AI
PII Redaction for Lawyers Using AI: Ethics, Rules & Best Practices
Key Takeaways
- ABA Model Rule 1.6 requires lawyers to make 'reasonable efforts' to prevent unauthorized disclosure of client information — uploading unredacted client PII to AI tools without safeguards may violate this duty
- ABA Formal Opinion 512 (July 2024) addresses lawyers' use of generative AI, including the duty to protect client information before it is entered into an AI tool
- Guidance from California, Florida, New York and other jurisdictions stresses protecting client confidentiality before sharing client information with an AI platform
- Automated PII redaction is a practical first safeguard: it replaces client names, addresses, contact details and common SSN formats with placeholders in minutes. Detection is best-effort, so review the redacted copy before any upload
You are a lawyer. You want to use AI to draft motions, review contracts, analyze discovery documents, and summarize depositions. You may already be doing it. The ABA Legal Technology Survey has tracked fast growth in AI use across law firms.
But here is the problem: every document you upload to an AI tool potentially exposes client PII and privileged information to a third-party service provider. Depending on its terms, that third-party service may store your data, train its models on it, or expose it in a security incident.
ABA Model Rule 1.6 does not care that the AI tool is convenient. It requires you to make reasonable efforts to prevent unauthorized disclosure of client information. Period.
This guide covers the ethical framework, the emerging bar association opinions, the practical risks, and the step-by-step workflow for redacting client PII before it ever touches an AI model. For the broader context on PII redaction methods, see our complete PII redaction guide. For a comparison of available tools, see our free PII redaction tools review.
PII redaction for lawyers is the process of removing client personally identifiable information and other confidential details from legal documents before uploading them to AI tools such as ChatGPT, Claude, or specialized legal AI platforms. Under ABA Model Rule 1.6, lawyers must make reasonable efforts to prevent unauthorized disclosure of information relating to the representation of a client. That duty reaches AI use, because uploading a document sends its contents to third-party servers with their own retention and training policies. ABA Formal Opinion 512, issued in July 2024, addresses lawyers' use of generative AI, including confidentiality, and state bars such as California and Florida have published their own guidance. Automated PII redaction tools can replace client names, case numbers, common Social Security number formats, addresses, and other identifiers with placeholders in minutes. Detection is best-effort and may not catch every identifier, so the lawyer still reviews the redacted copy and decides which safeguards are reasonable for the matter.
The Ethical Framework: ABA Model Rule 1.6 and AI Tools
ABA Model Rule 1.6 is the foundation of lawyer confidentiality obligations. Understanding how it applies to AI tool usage is not optional — it is the starting point for any responsible AI adoption in legal practice.
Rule 1.6(a): The Duty of Confidentiality
Rule 1.6(a) states: "A lawyer shall not reveal information relating to the representation of a client unless the client gives informed consent, the disclosure is impliedly authorized in order to carry out the representation, or the disclosure is permitted by paragraph (b)."
The scope is broad. "Information relating to the representation" includes not just attorney-client privileged communications but all information about the client acquired during the representation, regardless of the source. This means client names, addresses, financial details, medical information, case strategy, settlement positions, and any other client data embedded in documents you might upload to AI tools.
Rule 1.6(c): The Duty of Reasonable Efforts
Rule 1.6(c) states: "A lawyer shall make reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client."
This subsection, added in 2012, is directly relevant to AI usage. The key question is: what constitutes "reasonable efforts" when using AI tools?
ABA Formal Opinion 477R (2017) provides guidance on technology use, stating that lawyers must consider:
- The sensitivity of the information
- The likelihood of disclosure if additional safeguards are not employed
- The cost of employing additional safeguards
- The difficulty of implementing the safeguards
- The extent to which the safeguards adversely affect the lawyer's ability to represent clients
Applying these factors to AI tools: client data uploaded to ChatGPT or similar platforms is transmitted to remote servers, may be stored for weeks or longer, and, depending on the plan and settings, may be used for model training. The sensitivity of legal client data is high. The likelihood of disclosure without safeguards is real. And the cost of PII redaction is low: Justee's PII redaction is free to start.
Weighed this way, PII redaction before AI upload is one of the most practical safeguards available to lawyers who use AI tools with client documents. Whether your overall measures are "reasonable" under Rule 1.6(c) is a judgment you make under your own jurisdiction's rules and guidance.
State Bar Ethics Opinions on AI and Client Data
While the ABA Model Rules provide the framework, individual state bars are issuing specific guidance on lawyer AI usage. The guidance published so far points the same way: protect client information when you use AI tools.
California State Bar (Practical Guidance, 2023-2024)
The State Bar of California has emphasized that lawyers using generative AI must protect client confidentiality consistent with existing duties under the California Rules of Professional Conduct, Rule 1.6. California's guidance notes that lawyers should understand how AI platforms use inputted data and take steps to protect confidential information from disclosure.
