Is ChatGPT Confidential for Lawyers? What ABA Opinion 512 Requires

No, consumer ChatGPT is not confidential for lawyers by default. Before inputting client information into a self-learning generative AI tool, ABA Formal Opinion 512 says you must understand how the tool uses and retains data and obtain the client's informed consent [4]. An "enterprise" tier can reduce confidentiality risk, but it does not create attorney-client privilege. These are two separate legal concepts.

Consumer ChatGPT is not confidential by default

Consumer ChatGPT is not confidential for lawyers in the way client communications are. By default, self-learning tools may use and retain the data you enter, which can conflict with your ethical duty of confidentiality under Model Rule 1.6. That duty covers all information relating to the representation, not just what a client marks as secret [4].

The practical risk is disclosure of client information to a third party you do not control. When you paste client facts into a public AI tool, you may be handing that data to a vendor whose retention and training practices you have not verified. ABA Opinion 512 frames this as a competence-and-confidentiality problem: a lawyer must understand the technology before using it on a client matter [4].

Turning off chat history or choosing a business plan changes the risk profile, but it does not automatically satisfy your ethical duty. You still have to know how the specific tool handles your data before the first prompt.

What ABA Opinion 512 requires: informed consent, not boilerplate

ABA Formal Opinion 512, issued July 29, 2024, sets a clear sequence. Before inputting client information into a self-learning generative AI tool, a lawyer must, under Model Rule 1.6, understand how the tool uses and retains data and obtain the client's informed consent. Critically, boilerplate consent buried in an engagement letter is not enough [4].

Informed consent means the client understands what you are proposing and agrees to it. For AI, that means explaining, in plain terms, that client information may be entered into a specific tool, how that tool handles the data, and the risks involved. A generic "we may use technology vendors" clause does not meet this bar [4].

One important caveat: ABA opinions are guidance, not law. Opinion 512 is non-binding, and states adopt or adapt ABA guidance variably. Check your own jurisdiction's rules and any state bar opinions, because your specific obligations may differ from the ABA's framework [4].

Why an "enterprise" tier is not the same as privilege

An enterprise or no-training AI tier reduces confidentiality risk. It does not create attorney-client privilege. This is one of the most common and dangerous misconceptions among lawyers evaluating AI tools, so it is worth stating plainly: paying for a business plan changes a vendor's data practices, not the law of privilege.

Enterprise tiers typically promise that your inputs will not be used to train the vendor's models and may offer stronger retention controls. That is genuinely useful for meeting your Rule 1.6 confidentiality duty, because it narrows the risk of client information leaking to a third party [4]. But confidentiality controls and evidentiary privilege are governed by different bodies of law.

Privilege protects certain communications from compelled disclosure in litigation. A vendor's marketing tier cannot confer it. In fact, reporting on United States v. Heppner (S.D.N.Y. 2026) indicates that AI-generated documents were treated as not privileged and not work product, a reminder that running content through an AI tool can undercut, not strengthen, a privilege claim [9].

Confidentiality versus privilege: two different duties

Confidentiality and privilege are frequently conflated, but they are distinct. Confidentiality is an ethical duty you owe your client under Model Rule 1.6, covering essentially all information relating to the representation. Privilege is an evidentiary rule that protects specific attorney-client communications from being compelled in court. Satisfying one does not guarantee the other [4].

You can breach confidentiality without ever litigating a privilege question, for example by pasting client facts into a tool that retains and trains on them. Conversely, a communication can be confidential yet still be found unprivileged if a court concludes the privilege elements were not met, or that privilege was waived [9].

This matters for AI because vendors market confidentiality features, not privilege. As reporting on Heppner suggests, courts may view AI-generated material as outside privilege and work-product protection entirely [9]. Treat AI outputs as potentially discoverable, and never assume a confidentiality setting substitutes for a privilege analysis.

A confidentiality-safe way to use AI on client matters

You can use AI on client matters responsibly by controlling what goes in, controlling the tool, and verifying what comes out. The goal is to meet your Rule 1.6 duty first, then guard against the second AI risk: fabricated authority.

Start with the ABA 512 sequence: understand the specific tool's data handling, then obtain the client's informed consent, tool-specific rather than boilerplate, before entering client information [4]. Prefer tools with contractual no-training and defined retention terms, and minimize the client-identifying detail you input where you can.

Then verify every output. A Stanford RegLab study found that leading legal AI research tools hallucinate on one in six or more queries [1]. A correctly formatted citation is not proof a case exists; hallucinations reproduce perfect citation format. Independently confirm every quotation, holding, and citation against a primary source before you rely on it or file it.

Frequently asked questions

Is it legal for lawyers to use ChatGPT?

Using AI tools is not itself prohibited, but you remain bound by your ethical duties. ABA Formal Opinion 512 directs that, before inputting client information into a self-learning generative AI tool, you must understand how the tool uses and retains data and obtain the client's informed consent under Model Rule 1.6 [4]. You also owe a duty of competence, which includes verifying AI outputs; a Stanford RegLab study found leading legal AI tools hallucinate on one in six or more queries [1]. Because Opinion 512 is non-binding guidance adopted variably by states, check your own jurisdiction's rules for your specific obligations.

Does enterprise ChatGPT give privilege?

No. An enterprise or no-training tier can reduce confidentiality risk by limiting how a vendor uses and retains your data, which helps with your Model Rule 1.6 duty [4]. But it does not create attorney-client privilege, which is a separate evidentiary concept governed by different law. Reporting on United States v. Heppner (S.D.N.Y. 2026) indicates AI-generated documents were treated as not privileged and not work product [9]. A vendor's subscription tier cannot confer privilege; do not treat a confidentiality setting as a substitute for a privilege analysis in litigation.

Do I need client consent to use AI?

Under ABA Formal Opinion 512, before inputting client information into a self-learning generative AI tool, you must obtain the client's informed consent, and boilerplate consent in an engagement letter is insufficient [4]. Informed consent means explaining, in plain terms, the specific tool, how it handles client data, and the risks, so the client can genuinely agree. Because ABA opinions are non-binding and states adopt them variably, confirm your jurisdiction's requirements. When in doubt, obtain tool-specific written consent and minimize the client information you enter.

RankShield Legal is a verifiable AI and quantum security platform for law firms: it proves privileged material never reached a third-party AI model in retrievable form, and certifies cited authorities before filing. This article is general information, not legal advice; consult a licensed attorney about your situation.

References

[1] Stanford RegLab (Magesh, Surani, Dahl, Suzgun, Manning, Ho). Hallucination-Free? Assessing the Reliability of Leading AI Legal Research Tools. Journal of Empirical Legal Studies, 2025 (preprint May 2024). https://hai.stanford.edu/news/ai-trial-legal-models-hallucinate-1-out-6-or-more-benchmarking-queries

[4] ABA Standing Committee on Ethics & Prof'l Responsibility. Formal Opinion 512: Generative Artificial Intelligence Tools. July 29, 2024. https://www.americanbar.org/news/abanews/aba-news-archives/2024/07/aba-issues-first-ethics-guidance-ai-tools/

[9] Reporting on United States v. Heppner (S.D.N.Y. 2026). https://www.dlapiper.com/en-us/insights/publications/2026/02/are-ai-generated-documents-privileged-key-takeaways-from-heppner