Law Firm AI Policy: What ABA Formal Opinion 512 Requires (2026)
On July 29, 2024 the American Bar Association's Standing Committee on Ethics and Professional Responsibility issued Formal Opinion 512, 'Generative Artificial Intelligence Tools'. It is the first comprehensive ABA guidance on the subject, and most state bars that have spoken since either adopted its framework or issued something close to it. The opinion does not tell firms to write an AI policy in so many words. It does something more useful: it maps every relevant Model Rule onto generative AI use, which is exactly the outline a firm policy needs. This guide walks through that map and what a policy has to say to meet it.
The six duties Opinion 512 applies to generative AI
- Competence (Rule 1.1): lawyers must understand the benefits and risks of the generative AI tools they use, not become experts in them. That means knowing what a tool does with inputs, how it produces output, and that the output can be confidently wrong. Independent verification of AI output is part of competence, not an optional extra.
- Confidentiality (Rule 1.6): entering client information into a generative AI tool is a disclosure. The lawyer must evaluate whether the tool's terms allow the vendor to retain, review, or train on inputs, and whether information could surface for other users. For self-learning tools that could expose one client's information to another matter, the opinion says informed client consent is required before use.
- Communication (Rule 1.4): clients must be told about AI use when it is relevant to the representation, including where the client asks, where the engagement terms address it, where the tool affects the fee, or where consent is required under the confidentiality analysis.
- Candor to the tribunal (Rule 3.3) and meritorious claims (Rule 3.1): every citation and factual assertion produced with AI assistance is verified before filing. The opinion also points to court standing orders that require disclosure of AI use, which the lawyer must follow.
- Supervision (Rules 5.1 and 5.3): managerial lawyers must establish policies and training so that the firm's lawyers and staff use AI in compliance with the rules. This is the paragraph that makes a written AI policy effectively mandatory for firms with more than one person.
- Fees (Rule 1.5): a lawyer may bill for the time actually spent using AI, not for the hours the tool saved. Charges for AI tools passed to clients must be disclosed and reasonable, and general overhead cannot be billed as a disbursement.
Why the supervision duty is the one that matters most
The other five duties bind each lawyer individually. Rules 5.1 and 5.3 bind the firm's managers, and Opinion 512 reads them as requiring 'clear policies' and training on permissible AI use. In practice that means a regulator, a malpractice carrier, or a disgruntled former client can ask a firm to produce its AI policy, and 'we told people to be careful' will not satisfy the question. The policy is the artifact that shows the duty was met.
What a US law firm AI policy must contain
- Scope: partners, associates, contract lawyers, paralegals, assistants, law clerks, and any vendor doing work under the firm's name; every generative AI tool, including features embedded in research platforms, document management, e-discovery, and email.
- Tool tiers by data category: tools approved for client-confidential information (enterprise terms, no training on inputs, documented data handling), tools approved only for public or anonymized material, and tools prohibited for firm work. Personal accounts are prohibited for anything client-related.
- Confidentiality rule: no client information in a tool not approved for it, and no self-learning tool with client information without the client's informed consent in writing.
- Verification: all AI-assisted research, drafting, and citations are verified by the responsible lawyer before use, and nothing is filed containing an unverified authority.
- Court compliance: before filing, the lawyer checks the AI standing orders of the court and complies with any disclosure or certification requirement.
- Client communication: when AI use is disclosed, how consent is obtained and documented where required, and how the engagement letter addresses AI.
- Billing: time entries reflect actual time; AI tool costs are passed through only as disclosed, reasonable, and agreed; no billing for saved time.
- Supervision and training: who approves tools, how new lawyers and staff are trained, and how acknowledgments are collected and kept.
- Incident reporting: what happens when confidential information reaches an unapproved tool or an AI error reaches a client or a court, with self-reporting encouraged and treated as mitigating.
State bars add their own layer
Opinion 512 is persuasive rather than binding; state rules govern. Several states issued their own guidance before or after it, among them California's practical guidance from the State Bar's ethics committee, Florida's Ethics Opinion 24-1, and opinions or guidance from New York, Pennsylvania, Kentucky, and others. Most track the ABA framework closely, but some go further, for example on consent to AI-related charges or on supervision of non-lawyer staff. Your policy should name the state rules that govern your lawyers and be reviewed against them.
Solo and small firms
A solo practitioner has no one to supervise, but Rules 1.1, 1.6, 1.4, 3.3, and 1.5 apply in full, and a written policy remains the simplest proof that AI was used deliberately. For a solo or small firm the document is two pages: the tools in use and what may go into each, the verification rule, what clients are told, the billing rule, and the court-order check. Adding staff turns it into a supervision document without changing the substance.
The fast path
Our generator produces a law firm AI policy with privilege and confidentiality clauses, mandatory verification of AI-generated authorities, tool approval by data category, and US privacy provisions, plus a vendor assessment checklist and staff acknowledgment form in the full pack. Preview the entire document free before paying. It is a self-help template, not legal advice, and it does not replace your own reading of Opinion 512 and your state's rules.
Generate your AI policy in 3 minutes
Customized to your industry, jurisdictions, and tools. Free preview, $ 49 one-time to download, delivered instantly.
Generate a law firm AI policy