# Can lawyers use ChatGPT without breaking their ethics rules? > Yes, if you understand the tool, protect client confidences, supervise staff, verify every citation and bill fairly. Not legal advice. Free lesson. Source: https://learn.ynteractive.com/content/questions/can-lawyers-use-chatgpt-ethically · Updated 2026-10-21 · Free from Stepthrough (https://learn.ynteractive.com) By [Robert Breen](https://learn.ynteractive.com/content/about) · Published October 21, 2026 · Updated October 21, 2026 · 4 min read Yes, lawyers can use ChatGPT and similar tools ethically, but the existing rules still apply in full: you need to understand what the tool can and cannot do, protect client confidences, supervise how your staff use it, verify everything it produces, and bill fairly. In practice that means a firm-approved account, no client confidences without proper safeguards or consent, and a lawyer reading every output, the habit you practice in [Answer Case-Update Emails Without Predicting the Outcome](https://learn.ynteractive.com/content/chatgpt-client-case-update-email-law-firm). This page summarizes published guidance in plain words. It is not legal or ethics advice. Your state's rules and bar opinions control, so check them before you adopt any tool. ## What does the ABA say about generative AI? In July 2024 the ABA issued Formal Opinion 512, its first ethics guidance on lawyers' use of [generative AI](https://learn.ynteractive.com/content/glossary/generative-ai) tools. It does not create new rules. It applies the Model Rules you already know: - **Competence (Rule 1.1).** You do not need to be an AI expert, but you need a reasonable understanding of the tool's capabilities and limits, and you must check its output to the degree the task requires. - **Confidentiality (Rule 1.6).** Before putting client information into a tool that may learn from it, the opinion says informed client consent is generally needed, and boilerplate in an [engagement letter](https://learn.ynteractive.com/content/glossary/engagement-letter) is not enough. Using a tool for general ideas with no client information is different. - **Communication (Rule 1.4).** Whether to tell a client you use AI depends on the facts, such as when the client asks or when it affects fees or significant decisions. - **Supervision (Rules 5.1 and 5.3).** Partners and supervising lawyers need policies and training so associates, paralegals and staff use AI properly. - **Fees (Rule 1.5).** Bill for the time actually spent, including reviewing output. In most cases you cannot bill clients for learning the tool. Many state bars have issued their own AI guidance as well. Read yours, because states differ on details like disclosure and consent. ## Why do citations get so much attention? Because general [chatbots](https://learn.ynteractive.com/content/glossary/chatbot) can invent cases, quotes and holdings that look real. Courts have sanctioned lawyers who filed briefs with citations an AI made up. A general assistant is not a research database. Every case, statute and quotation must be checked in a trusted source before it goes into anything you file or send. Legal-specific tools like CoCounsel, Thomson Reuters' AI legal assistant for research, review and drafting, are built for legal work, but the duty to verify stays with you. ## What safeguards should a firm put in place? 1. **Approve specific tools and plans.** Business plans that do not train on your data by default, with admin control over accounts. 2. **Write a one-page AI policy.** What may go in, what never goes in, who reviews, how to report a mistake. 3. **Check the settings.** Training off where it is a setting, memory managed, shared links reviewed. 4. **Decide on client consent and disclosure** for each type of use, with your state's guidance in hand. 5. **Require lawyer review** for anything that reaches a client, a court or opposing counsel. 6. **Train staff**, especially paralegals and assistants who draft client communications. [ChatGPT: Keep Client Data Safe](https://learn.ynteractive.com/content/chatgpt-data-controls-protect-client-data) covers the settings and a one-page team policy, and [Use AI at Work Without Leaking Client Data](https://learn.ynteractive.com/content/safe-ai-at-work-what-not-to-paste) covers what to take out before you paste. ## What does this look like in a real lesson? In [Answer Case-Update Emails Without Predicting the Outcome](https://learn.ynteractive.com/content/chatgpt-client-case-update-email-law-firm) Carla, a flower shop owner, is suing an event venue that never paid her 8,400 dollars. She wants a court date, a promise she will win and permission to text screenshots. At Harbor Street Law you paste the thread into ChatGPT with the firm's facts: what has been filed, the new deadline, what a missed deadline does and does not mean, the one court date, what the firm cannot predict and the no-texting policy. The first draft sounds reassuring, but when you ask for a table of every claim and the fact behind it, three are unsupported: an automatic win, a "court date" that is not one, and a prediction about getting paid. You use the safer wording, add a line about keeping the original texts, and send. If your firm has an attorney approve client updates, they read it too. That is competence and communication in practice: the tool drafts, and the lawyer makes sure nothing predicts an outcome or gives advice the facts do not support. The [legal information vs legal advice guide](https://learn.ynteractive.com/content/blog/legal-information-vs-legal-advice) and [ChatGPT for law firms](https://learn.ynteractive.com/content/blog/chatgpt-for-law-firms) go deeper. ## What mistakes should lawyers avoid? - **Filing anything with an unchecked citation.** - **Putting client confidences into a personal account.