ABA Formal Opinion 512: what lawyers must do before using generative AI
In one line: before you put a client’s matter into a general-purpose AI tool, evaluate the confidentiality risk, get the client’s informed consent where it’s required, verify every output, and supervise your team. Opinion 512 doesn’t ban generative AI — it tells you how to use it within the rules you already follow. This article is general information about Opinion 512, not legal advice.
What Opinion 512 is (and what it isn’t)
ABA Formal Opinion 512, “Generative Artificial Intelligence Tools,” was issued on 29 July 2024 by the ABA Standing Committee on Ethics and Professional Responsibility — the association’s first formal ethics guidance on lawyers’ use of generative AI. (Source: ABA.) It doesn’t create a new “AI rule.” It interprets how the existing Model Rules of Professional Conduct apply — and because it’s an ABA opinion, it’s persuasive, not binding: your duties come from the rules your jurisdiction has adopted.
The Model Rules Opinion 512 puts in play
| Model Rule | What it means for GenAI |
|---|---|
| 1.1 — Competence | Understand the benefits and risks of the specific GenAI tool you use, including how it stores and reuses inputs. |
| 1.6 — Confidentiality | Evaluate the risk that a self-learning tool could disclose information relating to a representation; obtain the client’s informed consent where required. Duties to former (1.9(c)) and prospective (1.18(b)) clients apply too. |
| 1.4 — Communication | Where relevant, tell the client how you’re using GenAI in their matter. |
| 3.1, 3.3 & 8.4(c) — Candor | Verify every AI output; submitting fabricated citations or facts breaches your duties of candor and against frivolous claims. |
| 5.1 & 5.3 — Supervision | Managerial lawyers must set GenAI policies and reasonably ensure subordinate lawyers and nonlawyer staff — and vendor tools — are used consistently with the rules. |
| 1.5 — Fees | Fees must be reasonable: you can’t bill a client for time an AI tool saved, or for time spent learning a general-purpose tool. |
Rules mapping per the opinion and legal analysis of it. (Source: Frankfurt Kurnit Klein & Selz.)
The confidentiality core: Rule 1.6 and self-learning tools
This is the heart of the opinion. Because many generative-AI tools are self-learning — their outputs could later lead, directly or indirectly, to disclosure of what you put in — the ABA says a lawyer must evaluate that risk and, in appropriate cases, obtain the client’s informed consent before inputting information relating to the representation. And it’s explicit that shortcuts don’t work: “merely adding general, boiler-plate provisions to engagement letters purporting to authorize the lawyer to use GAI is not sufficient.” (Source: ABA.)
There’s an exception worth knowing: if you use a self-learning tool in a matter but don’t input information relating to the representation — using it only for idea generation, say (“outline the elements of a breach-of-contract claim”) — the consent trigger isn’t tripped.
Why de-identifying is smart — but not a magic exemption
Minimizing and de-identifying the data you send is the practical safeguard the opinion points toward. But be precise about what it does. The consent trigger is information relating to the representation, which is broader than “client-identifying data.” Strip the names, addresses and case numbers, but paste “our client, the only female CFO of a Fortune-500 aerospace firm, admits she backdated the option grant,” and the identifiers are gone yet the facts still relate to the representation. So: removing identifiers reduces risk and can keep material out of the tool — a genuinely strong step — but it isn’t a substitute for your own confidentiality and consent judgment.
Verify every output
Competence and the candor duties (Rules 3.1, 3.3 and 8.4(c)) require you to independently verify AI output. Hallucinations make this concrete: in Mata v. Avianca (S.D.N.Y. 2023) a court jointly sanctioned the two attorneys and their firm $5,000 after they filed a brief citing cases ChatGPT had invented. (Source: Mata v. Avianca.) It isn’t a one-off: a database maintained at HEC Paris had catalogued roughly 1,598 court decisions worldwide involving reliance on hallucinated AI material by mid-2026, over a thousand of them in the US. (Source: AI Hallucination Cases Database.)
