在本页4 分钟阅读
概述
The safer position is using tools under enterprise terms that bar training, limit retention and restrict access, because both the ethical duty of confidentiality and a court's view of waiver depend on whether confidentiality was reasonably protected.
深入探讨
Three protections are often blurred together. Attorney-client privilege is an evidentiary rule shielding confidential communications between lawyer and client made to obtain or give legal advice. Work product protects materials prepared in anticipation of litigation. The ethical duty of confidentiality under Rule 1.6 is broader, covering all information relating to the representation, and requires reasonable efforts to prevent unauthorized disclosure. Privilege is generally waived by voluntary disclosure to a third party outside the privileged relationship. Courts have long accepted, however, that lawyers can use service providers such as email hosts, cloud storage and eDiscovery vendors without waiver when confidentiality is reasonably maintained. AI tools are likely to be analyzed similarly, which makes the vendor's terms central. Case law applying waiver doctrine specifically to AI prompts is still thin, so lawyers should not assume a favorable outcome. Risk rises when terms let the provider use inputs to train models, keep them indefinitely, or allow human reviewers to read them, because each undercuts a claim that the communication stayed confidential. Consumer versions of popular chatbots have generally allowed training on conversations by default unless users opt out, while business and API offerings typically do not. Litigation can also affect retention: in 2025, the court in The New York Times's copyright suit against OpenAI ordered the company, for a period, to preserve user chat logs, including ones users had deleted. Work product is harder to waive; disclosure generally waives it only if it substantially increases the chance that an adversary obtains the material. Clients raise a separate issue. When they discuss their legal problems with a chatbot before or instead of talking to counsel, those conversations are not communications with a lawyer and may be discoverable. A common misconception is that turning off chat history makes a consumer tool safe. It may limit training use, but providers often still retain data for a period for abuse monitoring.
战略影响
风险与安全
灾难性和日常的人工智能危害都取决于谁了解风险以及谁能够采取行动。
更清晰的判决
公众和专业素养决定强有力的安全政策在政治上是否可行。
打破炒作
清晰的解释可以减少炒作、实验室公关和模糊道德剧场的影响。
The Future of Generative AI and Attorney-Client Privilege
Courts have only begun addressing how privilege and work product apply to AI prompts and outputs, and early decisions may differ by jurisdiction and facts. Commentators and some policymakers have discussed whether conversations with AI should receive special protection, but no such privilege currently exists. Meanwhile, vendors increasingly offer legal-industry terms, private deployments and zero-retention options, which make confidentiality easier to defend. Lawyers should expect more discovery requests aimed at AI chat logs, both their own and their clients', and more firms advising clients directly not to discuss their matters with consumer chatbots.
现实世界的实施
A lawyer pastes a client's email about an internal investigation into a free consumer chatbot with default settings that allow training; even if privilege survives, the lawyer may have fallen short of the duty under Rule 1.6 to take reasonable measures to protect client information.
A firm licenses an AI tool under an enterprise agreement that specifies no training on customer data, a defined retention period, encryption and no vendor access without permission, and records that review in its vendor file.
A client works through the facts of a dispute with a consumer chatbot before calling a lawyer; those chats are communications with a third-party service, not with counsel, and may be discoverable.
Before running a sensitive matter through an AI tool, a lawyer removes client names and identifying details, reducing what would be exposed if the data were ever accessed.
风险与防护栏
将存在风险视为科幻小说，同时能力复合。
混淆了表面产品安全与高度自治下的对准。
只给非英语和非专业观众留下低质量的资源。
实施路线图
单独的产品危害、误用和失控/失调风险。
询问哪些证据会改变您对时间表和严重性的看法。
比起营销主张，更喜欢主要来源和具体评估。
确定一条行动路径：职业、政策、资金或技能——而不仅仅是意识。
不断探索
Free newsletter
Get the daily AI briefing
Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.
One email each weekday. Unsubscribe in one click. We never sell or share your address.
Test yourself
Take the Generative AI and Attorney-Client Privilege quiz
Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.
Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation
常见问题
What is Generative AI and Attorney-Client Privilege?
Entering client information into a generative AI tool does not automatically waive attorney-client privilege, but it can put confidentiality at risk when the tool's terms let the provider train on, retain or review inputs. The safer position is using tools under enterprise terms that bar training, limit retention and restrict access, because both the ethical duty of confidentiality and a court's view of waiver depend on whether confidentiality was reasonably protected.
Which protection covers all information relating to a representation, not just lawyer-client communications?
Rule 1.6 confidentiality is broader than privilege, which covers confidential communications for legal advice, and work product, which covers litigation materials.
How have courts generally treated lawyers' use of service providers such as email hosts and cloud storage?
Courts have long accepted that using such providers does not waive privilege if confidentiality is reasonably protected, and AI tools are likely to be analyzed similarly.
Which vendor terms does the guide say increase confidentiality and waiver risk?
Each of these undercuts the claim that the communication stayed confidential. The other options are protective measures.
What did a court order OpenAI to do in 2025 in The New York Times's copyright suit?
The preservation order showed that litigation can override a provider's normal deletion practices, which matters for anything placed in a chat.
Under the guide, when does disclosure generally waive work product protection?
Work product is harder to waive than privilege; the usual test asks whether disclosure made it substantially more likely that an adversary would get the material.
继续学习
相关指南
为此主题精选的更多指南