Confidentiality is the oldest duty in the practice, and generative AI puts it under new pressure. The moment a lawyer pastes client facts into a general-purpose model, the material has left the firm’s control — and the firm usually has no way to show a client, a regulator, or opposing counsel what happened to it. The ethical rules have started to catch up, and the practical answer is to isolate privileged material by design and attest that isolation, rather than relying on a vendor’s promise after the fact.
What does ABA Opinion 512 actually say?
ABA Formal Opinion 512 (2024) addresses a lawyer’s use of generative AI and treats the confidentiality question under Model Rule 1.6. Its practical thrust is that before inputting information relating to the representation of a client into a self-learning generative AI tool, a lawyer may need the client’s informed consent — and must consider confidentiality, competence, and reasonable fees. It is important to be precise: Opinion 512 concerns the ethical duty of confidentiality, which is distinct from evidentiary privilege. It is not authority that using AI waives privilege; waiver is a separate, unsettled legal question.
Why is a zero-retention contract not enough?
A zero-retention or no-train contract is a representation about what a vendor did with your data after it arrived at the model. It presumes the data got there, and it asks the client to trust that the term was honored. When a client audit or an outside-counsel guideline asks you to demonstrate confidentiality, a contract clause is an assurance, not evidence. An attestation inverts the burden: it produces a signed, checkable record that privileged material was withheld, redacted, tokenized, or kept on a local model — never transmitted to a third-party model in retrievable form.
How do you prove isolation instead of promising it?
RankShield Legal binds each AI interaction to four things — a fingerprint of the interaction, the approved tool that handled it, the governing policy, and the client’s informed consent — and signs and seals that attestation to a tamper-evident log. The honest boundary is explicit: this proves the isolation architecture and the consent process functioned, not that a court will ultimately find privilege preserved. For a small firm answering a client’s AI questionnaire, that verifiable record is the enterprise-grade answer without the enterprise-grade team.