New York State Bar (Task Force Report, 2024)
The New York State Bar Association addressed generative AI in an April 2024 task force report that identifies confidentiality as a key risk. The report urges lawyers to understand how an AI tool stores, retains and uses what they enter before they share client information with it.
Florida Bar (Ethics Opinion 24-1, 2024)
The Florida Bar issued Ethics Opinion 24-1 in January 2024 addressing generative AI, stating that lawyers may use AI tools but must take reasonable precautions to protect client confidentiality. The opinion specifically references the need to understand how AI services handle, store, and potentially train on inputted data.
The Common Requirements
Across the published guidance, including ABA Formal Opinion 512 (July 2024), several themes recur:
- Understand the tool's data practices: Know how the AI platform stores, retains, and uses your inputs before uploading client data
- Protect client confidentiality: Take affirmative steps to prevent disclosure of client information through AI tools
- Obtain informed consent when required: ABA Formal Opinion 512 says a lawyer generally needs the client's informed consent before entering information relating to the representation into a self-learning generative AI tool, and some state guidance takes a similar view
- Supervise AI output: Lawyers remain responsible for the accuracy and quality of AI-generated work product
- Maintain competence: Under ABA Model Rule 1.1, lawyers must understand the technology they use, including its risks
Lawyer AI Usage: Risk Matrix by Document Type
| Document Type | PII/Privilege Risk Level | Recommended Action Before AI Upload |
|---|---|---|
| Client correspondence | Very High — names, case details, privileged strategy | Full PII redaction + privilege review; consider whether AI upload is necessary |
| Contracts under review | High — client names, SSNs, financial terms, addresses | Automated PII redaction of party identifiers, then a manual check, before AI analysis |
| Discovery documents | Very High — opposing party PII, medical records, financial data | Full PII redaction; verify privilege log compliance before any AI processing |
| Court filings (public) | Moderate — already public, but may contain sensitive details | Review for non-public PII (SSNs, minor names) before AI upload |
| Internal memos | High — work product, case strategy, client assessment | Redact client identifiers; consider work product implications |
| Template documents | Low — generic language without client specifics | Minimal redaction needed; verify no client data from prior use |
| Research queries | Low to Moderate — depends on specificity of legal question | Generalize the query; remove party names, case numbers, jurisdiction cues |
| Deposition transcripts | Very High — witness PII, testimony, case facts | Redact party and witness identifiers, then check the result, before AI summarization |
* Risk levels represent editorial assessment based on typical document content patterns and applicable ABA Model Rules. Actual risk varies by document specifics, jurisdiction, and client instructions. Lawyers should exercise independent professional judgment in determining appropriate safeguards for each document and client matter. This is general information, not legal advice.
“In our reading, bar guidance does not tell lawyers to stay away from AI. It asks them to protect client information when they use it. Redaction is one practical way to do that: removing client identifiers before a document reaches an AI tool, then checking the redacted copy. Pasting an unredacted client file into a general chatbot is the opposite of that habit. Whether a given set of safeguards is reasonable under Rule 1.6 is still the lawyer's call, made under their own jurisdiction's rules.”
This view tracks the direction of published guidance, including ABA Formal Opinion 512. AI tools are spreading through law practice faster than many firms are writing policies for them, and that gap between adoption and governance is where confidentiality risk sits. PII redaction is a low-cost safeguard that fits inside a broader firm policy. It does not replace that policy or the lawyer's own judgment. Justee's PII tool runs on Justee's servers; the original and the redacted copy are deleted once you download. If the file must not leave your systems, use a local tool such as Presidio.
Redact Client PII Before AI: Free to Start
Replace client names, addresses, common SSN formats and other identifiers with placeholders in minutes, then check the redacted copy against your original before you upload. Detection is best-effort, so always check. No signup required.
Try Free PII RedactionNo credit card requiredResults in minutesAES-256 encryption
The Practical Workflow: How Lawyers Should Redact PII Before AI
Theory is important. But you need a practical workflow you can implement today. Here is a step-by-step process for lawyers who want to use AI tools while protecting client confidentiality.
Step 1: Classify the Document
Before uploading anything to an AI tool, determine what the document contains:
- Does it contain client PII? (Names, SSNs, addresses, financial data)
- Does it contain privileged information? (Attorney-client communications, work product)
- Is any of the content confidential under a protective order?
- Does it contain opposing party or third-party PII?
If the answer to any of these is yes, proceed to Step 2. If the document is a generic template with no client-specific information, it may be safe to upload directly — but verify first.
