What does ABA Formal Opinion 512 require for AI use?

ABA Formal Opinion 512 (July 29, 2024) says the Model Rules on competence, confidentiality, client communication and fees principally apply to generative AI. Competence includes understanding the benefits and risks of the AI tools a lawyer uses.

Which courts require AI disclosure in filings?

There's no single federal rule; the requirements we found come from individual judges. In the Southern District of New York, Judge Vernon Broderick uses a certificate of AI use and verification. In the Northern District of California, Magistrate Judge Susan van Keulen requires verification and prompt records. The Fifth Circuit decided in 2024 not to adopt an AI rule.

What state bar guidance covers AI use by lawyers?

The New York State Bar Association's AI task force report (April 2024) tells lawyers to get assurance that a provider protects and segregates client information and to monitor the provider for changes. The California State Bar's Practical Guidance, revised in May 2026, covers competence, confidentiality, supervision, agentic AI and billing.

Who is responsible for AI-assisted work under Rule 5.3?

A supervising attorney is responsible for ensuring that the work product of a non-lawyer assistant, including AI, complies with professional obligations.

Do clients need to be told when AI is used in their matter?

There is no universal disclosure obligation, but the analysis under Rule 1.6 and state-specific guidance is moving toward disclosure being the safest practice in many contexts.

AI Governance for Law Firms: Privilege and Ethics Rules

Q: Can uploading client documents to an AI tool waive attorney-client privilege?

Potentially yes, depending on the tool and its terms. Privilege waiver analysis asks whether there was an intentional disclosure to a third party outside the privilege. When an attorney uploads a privileged document to a general-purpose AI tool that retains and trains on user inputs, courts may find a voluntary disclosure to a third party.

TL;DR: Law firms need AI governance that addresses three distinct risks: privilege waiver from using non-enterprise AI tools with client documents; ethics rule compliance under ABA Formal Opinion 512 (Rules 1.1, 1.6, and 5.3); and court AI disclosure requirements that vary by jurisdiction. A written AI policy, approved tool list, supervision protocols, and client disclosure language are the four deliverables every firm should have in place.

Law firms are not just general businesses that happen to use AI. They are professional service organizations with fiduciary duties, privilege obligations, and ethics rules that create governance requirements that go beyond what a typical company needs. The governance question for a law firm is not just "are we GDPR-compliant" or "do we have a vendor DPA." It is also: "if we use this AI tool in client work, are we waiving privilege, violating our ethics obligations, or creating malpractice exposure?"

In 2026, these questions have become more pressing. Courts are sanctioning attorneys for AI-generated hallucinations in filings. Bar associations have issued formal ethics opinions. Some courts now require disclosure of AI use as a condition of filing. The firms that have governance in place are navigating this environment with confidence; the firms that do not are discovering the rules one sanctions order at a time.

The Mata v. Avianca moment

In June 2023, a federal judge in the Southern District of New York sanctioned two lawyers and their firm after they submitted an opposition citing six non-existent cases generated by ChatGPT, then stood by them after the court asked for copies. Judge P. Kevin Castel imposed a $5,000 penalty on the two lawyers and the firm jointly and severally and ordered them to send letters to their client and to each judge falsely named as an author (order of June 22, 2023).

Mata v. Avianca did not create new legal rules. The court sanctioned under Rule 11 of the Federal Rules of Civil Procedure and discussed New York's candor rule (Rule 3.3) along the way. What it did was make concrete what had been abstract: AI can produce legally plausible but completely false citations, and an attorney who files without verifying has violated their professional obligations.

Since Mata, a number of judges have added AI rules to their individual practices. The reasoning is that if attorneys are using AI in their work, courts need to know so they can calibrate expectations and address issues quickly. Disclosure requirements are not punitive; they are a structural response to the demonstrated risk of unverified AI output appearing in the record.

A judge's gavel striking its sound block on a dark wooden desk, representing careful legal review

Court AI disclosure requirements

Requirements vary by judge and are updated often. There's no single federal rule; what we found on October 15, 2026:

Southern District of New York: the AI requirements we found come from individual judges, not a district-wide rule. Judge Vernon S. Broderick, for example, posted a model certificate on October 29, 2025: the filer certifies that an AI tool was used, who reviewed the filing for accuracy and how each cited authority was verified, and non-compliance "may result in sanctions, the document being stricken, or other remedies."

