Course Content
Module 1: Ethical Risk Landscape & Professional Duties
Welcome & How to Use This Course The Ethical Risk Landscape in Legal AI Professional Duties When AI Is Involved Module 1 Knowledge Check (Self‑Check)
0/4
Module 2: Supervised Use, Documentation & Verification
What “Supervised Use” Means (and Why It Matters) Documentation & Communication: Make AI Reviewable Verification Techniques for AI‑Assisted Legal Work Module 2 Knowledge Check (Self‑Check)
0/4
Module 3: Avoiding Unauthorized Practice of Law
Avoiding Unauthorized Practice of Law (UPL) in the Age of AI UPL Boundary Spectrum: Safe Tasks vs. Legal Advice Prompting With Role Guardrails (Templates You Can Reuse) Module 3 Knowledge Check (Self‑Check)
0/4
Module 4: Confidentiality & Handling Sensitive Outputs
Confidentiality, Privilege & Data Privacy: Safe Inputs Handling Sensitive Outputs: Review, Redaction, Storage Incident Response & Vendor Due Diligence Module 4 Knowledge Check (Self‑Check)
0/4
Module 5: Scenarios, Checklists & Continuous Improvement
Scenario Lab: Ethical Decision‑Making With AI Quick Reference Cards: Checklists You Can Use Immediately Implementation Playbook: Policy, Training, Governance Wrap‑Up, Resources & Final Assessment
0/4
AI Ethics for Legal Professionals

Confidentiality, Privilege & Data Privacy: Safe Inputs

Confidentiality failures are among the highest-impact AI risks in legal work. The safest approach is to assume that anything you paste into an unapproved tool could be stored, logged, or seen by others.

First principles

  • Use firm‑approved AI tools for any matter-related work.
  • Practice data minimization: provide only what the tool needs.
  • Prefer sanitized summaries over raw client documents.
  • Never paste privileged/confidential material into a public AI chatbot.

A confidentiality‑first data flow

{{UPLOAD_ASSET:confidentiality_data_flow.png}}

Confidentiality-first data flow diagram for using AI tools
Preferred data flow: sanitize inputs, use approved tools, and verify outputs before they become work product.

What counts as “sensitive” in AI prompts?

  • Client names, addresses, identifiers, account numbers
  • Case strategy, settlement posture, privileged communications
  • Trade secrets, proprietary business information
  • Health information (PHI), minors’ information
  • Anything covered by protective orders or privacy statutes

Activity: rewrite a prompt to sanitize inputs

Take a prompt you might use for summarizing facts. Rewrite it to:

  1. Remove names and identifiers (replace with “Client A,” “Vendor B”).
  2. Remove strategy and privileged communications.
  3. Include only the facts needed for the task.