--- title: Can UK solicitors use ChatGPT with client data? url: https://thestudyguild.com/answers/can-uk-solicitors-use-chatgpt-with-client-data type: answer published: 2026-08-13 last_reviewed: 2026-08-13 reviewed_by: daniel-mercer publisher: The Study Guild --- # Can UK solicitors use ChatGPT with client data? UK solicitors may use AI with client or privileged material only after checking the vendor contract and SRA confidentiality. Consumer defaults often fail. ## Short answer Only after checking. UK solicitors may use AI tools where the firm has established where data goes, kept supervision proportionate to the matter, and stayed inside confidentiality and privilege. Consumer ChatGPT on default settings usually fails that test. An AI certificate does not change the SRA's existing duties, and prompting skill is not the binding constraint. ## What do professional duties actually require? Confidentiality, proper supervision, and competence. None of those are new because a tool is new. If you would not email a privileged memo to an unknown third party without reading the contract, you should not paste it into a consumer chat window. Privilege is lost more easily than most busy fee-earners assume. The SRA Standards and Regulations still apply. Generative tools add a destination for data that did not exist on the matter file before. The practical test: could you explain to that client, accurately and without embarrassment, where their material went and who could see it? Firms that are serious about this pick a business or enterprise tier, read the data-processing terms, and write a policy their COLP can defend. Firms that are not serious share logins to a consumer account and hope. Sources: - [SRA Standards and Regulations](https://www.sra.org.uk/solicitors/standards-regulations/) — Solicitors Regulation Authority ## Does it matter whether the firm uses a consumer or enterprise account? Substantially. Enterprise tiers of the major tools generally offer contractual commitments on training and retention that consumer tiers do not, plus administrative controls. The difference is contractual rather than magical. It still has to be read, dated, and reviewed, because vendors change terms without anyone noticing. Privilege analysis is not finished when the vendor says "we do not train on your data". You still need to know where inference runs, which staff at the vendor can access content, and whether a matter can be isolated. If the firm cannot answer those, the tool should not touch live matters yet. ## What should never go into a general-purpose AI tool? Privileged material, identifiable client data where the vendor terms have not been verified, and anything a confidentiality undertaking limits to named recipients. Anonymising a matter is harder than removing the client's name. Unique facts, a niche industry and a postcode often identify the file on their own. Citation fabrication is the daily risk; confidentiality is the career-ending one. Models invent authorities confidently. A checking control against primary sources is not optional polish. It is the difference between a useful draft and a negligent one. ## Who should skip a legal-AI programme? Non-lawyers seeking legal training — the programme assumes you are qualified. Anyone whose firm has banned AI outright; training will not override that policy. Anyone who wanted a list of tool recommendations rather than a method for judging tools against SRA duties. The tools will change. The duties will not. Also skip it if you wanted to become a solicitor. This is not a qualifying course. It is how practising lawyers use tools without breaching existing obligations. ## Do solicitors need to tell clients they use AI? There is no single blanket rule that names every tool, but engagement letters and privacy notices must be accurate about how material is processed. If a client asks, the honest answer has to be available. A notice that still describes a 2019 paper file is the actual problem, not the model. Sources: - [ICO guidance for organisations](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/) — Information Commissioner's Office ## How should a firm decide whether to buy legal-AI training? First write the policy the COLP can defend: approved tools, what may never be pasted, and who checks output against primary sources. Then buy training that starts from those duties, not from a list of prompts. If the firm has banned AI, training will not override that. If the need is qualifying as a solicitor, this is the wrong product. | Situation | What to buy | What to skip | |---|---|---| | Firm has no AI policy yet | A method for judging vendors against confidentiality and privilege | A consumer ChatGPT walkthrough | | Firm has approved an enterprise stack | Profession-specific training that drills checking against authorities | Generic prompt libraries | | Firm has banned AI | Nothing — wait for the policy to change | Any course that treats the ban as optional | | You wanted to become a solicitor | A qualifying law course | This programme | The parallel accountants answer covers the same pattern in a different profession: consumer defaults fail, enterprise terms must be read, and accuracy errors look like competent work. Privilege is the legal-practice version of that confidentiality test, and it is lost more easily than a busy fee-earner assumes. Free masterclasses exist so you can watch the tutor teach the method before you pay. They stay free. A sales webinar that is labelled a masterclass is a different product. ## Common questions **Does the SRA ban ChatGPT?** No. The SRA has not issued a blanket prohibition. Existing duties on confidentiality, competence and supervision still apply, and they are enough to rule out a lot of default consumer use. **Is a closed, on-premise model automatically safe?** Safer on the data-destination question, not automatically competent. Fabricated citations and silent arithmetic errors still need a human check against primary sources. **Will this programme make me an SRA-compliant firm?** No course can. It can teach a method for assessing tools and writing a policy. Your COLP still owns the outcome. --- Source: https://thestudyguild.com/answers/can-uk-solicitors-use-chatgpt-with-client-data · The Study Guild