Supervision and fees
Under Rules 5.1 and 5.3, managerial lawyers must set a GenAI policy and reasonably ensure that associates, paralegals and staff — and any vendor tool — are used consistently with the rules, by analogy to the ABA’s earlier opinions on cloud computing and outsourcing. And under Rule 1.5, fees stay reasonable: you bill for the work actually done, not the hours AI saved you, and not for time spent learning a general-purpose tool.
What you must do before using generative AI — a checklist
- Understand the tool — its benefits, risks, and especially its data-retention and training terms.
- Minimize before input — de-identify and cut the client data the task doesn’t need. A local tool like Occlira does this on your own machine.
- Decide whether informed consent is required, and get specific (not boilerplate) consent when it is.
- Keep information relating to the representation out of self-learning tools wherever you can.
- Independently verify every output — check each citation and factual assertion.
- Supervise your team and vet your AI vendor’s terms before anyone uses the tool.
- Keep fees reasonable — don’t bill for the time AI saved, or for learning a general tool.
- Document your process, so you can show the reasonable steps you took.
How Occlira helps meet the Rule 1.6 duty
Occlira fits at exactly one point in Opinion 512 — the confidentiality (Rule 1.6) step — and only there. Its job is data minimization: it detects and removes personal data from Word, PDF, Excel, email, audio and images on your own computer, with no cloud and no account, so client material never leaves the machine your firm already trusts. Automated detection is a first pass; you review and confirm every item.
Its anonymization is reversible: you swap real values for consistent placeholders like <PERSON_1>,
run the anonymized text through any AI tool, then restore the originals on your own computer. That keeps identifying
material out of a self-learning tool — but, per the section above, remember the consent duty can still attach to
non-identifying facts, so Occlira is a tool that helps with the Rule 1.6 minimization step, not a
compliance guarantee and not legal advice. The mechanics are in
anonymize before ChatGPT, and the file-by-file how-to in
redact Word, PDF and Excel.
Frequently asked questions
It is the American Bar Association’s first formal ethics opinion on lawyers’ use of generative AI, issued on 29 July 2024 by the Standing Committee on Ethics and Professional Responsibility. It doesn’t create an AI-specific rule; it explains how existing Model Rules of Professional Conduct apply when a lawyer uses a GenAI tool.
No. ABA formal opinions are persuasive guidance, not law. Your actual duties come from the rules your jurisdiction has adopted and any guidance from your state bar — many of which track the ABA’s reasoning, but you should check your own jurisdiction.
Competence (1.1), confidentiality (1.6, plus 1.9(c) and 1.18(b)), communication (1.4), meritorious claims and candor (3.1, 3.3, 8.4(c)), supervision of lawyers and staff (5.1 and 5.3), and reasonable fees (1.5).
It can. Because many self-learning tools could later disclose what you put in, the opinion says a client’s informed consent may be required before you input information relating to the representation into such a tool. Whether consent is needed depends on the tool and what you enter.
No. The opinion states plainly that “merely adding general, boiler-plate provisions to engagement letters purporting to authorize the lawyer to use GAI is not sufficient.” Consent, where required, has to be informed and specific.
Not by itself. The consent trigger is inputting “information relating to the representation,” which is broader than “client-identifying data.” Removing names and numbers reduces risk and can keep material out of the tool, but non-identifying facts about the matter can still be information relating to the representation. Minimization is a strong safeguard, not a blanket exemption.
Yes. Competence and the candor duties (3.1, 3.3, 8.4(c)) require you to independently verify AI output. In Mata v. Avianca, a court jointly sanctioned the attorneys and their firm $5,000 for filing a brief with fake, ChatGPT-fabricated cases — the concrete face of this duty.
No. Under Rule 1.5, fees must be reasonable — you bill for the work actually performed, not the hours a tool saved you, and you can’t bill the client for time spent learning a general-purpose AI tool.
Keep client data out of public AI
Minimize client data locally, then use any AI tool on the anonymized copy. Free for 14 days on Windows and macOS. This article is general information, not legal advice.
More: anonymize before ChatGPT · use AI without breaking the GDPR · what is PII? · how your data is handled