Northern District of California: also judge by judge. Magistrate Judge Susan van Keulen's standing order (updated February 2026) treats a signature on a filing with AI-generated content as a certification that it was personally verified, and requires counsel to keep "records of all prompts or inquiries submitted to any generative AI tools."

Fifth Circuit: no AI rule. The court decided not to adopt its proposed rule on AI in briefs in June 2024 and reminded counsel that "'I used AI' will not be an excuse for an otherwise sanctionable offense."

Individual judge standing orders: these are where most AI rules live. Before any filing, check both the local rules and the assigned judge's individual practices.

State courts: not covered in this check. Look up the rules of the specific court before filing.

Practical step: Add a court AI disclosure check to your filing workflow. Before submitting any document, confirm whether the court has an AI disclosure requirement. If yes, add the required certification. If AI was used, confirm that a human attorney reviewed the specific AI-generated content for accuracy.

ABA Formal Opinion 512

ABA Formal Opinion 512, issued on July 29, 2024, is the ABA's first formal opinion on generative AI. The ABA names the rules on competence, confidentiality, client communication and fees as the ones that principally apply. Three rules matter most for firm governance:

Rule 1.1 (Competence): Comment 8 to Rule 1.1 already required lawyers to keep abreast of changes in the law and its practice, including the benefits and risks of relevant technology. Opinion 512 applies this to AI: lawyers must understand how the AI tools they use function, including the risk of hallucinations, the basis on which the AI generates responses, and the limitations of the tool for legal research. Using AI without understanding it does not satisfy the competence standard. Neither does relying on AI output without verification.

Rule 1.6 (Confidentiality of Information): A lawyer may not disclose client information without authorization. Uploading client documents to an AI tool that retains inputs or uses them for training is a disclosure. The analysis requires examining: (a) what the vendor's terms say about data retention and training; (b) whether a confidentiality agreement governs the relationship; (c) whether using the tool falls within the implied authorization of the representation. For general-purpose consumer AI tools, the analysis often fails on points (a) and (b). For enterprise legal AI platforms with contractual confidentiality protections and no training on user data, the analysis is much more favorable.

Rule 5.3 (Responsibilities Regarding Non-Lawyer Assistance): When a non-lawyer (including AI) performs work for a client, the supervising attorney is responsible for ensuring that the work meets professional standards. This has two practical implications. First, when an attorney uses AI to draft or research, they are responsible for the accuracy and completeness of the output. Second, when a partner supervises an associate or paralegal who uses AI, the partner is responsible for ensuring the AI-assisted work product is adequately reviewed. AI does not reduce the supervisor's responsibility; it creates a new surface on which that responsibility must be exercised.

State bar guidance roundup

New York State Bar Association: Its AI task force report, approved April 6, 2024, tells lawyers to obtain assurance that the tool provider will protect each client's confidential information and keep it segregated, and to monitor the provider for changes that might compromise it.

California State Bar: Its Practical Guidance, first published November 16, 2023 and revised on May 14, 2026 to cover agentic AI, addresses competence, confidentiality, supervision and billing. On billing, hourly fees "must reflect the time actually spent on the client's matter," even when AI cuts the time.

Florida Bar (Opinion 24-1, 2024): Lawyers may use generative AI but must protect client confidentiality, provide accurate and competent services, avoid improper billing practices and comply with lawyer advertising rules.

Texas: Opinion 705 (February 2025) covers generative AI under the Texas Disciplinary Rules. Lawyers must verify AI outputs and "are responsible for the work product they submit regardless of who (or what) does the original research and drafting."

DC Bar: Ethics Opinion 388 (April 2024) says that if a tool saves what lawyers enter or lets it shape answers for outside users, lawyers should use a different product, negotiate better confidentiality terms, or enter only non-confidential information. Hourly fees cover only time actually spent.

Privilege risk from AI tools

Attorney-client privilege protects confidential communications between attorney and client made for the purpose of legal advice. The privilege can be waived by voluntary disclosure to a third party outside the privilege.

When an attorney uploads a privileged client document to an AI tool, the key question is whether this constitutes a disclosure to a third party. The analysis depends on:

Vendor data practices: Does the vendor retain inputs for model training? If yes, the document has been shared with the vendor's systems in a way that could be used for purposes beyond the specific query. This is the clearest risk factor.

