ChatGPT for Lawyers: What Law Firms Can Use It For and What to Keep Out

TL;DR

• Lawyers can use ChatGPT. Courts have sanctioned lawyers for not checking it, not for using it.
• Every fact, quote and citation it produces needs a lawyer's check before it goes to a client or a court.
• The ABA says client informed consent is required before putting client information into a self-learning AI tool whose output could lead to disclosure outside the firm, and boilerplate in an engagement letter is not enough. State bars differ, so check yours.
• A Business workspace starts at 2 seats. Two Standard seats cost $40 a month on annual billing.
• If your firm handles health records, keep them only in an eligible OpenAI product. OpenAI offers ChatGPT Enterprise with a Regulated Workspace under a signed BAA.

Can lawyers use ChatGPT for client work?

Yes, with limits. No rule bans it. The rules that apply are the ones lawyers already follow: competence, confidentiality, supervision, candor to the court and reasonable fees. The American Bar Association applied them to generative AI in Formal Opinion 512 (July 29, 2024).

The federal judge who sanctioned lawyers in the first well-known AI citation case put it this way: "there is nothing inherently improper about using a reliable artificial intelligence tool for assistance. But existing rules impose a gatekeeping role on attorneys to ensure the accuracy of their filings."

What can lawyers use ChatGPT for?

• First-pass contract review. Ask it to flag unusual clauses and missing terms against a checklist you provide. A lawyer still reads the contract.
• Summaries. Depositions, discovery responses, long email chains. Spot-check the summary against the source.
• Client emails and intake follow-ups. Draft, then edit for facts and tone.
• First drafts of demand letters, motions and memos. Verify every fact, quote and citation before anything is sent or filed.
• Research starting points. Ask for issues and search terms, then do the research in a legal database. Do not treat the answer as authority.
• Firm admin. Job posts, meeting notes and internal policies.
• Marketing and business development, with workspace agents. A workspace agent is a reusable ChatGPT workflow that OpenAI offers in Business workspaces, and a firm can use one to draft blog posts, newsletters and a weekly content plan from a lawyer's notes. Marketing work does not need client files, so it is a low-risk place to start, but lawyer advertising rules (ABA Model Rule 7.1 and your state's version) still apply, so a lawyer reviews anything before it is published.

The ABA gives one clear case where no client consent question arises: using the tool "for idea generation in a manner that does not require inputting information relating to the representation."

What happens when lawyers do not check the output?

They get sanctioned, and sometimes disciplined. Three examples from the court records:

• Mata v. Avianca (S.D.N.Y., June 22, 2023). Lawyers filed fake opinions generated by ChatGPT, then stood by them after the court questioned them. The court found bad faith and imposed a $5,000 penalty. It also required letters to the client and to each judge falsely named as the author of a fake opinion.
• Fletcher v. Experian (5th Cir., February 18, 2026). The court found counsel used AI to draft a substantial part of a reply brief and did not verify it. It imposed a $2,500 sanction.
• People v. Crabill (Colorado Presiding Disciplinary Judge, November 22, 2023). A lawyer cited cases he found through ChatGPT without reading them. When he learned they were fictitious, he did not tell the court and blamed a legal intern. In an agreed (stipulated) discipline, he was suspended for a year and a day, with 90 days served and the rest stayed on a two-year probation.

Courts are also writing their own AI rules, and they differ by court and by judge:

• Disclosure and certification. One Eastern District of Texas judge, Marcia Crone (Standing Order MC-11, signed July 20, 2026), requires a "Certificate of Generative Artificial Intelligence Usage" with any AI-assisted pleading. The Northern District of Texas (Local Rule 7.2(f), effective September 3, 2024) requires a brief prepared with generative AI to say so on its first page.
• Verification duty with sanctions. The District of Kansas (Standing Order 26-01, January 28, 2026) makes filers responsible for verifying AI-assisted content and warns that unverified filings can be struck or sanctioned. It does not require disclosure by default, but the court may order a sworn statement about AI use in a particular case.
• No AI rule at all. The Fifth Circuit considered requiring lawyers to certify AI use and decided against it. In Fletcher it said existing rules "were sufficient to deter misconduct related to generative AI use."
• Statewide rules to replace the patchwork. Florida's Supreme Court amended its court rules effective June 15, 2026, so a lawyer or party signing a filing represents that the legal authorities cited exist and are accurately cited. The court called the rule a statewide, uniform replacement for varied local orders on AI disclosure and certification. New York added a new Part 161 to its court rules effective June 1, 2026. Its policy says attorneys should not be required to disclose AI use, and its optional model rule, which individual courts may adopt, has the signer certify that they reviewed the paper for fabricated cases.
• Still moving. Texas has proposed a change to its Civil Procedure Rule 13, prompted by AI misuse, that would have signers represent they verified a filing's accuracy and that its citations are not fabricated. It has preliminary approval only, not final approval, as of October 19, 2026.