** - **Relying on engagement-letter boilerplate** for consent. - **Billing the time AI saved** as if you had spent it. - **No policy for staff**, so each person makes up their own rules. ## Key takeaways - The Model Rules already cover AI: competence, confidentiality, communication, supervision and fees. - Protect client information with approved business tools and, where needed, informed consent. - Verify every citation and fact in a trusted source. - A lawyer reviews anything that reaches a client or a court. ## Frequently asked questions **Do I have to tell clients I use ChatGPT?** It depends on the use and your jurisdiction. ABA Formal Opinion 512 treats disclosure as fact-specific, for example when a client asks or when AI use affects fees. Check your state bar's guidance. **Is ChatGPT Enterprise safe enough for client files?** A business plan that does not train on your data is a strong start, but it does not settle consent, supervision or verification. Those are still your duties. **Can paralegals use ChatGPT at my firm?** Yes, under your supervision and your firm's policy. See [where a paralegal should start with AI](https://learn.ynteractive.com/content/questions/how-paralegals-start-with-ai). ## Learn it hands-on Free, interactive lessons: you do every step yourself in a practice copy of the real tool, it checks your work as you go, and nothing touches your real accounts. - [Answer Case-Update Emails Without Predicting the Outcome using ChatGPT](https://learn.ynteractive.com/content/chatgpt-client-case-update-email-law-firm): A client wants a court date and a promise she'll win. Give ChatGPT the thread and your firm's facts, catch the lines that predict an outcome, and… (about 10 minutes) - [ChatGPT: Keep Client Data Safe, Set Up Your Team's Data Controls in 10 Minutes](https://learn.ynteractive.com/content/chatgpt-data-controls-protect-client-data): A client asks if their files go into ChatGPT. Answer with confidence: set the data controls, memory, Temporary Chat and shared links, then hand your… (about 10 minutes) - [Use AI at Work Without Leaking Client Data using ChatGPT](https://learn.ynteractive.com/content/safe-ai-at-work-what-not-to-paste): Turn off model training, strip a tenant's bank details and address out of a prompt, then catch the two promises ChatGPT made up before the reply… (about 7 minutes) [Start the free lesson](https://learn.ynteractive.com/modules/law-case-update-reply) ## AI tools in this answer Each one in the Stepthrough AI tools directory: what it does, who it is for and the free lesson where there is one. [ChatGPT](https://learn.ynteractive.com/content/ai-tools/tool/chatgpt) · [Claude](https://learn.ynteractive.com/content/ai-tools/tool/claude) · [CoCounsel](https://learn.ynteractive.com/content/ai-tools/legal-contracts#tool-cocounsel) [The full AI tools directory](https://learn.ynteractive.com/content/ai-tools) ## Related terms Plain-English definitions, each with an example from a free lesson. [Generative AI](https://learn.ynteractive.com/content/glossary/generative-ai) · [Engagement letter](https://learn.ynteractive.com/content/glossary/engagement-letter) · [Chatbot](https://learn.ynteractive.com/content/glossary/chatbot) · [AI acceptable use policy](https://learn.ynteractive.com/content/glossary/ai-acceptable-use-policy) · [AI incident response](https://learn.ynteractive.com/content/glossary/ai-incident-response) · [AI policy](https://learn.ynteractive.com/content/glossary/ai-policy) [The full AI glossary](https://learn.ynteractive.com/content/glossary) ## Related prompts - [ChatGPT settings checklist prompt](https://learn.ynteractive.com/content/prompts/chatgpt-account-settings-checklist-prompt): A copy-ready prompt that turns your plan and data rules into a one-page checklist of ChatGPT settings for staff, with a column… - [Check reply promises prompt](https://learn.ynteractive.com/content/prompts/check-reply-promises-prompt): A ChatGPT prompt that checks a draft before you send it: a table of every promise, the fact behind each, and safer wording for… - [Client case update email prompt](https://learn.ynteractive.com/content/prompts/client-case-update-email-prompt): A four-part prompt for law firm staff: turn a worried client's emails and your firm's facts into a clear case update with no… [All free prompt templates](https://learn.ynteractive.com/content/prompts) ## Related questions - [How do consultants use AI on client work without exposing client data?](https://learn.ynteractive.com/content/questions/how-consultants-use-ai-client-work): Consultants use AI for kickoff recaps, market scans and decks, on business plans that do not train on data, with client names… - [How should an independent insurance agency start using AI?](https://learn.ynteractive.com/content/questions/how-insurance-agencies-start-with-ai): Pick one approved tool, set data rules, and start with policy review recaps and claim-status replies that never promise what the… - [How should an IT team roll out ChatGPT or Copilot to the whole company?](https://learn.ynteractive.com/content/questions/how-it-teams-roll-out-ai-safely): Pick one assistant, lock down the tenant and data settings, fix oversharing, pilot with a small group, then roll out with a… - [Where should a paralegal start with AI if the firm has no AI policy yet?](https://learn.ynteractive.com/content/questions/how-paralegals-start-with-ai): Ask a supervising attorney first, keep client confidences out, and practice on non-confidential tasks until the firm sets rules… - [How should a finance team start using AI without breaking controls?](https://learn.ynteractive.com/content/questions/how-to-start-using-ai-in-finance): Treat AI as a preparer, never an approver: written rules, an approved tool, a person who reviews and evidence you keep. A plan… - [Where should an HR team start with AI if nobody on the team has used it yet?](https://learn.ynteractive.com/content/questions/how-to-start-using-ai-in-hr): Start with three team rules on employee data, then one low-risk drafting task, then a policy answer bot. A plain order for HR… [More questions: AI by department](https://learn.ynteractive.com/content/questions/by-department) · [All AI questions](https://learn.ynteractive.com/content/questions) · [All free tutorials](https://learn.ynteractive.com/content)