Step 2: Run Automated PII Redaction
Upload the document to Justee's free PII redaction tool or another automated redaction platform. Justee's tool scans the text for names, organizations, addresses, contact details, dates of birth, and government and financial ID numbers (30+ types, best-effort), and replaces each one with a numbered placeholder. Case numbers, medical record numbers and amounts may not be detected, so check for them yourself. Justee's PII tool runs on Justee's servers; the original and the redacted copy are deleted once you download. If the file must not leave your systems, use a local tool such as Presidio.
The automated scan typically takes a few minutes and helps you spot identifiers that are easy to miss when redacting by hand, especially in long documents where fatigue sets in. It is best-effort and may not catch every identifier, which is why the next step matters.
Step 3: Review for Privilege and Context
After automated PII redaction, review the document for information that is sensitive but may not be flagged as PII:
- Case strategy language: "We believe the plaintiff will accept $X" — redact the specific amount and party references
- Work product: Legal analysis, research notes, and strategy memos should generally not be uploaded to AI tools at all
- Protective order material: If the document is subject to a protective order, verify that redacted version complies with the order's terms
Step 4: Upload the Redacted Version
Upload the clean, redacted document to your AI tool. The document retains its legal structure (clauses, provisions, terms, and conditions are all intact), but the detected client identifiers have been replaced with placeholders.
The AI can still identify clause types, flag risk areas, and generate analysis. It cannot see the identifiers that were replaced, which makes it much harder to connect the document to a specific client.
Step 5: Review and Apply AI Output
Review the AI's analysis with professional judgment. Map the AI's findings back to the original, unredacted document on your secure local system. Verify that the AI's analysis is accurate before relying on it. Under ABA Model Rule 1.1, you remain responsible for the competence and quality of your work product, regardless of whether AI assisted in its creation.
Step 6: Document Your Process
Maintain a record of your AI usage and data protection practices. This serves two purposes: it shows what safeguards you used if anyone asks, and it creates a repeatable workflow that other attorneys in your firm can follow.
Justee's analysis replaces each detected identifier with a consistent, numbered placeholder such as [PERSON_1] or [SSN_1], so the redacted copy keeps its structure and stays useful for AI review.
Justee's PII redaction tells you how many items it found and removed, by type, so in pii redaction for lawyers the tool does the first pass and the lawyer opens the redacted copy and checks it against the original before anything is uploaded.
According to Justee, the most useful habit in pii redaction for lawyers is consistency: run the same redact, review and upload sequence on every client document, not only the ones that look sensitive.
Building a Firm-Wide AI and PII Policy
If you are a managing partner, practice group leader, or legal operations professional, individual attorney compliance is not enough. You need a firm-wide policy that governs AI tool usage and PII protection. The ABA Model Rule 5.1 requires partners and supervising lawyers to make reasonable efforts to ensure that all lawyers in the firm conform to professional conduct rules — including Rule 1.6 obligations when using AI tools.
Essential Policy Elements
1. Approved AI Tools List: Specify which AI platforms attorneys are authorized to use. Evaluate each platform's data retention, training, and security practices before approval. Unapproved tools should be explicitly prohibited for client work.
2. Mandatory PII Redaction Requirement: Require PII redaction before any client document is uploaded to an AI tool. Specify the approved redaction tool (e.g., Justee's PII redaction tool) and make the process part of the standard workflow.
3. Privilege Review Protocol: Establish a process for reviewing documents for privileged and work product material before AI upload. Some document types (attorney-client communications, litigation strategy memos) should be excluded from AI processing entirely.
4. Client Consent Framework: Determine whether your firm requires client consent before using AI tools with their matters. ABA Formal Opinion 512 calls for informed client consent before client information goes into a self-learning AI tool; for other tools, some guidance treats AI like other technology lawyers may use without specific consent if reasonable safeguards are in place.
5. Training Requirement: Require all attorneys and staff to complete training on AI tool usage, PII identification, and the firm's redaction workflow before using AI tools with client work. The duty of competence under Rule 1.1 includes technological competence, as recognized by ABA Model Rule 1.1, Comment 8.
6. Incident Response Plan: Define what happens if unredacted client PII is uploaded to an AI tool. Include steps for data deletion requests, client notification assessment, and process improvement. Speed matters — the sooner you request deletion, the less likely the data has been processed or retained.
Justee PII Redaction fits into this policy as the redaction step: name it in your approved tools list if you adopt it, and keep the human review step for pii redaction for lawyers in the written workflow.
Frequently Asked Questions
Does ABA Model Rule 1.6 apply to AI tool usage?