Rules change fast. Check the local rules and the assigned judge's orders in every case.

What do the ethics rules say about client information?

The ABA says this about confidentiality in Formal Opinion 512:

• Before inputting client information, lawyers "must evaluate the risks that the information will be disclosed to or accessed by others outside the firm."
• For self-learning tools whose output could lead to disclosure, "a client's informed consent is required prior to inputting information relating to the representation into such a GAI tool."
• Obtaining informed consent by "merely adding general, boiler-plate provisions to engagement letters purporting to authorize the lawyer to use GAI is not sufficient."
• Lawyers should read the tool's terms of use and privacy policy to learn who can access what they input.

The opinion was written about self-learning tools and says its conclusion rests on the risks as of July 2024. OpenAI says a Business workspace is not used for training. That changes the risk analysis. It does not answer the consent question for you. Ask your ethics counsel or state bar.

The ABA's opinion is not binding. Your state's rules of professional conduct and your state bar's guidance control, and states do not all say the same thing. Here is what some of them say about client consent before you input client information (current as of October 19, 2026):

What the ABA and selected states say about client consent for AI tools

Source	Position on client consent
ABA Formal Opinion 512 (July 2024, still the ABA's only AI opinion)	Required for self-learning tools. Boilerplate is not enough.
California State Bar guidance (2026, replaces 2023)	Do not input confidential information into a tool with material confidentiality or security risks without informed client consent. Lawyers must consider telling clients about AI use. Proposed AI amendments to the state's Rules of Professional Conduct have not been adopted.
Florida Bar Opinion 24-1 (2024)	Recommended, not required, when confidential information goes to a third-party tool. Not required if none is disclosed.
Texas Opinion 705 (2025)	Lawyers should consider informing clients and may need consent. Without confidence in the tool's protections, no confidential input without consultation and consent.
New York State Bar task force report (2024)	No mandate. Informing the client or getting consent is the lawyer's call. The duty to protect data stays.
Pennsylvania Joint Formal Opinion 2024-200 (2024, Pennsylvania and Philadelphia bar committees)	Lawyers must educate clients and seek informed consent where benefits outweigh risks. Do not input confidential information into tools without adequate protections.
Oregon Opinion 2025-205 (2025)	Consent required to use client information in an open model. Otherwise anonymize or redact.
Alaska Opinion 2025-1 (2025)	Informed consent before inputting confidences if the tool may disclose them to a third party. Otherwise anonymize.

Some of these are formal ethics opinions and some are task force reports. Most are advisory, not binding. Colorado went further: in January 2026 its Supreme Court amended the Rules of Professional Conduct to say a lawyer's use of technology, especially AI, can implicate competence, communication, fees, confidentiality and candor, and that a lawyer may be disciplined for resulting violations. It does not require client consent.

Check your own state bar's current guidance before you set firm policy. This page is general information, not legal advice.

Which ChatGPT plan fits a law firm?

ChatGPT Plus, Business and Enterprise compared for law firms

What you get	ChatGPT Plus	ChatGPT Business	ChatGPT Enterprise
Price	$20 per month per person	Standard seat: $20 per month on annual billing, $25 monthly	Custom, through sales
Training on your data	May be used unless the user opts out	OpenAI says it does not train on workspace data	OpenAI says it does not train on workspace data by default
Admin controls	None	Admin console, roles, spend controls, SSO	Adds SCIM, role-based access, data residency, key management
Seats	1	2 to 200	Larger firms
Fits	One lawyer, no client information	Small and mid-size firms with a written AI policy	Firms that need audit and compliance controls

Business costs this much on list prices (Standard seats, OpenAI pricing as of October 2026):

ChatGPT Business Standard seat cost by firm size, as of October 2026

Seats	Annual billing, per month	Monthly billing, per month
2 (solo lawyer plus one staff member)	$40	$50
5	$100	$125
10	$200	$250
25	$500	$625

Premium seats cost $100 per month on annual billing ($125 monthly) and give five times the usage. Prices can vary by country. See OpenAI's pricing page for current numbers.