Vendor contractual relationship: Is there a confidentiality agreement (DPA or enterprise services agreement) that prohibits the vendor from using inputs for training and that establishes reasonable security? A strong contractual relationship reduces the disclosure risk, analogously to how sharing privileged information with consultants or experts under a confidentiality agreement does not waive privilege.

SOC 2 and security: Does the vendor have enterprise-grade security? Security controls are relevant to the completeness of the confidentiality protection.

Approved tools for legal work: Enterprise legal AI platforms (such as Westlaw AI, LexisNexis+, Harvey, and several others) have been specifically designed for legal use with no training on client data, dedicated infrastructure, and DPAs. These platforms carry materially lower privilege risk than general consumer AI tools.

Practical rule: Do not upload privileged client documents to any AI tool that does not have: (1) a signed DPA or enterprise agreement with confidentiality protections; (2) an explicit no-training-on-inputs provision; (3) SOC 2 Type II or equivalent certification. For all other tools, use only non-confidential, non-client data.

Associate and paralegal AI supervision

Rule 5.3 applies to partners supervising associates and to attorneys supervising paralegals. When either group uses AI in client work, the supervising attorney has the same responsibility they would have if a junior attorney or paralegal had done the underlying work.

This means supervisors need to develop specific review practices for AI-assisted work:

For AI-generated legal research: Verify every citation independently. Do not rely on the AI's summary of a case; read the actual decision.

For AI-generated drafts: Review the draft with the same scrutiny you would apply to a junior associate's first draft, with additional attention to statements of law (which may be hallucinated) and factual accuracy.

For AI-assisted document review: Sample the AI's outputs. If AI is categorizing documents as responsive or non-responsive, sample enough of each category to assess accuracy before relying on the classification.

For AI use in client communications: Review all AI-generated client communication before it is sent. AI drafting of routine client emails is generally acceptable under supervision; AI drafting of advice letters requires careful review as it would for any substantive advice document.

Law firm AI policy structure

A law firm AI policy should cover:

Approved tools: A list of AI tools approved for use in client work, with any restrictions on what data can be uploaded. Unapproved tools for client-data work.
Prohibited uses: General-purpose consumer AI tools for client documents; AI use without supervision for filings or client advice; billing practices inconsistent with actual AI-assisted time savings.
Verification requirements: Mandatory citation verification for AI-generated legal research; review requirements for AI-drafted documents before client delivery or filing.
Supervision requirements: How partners are expected to supervise AI-assisted work by associates and paralegals.
Court disclosure process: How to determine whether a court AI disclosure is required and the procedure for adding the required certification.
Client disclosure: Whether and when to disclose AI use to clients; template language for engagement letters.
Incident reporting: How to escalate if an AI tool produces a confidentiality concern, such as receiving outputs that appear to be another client's information.

Client disclosure obligations

There is no across-the-board requirement to disclose AI use to clients, but the analysis under Rule 1.6 and fee rules suggests that disclosure is appropriate in several circumstances:

When client documents are uploaded to an AI tool (given the confidentiality analysis above)
When AI materially reduces the time required for a task and the fee arrangement is hourly
When AI is used in a high-stakes matter where the client would reasonably want to know

A practical approach is to include AI use language in the engagement letter, describing at a general level that the firm uses AI tools with appropriate confidentiality protections, and giving the client an opportunity to ask questions or impose restrictions.

For clients with their own AI policies or data handling restrictions (common in financial services, healthcare, and government contracting), review their AI policies before using any AI tools in their matter.

Correction, October 15, 2026: an earlier version said the Fifth Circuit requires an AI certification in briefs (it decided in June 2024 not to adopt an AI rule), cited an SDNY "Standing Order 24-MC-0031" and a Northern District of California standing order as district-wide AI rules (we found no such orders; the requirements come from individual judges), dated ABA Formal Opinion 512 to 2023 (it was issued July 29, 2024), said Texas had no formal opinion (Opinion 705 was issued February 2025) and said DC Opinion 388 makes contractual protections a precondition of use (it gives three options). It also described Florida Opinion 24-1 and New York's guidance in terms we couldn't match to the documents; those entries now quote them.