69% of lawyers use AI with no firm policy in place
A recent survey of 1,300 legal professionals found a stark gap between AI adoption and governance. While 69% reported using general-purpose AI tools for work, only 11% of firms required mandatory AI training and just 9% had a written, enforced policy on AI use.
The implication is clear: most law firm employees are experimenting with ChatGPT, Gemini, Claude, and similar tools without guidance or safeguards.
If your firm hasn't yet established AI governance, the reality is you're probably too late. Employees have already begun using these tools. The question now is whether you'll establish rules before a mistake happens.
The governance gap requires immediate action
AI adoption in law firms is no longer a future consideration. It's happening now, in your office, often without your knowledge.
The first step to reduce risk is straightforward: draft a policy, communicate it to staff, and train employees on appropriate use. At minimum, the policy should cover:
- Which AI tools are approved
- What client and matter information cannot be entered into any AI system
- Requirements that all AI-generated work product receives careful review before use
- Compliance with all court rule disclosure obligations
You don't need months of committee deliberation. A basic policy and training program can be built in a few hours using the same AI tools your employees are already using.
How to build your policy using AI
Start by confirming you're using a paid tier of your chosen AI platform and that your inputs won't be used to train the model. This protects your firm's internal documents.
Create a dedicated project workspace in ChatGPT, Gemini, or Claude. Upload relevant documents that define your obligations and risk profile:
- Existing office policies or employee handbook sections
- Guidance from your malpractice carrier on AI (most have issued something by now)
- State bar ethics opinions applicable to your jurisdiction
- Sample law firm AI policies
- Any vendor agreements for AI tools already in use
Add firm context in the project settings: size, practice areas, and applicable jurisdictions. This ensures the AI tool understands your specific situation with each conversation.
Open a conversation and ask the AI to draft your firm's policy based on the uploaded documents and firm description. Request that it note which source materials informed each section and flag any gaps or conflicts with your jurisdiction's rules.
The first draft won't be perfect. Work through it section by section. Ask the AI to compare it against relevant ethics opinions and sample policies to identify gaps, then revise accordingly. Review the final version carefully to confirm it meets your firm's needs.
Building the training program
Once your policy is finalized, open a new conversation in the same project. Ask the AI to create a training outline based on the policy and firm context.
Have it develop a 60-minute onboarding module for all staff. With that complete, you're ready to train employees on when and how they can use AI in your firm.
The real risk of waiting
Law firm employees aren't using AI because they're reckless. They're using it because firms aren't moving fast enough to establish clear rules.
The governance gap won't close on its own. But closing it doesn't require extensive resources. Once you've shared the policy and trained your staff, you'll have reduced your firm's immediate risk while gaining the AI fluency needed to make better technology decisions down the road.
Your membership also unlocks:
