Can UK solicitors use ChatGPT with client data?
Short answer
Only after checking. UK solicitors may use AI tools where the firm has established where data goes, kept supervision proportionate to the matter, and stayed inside confidentiality and privilege. Consumer ChatGPT on default settings usually fails that test. An AI certificate does not change the SRA's existing duties, and prompting skill is not the binding constraint.
What do professional duties actually require?
Confidentiality, proper supervision, and competence. None of those are new because a tool is new. If you would not email a privileged memo to an unknown third party without reading the contract, you should not paste it into a consumer chat window. Privilege is lost more easily than most busy fee-earners assume.
The SRA Standards and Regulations still apply. Generative tools add a destination for data that did not exist on the matter file before. The practical test: could you explain to that client, accurately and without embarrassment, where their material went and who could see it?
Firms that are serious about this pick a business or enterprise tier, read the data-processing terms, and write a policy their COLP can defend. Firms that are not serious share logins to a consumer account and hope.
Sources
- SRA Standards and Regulations — Solicitors Regulation Authority
Does it matter whether the firm uses a consumer or enterprise account?
Substantially. Enterprise tiers of the major tools generally offer contractual commitments on training and retention that consumer tiers do not, plus administrative controls. The difference is contractual rather than magical. It still has to be read, dated, and reviewed, because vendors change terms without anyone noticing.
Privilege analysis is not finished when the vendor says "we do not train on your data". You still need to know where inference runs, which staff at the vendor can access content, and whether a matter can be isolated. If the firm cannot answer those, the tool should not touch live matters yet.
What should never go into a general-purpose AI tool?
Privileged material, identifiable client data where the vendor terms have not been verified, and anything a confidentiality undertaking limits to named recipients. Anonymising a matter is harder than removing the client's name. Unique facts, a niche industry and a postcode often identify the file on their own.
Citation fabrication is the daily risk; confidentiality is the career-ending one. Models invent authorities confidently. A checking control against primary sources is not optional polish. It is the difference between a useful draft and a negligent one.
Who should skip a legal-AI programme?
Non-lawyers seeking legal training — the programme assumes you are qualified. Anyone whose firm has banned AI outright; training will not override that policy. Anyone who wanted a list of tool recommendations rather than a method for judging tools against SRA duties. The tools will change. The duties will not.
Also skip it if you wanted to become a solicitor. This is not a qualifying course. It is how practising lawyers use tools without breaching existing obligations.
Do solicitors need to tell clients they use AI?
There is no single blanket rule that names every tool, but engagement letters and privacy notices must be accurate about how material is processed. If a client asks, the honest answer has to be available. A notice that still describes a 2019 paper file is the actual problem, not the model.
Sources
- ICO guidance for organisations — Information Commissioner's Office
How should a firm decide whether to buy legal-AI training?
First write the policy the COLP can defend: approved tools, what may never be pasted, and who checks output against primary sources. Then buy training that starts from those duties, not from a list of prompts. If the firm has banned AI, training will not override that. If the need is qualifying as a solicitor, this is the wrong product.
| Situation | What to buy | What to skip |
|---|---|---|
| Firm has no AI policy yet | A method for judging vendors against confidentiality and privilege | A consumer ChatGPT walkthrough |
| Firm has approved an enterprise stack | Profession-specific training that drills checking against authorities | Generic prompt libraries |
| Firm has banned AI | Nothing — wait for the policy to change | Any course that treats the ban as optional |
| You wanted to become a solicitor | A qualifying law course | This programme |
The parallel accountants answer covers the same pattern in a different profession: consumer defaults fail, enterprise terms must be read, and accuracy errors look like competent work. Privilege is the legal-practice version of that confidentiality test, and it is lost more easily than a busy fee-earner assumes.
Free masterclasses exist so you can watch the tutor teach the method before you pay. They stay free. A sales webinar that is labelled a masterclass is a different product.
Common questions
Does the SRA ban ChatGPT?
No. The SRA has not issued a blanket prohibition. Existing duties on confidentiality, competence and supervision still apply, and they are enough to rule out a lot of default consumer use.
Is a closed, on-premise model automatically safe?
Safer on the data-destination question, not automatically competent. Fabricated citations and silent arithmetic errors still need a human check against primary sources.
Will this programme make me an SRA-compliant firm?
No course can. It can teach a method for assessing tools and writing a policy. Your COLP still owns the outcome.
Learn this properly
If you want to do this as a career rather than read about it, these live programmes cover it in depth.
AI for UK Solicitors
Use generative AI on real matters without compromising privilege, confidentiality or your SRA obligations — taught by a solicitor who led legal technology for a national firm.
Not for: Non-lawyers seeking legal training — this assumes you are qualified
- Live hours
- 16h live
- Duration and weekly load
- 8 weeks · ~5h/week
- Cohort size
- max 20
£499or from £83.16/mo, interest-free
More on AI for Professionals
- Is legal professional privilege the same as GDPR when solicitors use AI?GDPR can pass and privilege still fail. Pasting a privileged memo into consumer AI is a disclosure risk a privacy checklist misses.
- Can UK accountants use ChatGPT with client data?UK accountants may use AI with client data only after checking where it goes, the lawful basis and supervision. Consumer defaults often fail.
Related reading
AI for UK Solicitors
An 8-week live programme for UK solicitors on using AI within SRA obligations, privilege and confidentiality, taught by a solicitor and legal technology lead.
AnswerCan UK accountants use ChatGPT with client data?
UK accountants may use AI with client data only after checking where it goes, the lawful basis and supervision. Consumer defaults often fail.
AnswerPrivilege vs GDPR when lawyers use AI
GDPR can pass and privilege still fail. Pasting a privileged memo into consumer AI is a disclosure risk a privacy checklist misses.
CareerHow UK solicitors should add AI to their practice
AI is not a route into law. For UK solicitors the constraint is privilege and confidentiality, not prompting — consumer ChatGPT often fails.
SubjectAI for Professionals
Live AI programmes built around UK professional obligations for accountants, solicitors and HR teams — taught by practitioners from those professions.
AnswerLive cohort vs self-paced online course
A live assessed cohort is the better buy when you need a named marker and a deadline. A cheap self-paced library wins when you only needed the notes.