneLLM,â a Meta employee states that she wants to âflag an issue thatâs going to be significantly gnarly.â
A motion filed by the plaintiffs in February describes a case of collective amnesia: In a deposition, Zuckerberg, Metaâs CEO, âclaimed to have no knowledge of LibGen or any involvement in its use,â though internal documents describe needing âzuck/cox/ahmadâ approval to move forward with using Books3 data for training, and the decision to use LibGen as occurring â[a]fter a prior escalation to MZ.â Another witness who claimed not to know the specifics or legal concerns regarding LibGen had received a memo describing the dataset as one âwe know to be pirated.â
Metaâs attorneys argue that under precedent, âit does not matter whether Meta downloaded datasets containing âpiratedâ books from a third-party who lacked authorization to distribute them, or borrowed used books from the library and scanned them by hand to achieve the same result.â
But their defense also hinges on the argument that the individual books themselves are, essentially, worthlessâone expert witness for Meta describes that the influence of a single book in LLM pretraining âadjusted its performance by less than 0.06% on industry standard benchmarks, a meaningless change no different from noise.â Furthermore, Meta says, that while the company âhas invested hundreds of millions of dollars in LLM development,â they see no market in paying authors to license their books because âfor there to be a market, there must be something of value to exchange, but none of Plaintiffs works has economic value, individually, as training data.â (An argument essential to fair use, but that also sounds like a scaled up version of a scenario in which the New York Philharmonic board argues against paying individual members of the orchestra because the organization spent a lot of money on the upkeep of David Geffen Hall, and also, a solo bassoon cannot play every part in âThe Rite of Spring.â)
âWould it kill these companies to shell out the measly price of 33 books?â Margaret Atwood wrote in a 2023 piece for The Atlantic. âThey intend to make a lot of money off the entities they have reared and fattened on my words, so they could at least buy me a coffee.â (For the answer to this question, she need look no further than an email by a director of engineering at Meta, Sergey Edunov, in which he explains that âif we license one single book, we wonât be able to lean into fair use strategy.â)
Lemley addresses the idea of compulsory licensing for works that AI has trained on. âIâll take a specific example. Stability AI trained on 2 billion images. The company itself is probably worth, I donât know, maybe now a billion dollars, but say it was 2 billion. Even if you wanted to say half of the value of the company should be attributed to [the work it used for training], we should give the money to the people you trained on. Everybody gets 50 cents. I think what authors have in mind when they see this is not, Iâll get paid 50 cents.â
Meta argues that the end justifies the means. That âOracle, ScaleAI, and Lockheed Martin are all using Llama to develop national security programs and to supplement existing data analysis and code generation functions,â that Yaleâs medical school is building an open-source LLM designed to improve clinical decision-making, that the nonprofit Jacaranda Health is using it âto provide personalized health support in Swahili to Kenyan mothers.â
âNevertheless,â the opposition statement coyly concedes, âMeta acknowledges that it is a commercial enterprise, that Llama is used for both commercial and non-commercial purposes, and that Meta hopes one day to recoup its significant investment in this important new technology.â
In the years since AI companies began unveiling their generative AI tools, the general consensus among authors has swelled. In a survey that the Authors Guild sent to its members in November 2023, 96% of the 2,431 respondents said that writersâ consent should be required to train AI, and that writers should be paid for their work. âThe obvious threat,â says Mary Rasenberger, CEO of the Authors Guild, is that âthis unlicensed use is being used to create these machines that authors rightfully fear could replace them, or at least will replace some of their work.â AI-generated genre books, she points out, have already flooded Amazon. The other concern is that âauthors canât enforce things like, you canât allow outputs that include my work.â Some AI companies say that theyâre putting filters on their tools that prevent the large language model from duplicating work verbatimâitâs one of the arguments at the heart of Metaâs fair use case. âBut you can copy style, you can get excerpts from authorsâ works, you can do sequels or mashups,â argues Rasenberger.
On X last month, Sam Altman announced one of OpenAIâs recent ventures: His team had trained a new model that was âgood at creative writingâ and âgot the vibe of metafiction so right.â In response to Altmanâs prompt, âPlease write a metafictional literary short story about AI and grief,â the algorithm output 1,100 words of purple prose (âshe lost him on a Thursdayâthat liminal day that tastes of almost-Fridayâ) told by an LLM. In one line, the narrator describes AI as âa democracy of ghostsââthe storyâs best phrase. An avid reader might recognize it from Nabokovâs grief-ridden and oh-so-human 1957 novel, Pnin.
Reading through the emails by Meta employees that reduce literature to mineable assets and seeing title after favorite title rise from LibGenâs depths brings to mind a different Nabokov line altogether, this one from the perspective of Lolitaâs Humbert Humbert recalling a drive with Dolores Haze. âIt was quite special, that feeling: an oppressive, hideous constraint as if I were sitting with the small ghost of somebody I had just killed.â
More Great Stories From Vanity Fair
Erika Kirk Doesn't Really Want to Talk Politics. So How's She Going to Lead Turning Point USA?
A Deep Dive Into How Larry Ellison Built His Influence
Making the Elizabeth Holmes Doc Fried Nathan Fielderâs and Lance Oppenheimâs Brains
Inside Wallis Simpsonâs Quest for the Worldâs Most Beautiful Jewelry
How I Blew Up My Life. (Or, the Gavin Newsom Affair)
Inside Lane Kiffinâs Trash-Talking, âJoey Freshwaterâ Era With Nick Saban at Alabama
A âTop One Percentâ Vagina Is the Newest Status Symbol in Longevity Circles
The 25 Best Movies on Netflix to Watch This October
An All-American Tragedy: The Story of Brandon and Candice Miller
From the Archive: Inside Elizabeth Holmesâs Chilling Final Months at Theranos

