AI Billing Consent Requirements by State: What Your Firm Must Disclose

Quick Answer: Determine applicable duties with firm counsel. Local processing alone does not establish consent, privilege, or disclosure compliance. The answer depends on applicable rules, the matter, client instructions, contracts, and how the tool actually handles data.

The Short Answer

Do not use a cloud-versus-local label as a consent decision. Identify what information the tool receives, who can access it, and how it is retained, then review applicable confidentiality and communication duties.

The ABA Framework

ABA Formal Opinion 512 (2024) provides the baseline framework:

"All lawyers should read and understand the Terms of Use, privacy policy, and related contractual terms and policies of any GAI tool they use."

The opinion emphasizes that attorneys must:

1. Understand the technology they're using
2. Assess confidentiality risks based on how data is handled
3. Obtain informed consent when confidentiality cannot be fully protected
4. Supervise AI outputs for accuracy

While Opinion 512 doesn't mandate blanket consent for all AI use, it makes clear that informed consent may be required depending on how the tool handles client data.

State-by-State Analysis

This guide does not determine the legal requirements of any jurisdiction. For each state below, have firm counsel verify current professional-conduct rules and applicable ethics opinions before approving a tool or engagement-letter clause.

Illinois

Determine applicable duties with firm counsel using current Illinois authorities and the facts of the matter. Local processing alone does not establish consent, privilege, or disclosure compliance.

California

Determine applicable duties with firm counsel using current California authorities and the facts of the matter. Local processing alone does not establish consent, privilege, or disclosure compliance.

New York

Determine applicable duties with firm counsel using current New York authorities and the facts of the matter. Local processing alone does not establish consent, privilege, or disclosure compliance.

Texas

Determine applicable duties with firm counsel using current Texas authorities and the facts of the matter. Local processing alone does not establish consent, privilege, or disclosure compliance.

Florida

Determine applicable duties with firm counsel using current Florida authorities and the facts of the matter. Local processing alone does not establish consent, privilege, or disclosure compliance.

Issues to Escalate for Firm Review

The following issues warrant specific review with firm counsel; they do not establish a universal consent rule:

1. The Matter Involves Extraordinary Sensitivity

• Trade secrets
• Criminal defense (especially death penalty cases)
• National security matters
• Celebrity/high-profile clients

2. The Client Has Expressed Privacy Concerns

Record the client's concerns and instructions and determine what information, consent, or alternative workflow is appropriate.

3. The AI Tool's Terms Create Unusual Risks

If your vendor's ToS includes:
- Rights to use data for model training
- Broad access permissions for employees
- Unclear data retention policies
- Processing in foreign jurisdictions

Review these terms with firm counsel to determine whether the tool is suitable and what client communication is required.

4. Opposing Counsel Could Exploit It

Have firm counsel assess privilege and legal-process questions using the actual workflow, contracts, and applicable authority. Neither a vendor promise nor a consent clause guarantees privilege protection.

Local Processing Does Not Resolve the Legal Analysis

Determine applicable duties with firm counsel. Local processing alone does not establish consent, privilege, or disclosure compliance. Review email-provider storage, backups, device access, support records, and any other services in the workflow; do not infer that vendor legal-process exposure is absent.

The ABA's guidance accompanying Formal Opinion 512 discusses competence, confidentiality, communication, and fees. Review the opinion and applicable state guidance in the context of the particular tool and matter.

Sample Engagement Letter Language

These are discussion drafts for firm counsel, not determinations of sufficient disclosure or informed consent. Use a statement only after verifying that it accurately describes the firm's configuration and meets applicable duties.

For Cloud-Based AI Tools

Technology Disclosure and Consent

Our firm uses artificial intelligence software to assist with time tracking, billing, and other administrative functions. This software may process information related to your matter, including email communications, on third-party cloud servers operated by our software providers.

We have evaluated our providers' security practices and believe they meet professional standards for data protection. However, we want to ensure you understand that your information may be transmitted outside our firm's direct control.

By signing this engagement letter, you acknowledge this disclosure and consent to our use of these tools in connection with your representation. If you have concerns about this technology use or prefer that we use alternative methods, please notify us immediately.

For Local AI Tools

Technology Disclosure

Our firm uses AI-assisted billing software to improve efficiency. We have specifically selected a tool whose AI analysis runs locally on our firm's own computers. Your communications remain in the email system our firm already uses and are not transmitted to any third-party AI provider.

The Bottom Line

Document the sources reviewed, configuration, client instructions, and firm approval; revisit the assessment when any of these change.

This article is for informational purposes only and does not constitute legal advice. State ethics rules evolve, and interpretations vary. Consult your state bar ethics hotline for current guidance specific to your jurisdiction.

ATTORNEY ADVERTISING

Comments

No comments yet. Be the first to comment!

Check whether IntelliBill fits your billing workflow.

The planned Mac pilot covers email-to-draft review and a reviewed CSV handoff. Access is by request; activation depends on a supported mailbox connector and completed release testing. Read the current availability and setup guide before arranging working-data access.

The hosted Product Tour uses fictional browser-local data and creates no working-data workspace.