ABA Model Rules and AI: What Every Attorney Must Know in 2026

Generative AI has arrived in law firms of every size — from solo practitioners using AI drafting tools to Am Law 100 firms deploying enterprise platforms across entire practice groups. But with adoption comes obligation. The ABA Model Rules of Professional Conduct, originally written long before AI existed, nonetheless govern every attorney's use of these tools today.

This guide breaks down the three rules most directly implicated by AI use, explains what compliance looks like in practice, and gives you actionable steps to deploy AI responsibly.

Rule 1.1 — Competence

Model Rule 1.1 requires lawyers to provide competent representation, which includes "the legal knowledge, skill, thoroughness and preparation reasonably necessary for the representation." Comment 8 to the rule, added in 2012, extends this to technology: attorneys must keep abreast of "changes in the law and its practice, including the benefits and risks associated with relevant technology."

In practice, Rule 1.1 means:

• You must understand what the AI tool does and doesn't do. If you use an AI to research case law, you need to understand how it retrieves results, whether it hallucinates citations, and how current its training data is.
• You cannot blindly rely on AI output. Every AI-generated memo, brief section, or contract clause must be reviewed by a competent attorney before it reaches a client or a court.
• Competence is ongoing. An AI tool that was appropriate last year may have changed its data practices or model behavior. Staying current with your tools is part of the obligation.

Rule 1.6 — Confidentiality

Rule 1.6 prohibits attorneys from revealing information relating to the representation of a client without informed consent. This is the rule most frequently cited in state bar AI guidance, and for good reason — most AI tools are cloud-based, which means client data may be transmitted to third-party servers.

Key compliance considerations under Rule 1.6:

• Review the vendor's data processing agreement (DPA) before using any AI tool with client data. Look specifically for whether the vendor trains its models on your inputs. If it does, uploading client documents could constitute a confidentiality breach.
• Obtain informed consent when appropriate. Some jurisdictions require explicit client consent before using AI tools that process client information.
• Consider data residency. For clients in regulated industries (healthcare, finance, government), confirm where data is processed and stored.
• Anonymize where possible. For research or drafting tasks, redacting client-identifying information before inputting it into AI tools reduces confidentiality risk.

Rule 5.3 — Supervision of Non-Lawyer Assistance

Rule 5.3 requires partners and supervisory attorneys to make reasonable efforts to ensure that non-lawyer conduct is compatible with the professional obligations of the lawyer. State bar opinions across the country have consistently held that AI tools fall within the scope of this rule — they are, in effect, non-lawyer assistants.

What supervision looks like in the AI context:

• Establish firm policies on AI use, including which tools are approved, what data can be input, and what review process AI-generated output must go through.
• Train associates and staff on both the capabilities and limitations of approved tools.
• Create an approval workflow so that AI-assisted work product is reviewed by a senior attorney before delivery.
• Document your AI use, particularly for matter files where AI played a significant role in research or drafting.

Practical Steps for Compliance

Based on the guidance issued by state bars and the ABA's own formal opinions, here is a practical compliance checklist for any firm deploying AI:

1. Maintain a vetted list of approved AI tools with documented data practices for each.
2. Review and execute DPAs before deploying any AI tool with client data.
3. Implement a mandatory review policy — no AI output goes to a client or court unreviewed.
4. Train all attorneys and staff annually on AI ethics obligations.
5. Monitor state bar guidance in your jurisdiction, which is updated frequently.
6. Disclose AI use to clients in engagement letters where required by local rules.

AI is a powerful tool for legal practice, but it does not reduce professional responsibility — it extends it. The attorneys who adopt AI most successfully are those who pair technological capability with rigorous professional judgment.