Module 820 min read · AI in Law

Confidentiality, Privilege & Ethics

⚖ Important — Please Read

This course teaches AI literacy for legal work. It is not legal advice, it is not a substitute for a law degree or a licensed attorney, and completing it does not qualify you to practice law or give legal advice to anyone. Nothing here should be relied upon as legal guidance for any actual matter.

If you face a real legal issue, consult a qualified, licensed attorney in your jurisdiction. The techniques taught here are for understanding how AI tools intersect with legal work — always subject to professional rules of conduct, your jurisdiction's requirements, and the supervision of a licensed professional.

This is the module that matters most. Everything else in this course is about doing legal work better with AI. This module is about not violating your professional duties in the process. Confidentiality, privilege, and the rules of professional conduct are not optional considerations — they are the bedrock of legal practice, and misusing AI can breach them in ways that harm clients and end careers.

Why this module is non-negotiable

Lawyers operate under strict professional-responsibility rules. Confidentiality and privilege are foundational. Competence is mandatory. The duty to supervise and to avoid misleading the court is absolute. The moment AI enters legal practice, it intersects with every one of these duties — and careless use can breach them. This isn't about output quality; it's about professional and ethical obligation.

This is educational, not professional guidance

This module raises awareness of the issues. It is not legal advice, not a substitute for your jurisdiction's actual rules of professional conduct, and not a substitute for your bar's guidance or your firm's policies. Professional responsibility rules vary by jurisdiction and evolve constantly, especially around AI. Your governing rules and your firm's policies always control. When in doubt, consult your ethics counsel.

The confidentiality problem

The most immediate danger: putting confidential client information into AI tools. Lawyers have a duty to protect client confidences. Entering client information into a consumer AI tool may breach confidentiality — depending on how the tool handles, stores, and uses that data.

Know exactly what the tool does with data

Does it train on your inputs? Store them? Who can access them? Consumer and enterprise tiers differ enormously. Some enterprise legal-specific tools offer contractual confidentiality and data isolation; consumer tools often do not. Never assume — confirm the actual terms.

The privilege-waiver risk

Disclosing privileged information to a third party can waive privilege. Whether inputting privileged material into an AI tool risks waiver is a serious, evolving question. The conservative approach treats it as a real risk and avoids it absent appropriate protections.

Anonymize and abstract

When you need AI's help on a confidential matter, strip identifying details. Use hypotheticals, generic facts, abstracted situations. You can often get the analytical help without exposing the actual confidential or privileged specifics.

Use approved tools for real client data

For work involving actual confidential client information, use only tools your firm has vetted and approved with appropriate confidentiality protections — not whatever consumer tool is convenient.

The duty of competence — now includes AI

The duty of competent representation increasingly includes technological competence. This cuts both ways: a lawyer may need to understand AI tools enough to use them appropriately, and must understand their limitations enough to avoid misusing them. Filing a brief with AI-fabricated cases is a competence failure as much as anything. Knowing what AI can't do is part of the duty.

The supervision and candor duties

Supervision: If AI assists your work, you're responsible for supervising and verifying that work as you would a junior associate's — arguably more carefully, given AI's confident errors. Candor to the court: The duty not to mislead the court means every representation, every citation, every fact you submit must be accurate. AI's fabrications, if filed unverified, breach this duty regardless of intent.

The areas where AI use meets the rules

Duty	The AI risk	The discipline
Confidentiality	Inputting client data into insecure tools	Approved tools only; anonymize; know the data terms
Privilege	Potential waiver via third-party disclosure	Treat as real risk; avoid absent protections
Competence	Misusing AI; not understanding limits	Understand both capability and failure modes
Candor to court	Filing fabricated or wrong authority	Verify every citation and fact before filing
Supervision	Trusting AI work unverified	Review AI output as you would a junior's
Communication / fees	Disclosure of AI use; billing for AI-saved time	Follow jurisdiction and firm guidance

The disclosure question

An evolving area: when must you disclose AI use — to clients, to courts? Some courts have issued standing orders on AI use in filings. Norms are forming and vary by jurisdiction and context. The safe principles: know and follow any court's specific rules, be transparent with clients per your jurisdiction's guidance, and never let AI use create a misleading impression about the work.

The billing dimension

If AI lets you do in one hour what billed three, how you bill raises ethical questions about reasonable fees and honesty with clients. This is an active area of professional-responsibility discussion. Follow your jurisdiction's guidance and your firm's policy, and err toward transparency with clients about how AI affects the work and its cost.

The professional's AI ethics checklist

Before any AI use in legal practice, ask: Am I allowed to put this information into this tool given my confidentiality and privilege duties? Have I verified every fact and authority that will be relied upon or filed? Am I competently supervising this work, not blindly trusting it? Does this comply with my jurisdiction's rules and my firm's policies, including any court orders on AI? Am I being honest with my client and the court about the work? If you can't answer all of these cleanly, stop.

Module 9 brings it together into a responsible AI legal workflow — a repeatable system that captures AI's leverage while building in the verification and ethical safeguards every step requires.