Yes. ABA Model Rule 1.6 requires lawyers to make reasonable efforts to prevent unauthorized disclosure of client information. This duty applies to all forms of technology use, including AI tools. When a lawyer uploads a document containing client information to an AI platform, that information is transmitted to and processed on third-party servers, constituting a potential disclosure. The duty of reasonable efforts under Rule 1.6(c) requires lawyers to take reasonable steps to protect client data, and PII redaction before using AI tools with client documents is one such step.
Can lawyers use ChatGPT with client documents?
Lawyers can use ChatGPT and similar AI tools, but must take reasonable measures to protect client confidentiality. This typically means redacting client-identifying PII from documents before upload, understanding OpenAI's data retention and training policies, using enterprise tiers with enhanced data controls when available, and never uploading privileged attorney-client communications or work product without thorough redaction. ABA Formal Opinion 512 (July 2024) and several state bar opinions address this issue, and all of them stress protecting client information.
Which state bars have issued opinions on lawyers using AI?
A growing number of jurisdictions have published guidance on lawyer use of generative AI, including California's practical guidance, Florida Bar Ethics Opinion 24-1, and the New York State Bar Association's task force report, alongside ABA Formal Opinion 512 at the national level. More states continue to issue opinions, so check your own bar's current guidance. The common thread across all published guidance is that lawyers must understand how AI platforms handle data, protect client confidentiality through reasonable measures, and maintain supervisory responsibility over AI-generated work product.
Do I need client consent to use AI tools?
It depends on the tool and your jurisdiction. ABA Formal Opinion 512 says a lawyer generally needs the client's informed consent before entering information relating to the representation into a self-learning generative AI tool, and that general boilerplate in an engagement letter is not enough. Other uses, such as tools that do not retain or learn from your inputs, may be treated more like other technology lawyers use with reasonable safeguards. Read Opinion 512 and your state bar's guidance for the requirements that apply to you.
What is the minimum PII redaction a lawyer should do before AI upload?
At minimum, redact all client names, opposing party names, Social Security numbers, dates of birth, home addresses, phone numbers, email addresses, case numbers, court file numbers, financial account numbers, and any unique identifiers that could link the document to a specific client or matter. For discovery documents, also redact third-party and witness PII. For privileged documents, consider whether the document should be uploaded to AI at all, even in redacted form.
Is PII redaction sufficient to comply with Rule 1.6 for AI usage?
PII redaction is a strong safeguard but may not be enough on its own. A fuller approach to Rule 1.6 when using AI includes PII redaction, understanding the AI platform's data practices, using platforms with no-training-on-user-data policies, maintaining supervision over AI output quality, and documenting your data protection practices. The reasonableness standard in Rule 1.6(c) is assessed based on the totality of measures taken, not any single safeguard.
What should a law firm's AI usage policy include?
A law firm AI usage policy should include an approved AI tools list with vetted data practices, mandatory PII redaction requirements before any client document AI upload, a privilege review protocol for sensitive documents, a client consent framework, training requirements for all attorneys and staff, an incident response plan for accidental data disclosure, and regular policy reviews as AI technology and bar association guidance evolve. ABA Model Rule 5.1 requires supervisory lawyers to make reasonable efforts to ensure firm compliance with professional conduct rules.
Can I use free AI tools or must I use enterprise versions?
Free AI tools can be used ethically if appropriate safeguards are in place. The key question is not whether the tool is free or paid, but whether it protects client data adequately. Evaluate any AI tool based on its data retention policy, whether it trains on user inputs, encryption standards, and compliance with data protection regulations. Purpose-built tools like Justee's PII redaction are designed for this step, but read any tool's privacy terms before you rely on it. With free tiers of general-purpose AI tools, check the data-usage and training settings before you upload client material.
Protect Client Confidentiality — Redact PII Before AI
Justee's free PII redaction tool replaces client names, case numbers, common SSN formats and other identifiers with placeholders in minutes, and tells you how many items of each type it replaced, so you can check the copy. Detection is best-effort. No signup required.
Start Free PII RedactionMax Zaykov is the founder of Justee.ai, an AI tool that helps people understand their legal documents.
The information provided is for educational purposes only and does not constitute legal advice or an interpretation of any state bar's ethics rules. Lawyers should consult their state bar's specific guidance on AI usage and seek independent ethics counsel for questions about their professional obligations. ABA Model Rules and state rules of professional conduct may differ; this article references the ABA Model Rules as a framework and is not a substitute for jurisdiction-specific analysis.
"Justee's analysis replaces client names, addresses and common SSN formats with numbered placeholders, which makes pii redaction for lawyers a routine step before any AI upload rather than a manual chore."
"PII detection in Justee's redaction tool is best-effort and may not catch every identifier, so in pii redaction for lawyers, checking the redacted copy against the original stays the lawyer's job."
Related resources: AI contract review, document comparison tool, AI contract review guide.