Health records. ChatGPT Business is not on OpenAI's HIPAA-eligible products list, so a BAA does not cover it. A standard ChatGPT Enterprise workspace is not covered by default either. OpenAI's list includes ChatGPT for Enterprise with a Regulated Workspace, ChatGPT for Healthcare and the API with modified retention, among others, and each product needs a signed BAA with OpenAI.

Some features are excluded even then, including sharing workspace agents with agent-owned connections, event-triggered scheduled tasks and improved memory. Personal injury and medical malpractice firms should keep patient information only in an eligible OpenAI product under a signed BAA, such as ChatGPT for Enterprise with a Regulated Workspace, and ask counsel whether HIPAA applies to the firm before using any AI tool with it.

What should a firm AI policy cover?

• Which plan and which accounts are approved. No personal accounts for client work.
• What may be entered: no client information until your consent and confidentiality analysis is done.
• Verification: every citation checked in a legal database, every quote checked against the source, by a lawyer.
• Court rules: who checks local rules and standing orders before each filing.
• Client communication: what the engagement letter says about AI, with client-specific terms, not boilerplate.
• Training for lawyers and staff, and supervision of nonlawyers who use the tool.

ABA Formal Opinion 512 expects managerial lawyers to "establish clear policies regarding the law firm's permissible use of GAI."

What does ChatGPT connect to?

ChatGPT Business can connect to tools many firms already use, including Outlook, SharePoint, Gmail, Google Drive and Slack, and there is a ChatGPT add-in for Word that an admin can turn off. In Business, an admin sets which connections are allowed. Availability depends on the connection, the plan and the workspace settings. Do not connect any tool to client files until the firm's policy says so.

Workspace agents can use the same connections. OpenAI bills workspace agent usage with credits, so check its current pricing page before you plan a budget.

Can 360 Automation AI set this up for a law firm?

360 Automation AI is an OpenAI Select Partner. ChatGPT Business is the workspace our Team plan runs on. We set it up and manage it for up to 20 employees, cover the seat costs, train the team and automate up to two business processes a month. The Team plan is $2,899 per month (promotional price) plus a $4,997 onboarding fee. See the plans page.

We also write the firm's AI policy with you and train your lawyers and staff on it.

If your firm needs a different OpenAI product, such as an Enterprise workspace for regulated data, we set that up too. We are an OpenAI Select Partner.

Want help setting this up for your firm?

360 Automation AI sets up ChatGPT workspaces for businesses. Book a free 30-minute call. We look at what your firm needs and tell you honestly which OpenAI plan fits.

Sources

• ABA Formal Opinion 512, July 29, 2024
• Mata v. Avianca, Inc., No. 22-cv-1461 (PKC), S.D.N.Y., Opinion and Order on Sanctions, June 22, 2023
• Fletcher v. Experian Information Solutions, Inc., No. 25-20086, 5th Cir., Feb. 18, 2026
• People v. Crabill, No. 23PDJ067 (Colo. O.P.D.J. Nov. 22, 2023), stipulation to discipline
• State and bar guidance: State Bar of California, Practical Guidance for the Use of Generative AI in the Practice of Law (2026); The Florida Bar Ethics Opinion 24-1 (Jan. 19, 2024); Texas Professional Ethics Committee Opinion 705 (Feb. 2025); NYSBA Task Force on AI report (Apr. 2024); Pennsylvania Joint Formal Opinion 2024-200 (2024); Oregon State Bar Formal Opinion 2025-205; Alaska Bar Ethics Opinion 2025-1; Colorado Supreme Court Rule Change 2026(02) (Jan. 8, 2026)
• Court orders: E.D. Tex. Standing Order MC-11 (Judge Crone, July 20, 2026); N.D. Tex. Local Rule 7.2(f) (Special Order 2-98, effective Sept. 3, 2024); D. Kan. Standing Order 26-01 (Jan. 28, 2026)
• Statewide court rules: Florida Supreme Court, SC2026-0673 (May 28, 2026), amending Fla. R. Gen. Prac. and Jud. Admin. 2.515; New York 22 NYCRR Part 161, Use of Artificial Intelligence Technology (effective June 1, 2026); Supreme Court of Texas Misc. Docket 26-9054 (June 26, 2026, preliminary approval)
• ABA Model Rule 7.1, Communications Concerning a Lawyer's Services
• OpenAI: Business pricing; HIPAA eligible products and functionality; ChatGPT Workspace Agents for Enterprise and Business; Introducing workspace agents in ChatGPT (Apr. 22, 2026); ChatGPT Business release notes