US v. Heppner (S.D.N.Y. 2026) no attorney-client privilege for AI chats [pdf]
Case and Ruling Basics
- Court held that chats with Claude in this case are not protected by attorney–client privilege or work-product doctrine.
- Key reasons discussed:
- No attorney involved in the AI chats.
- AI is not a lawyer and explicitly disclaims giving legal advice.
- Terms of service state there is no confidentiality; data may be disclosed and used for training.
- Documents were created before being shared with counsel, so could not be “retroactively” cloaked in privilege.
- Sharing privileged attorney advice with the AI may itself waive privilege over the original communications.
Attorney–Client Privilege vs AI Tools
- One side: AI chats are like talking to a non-lawyer friend; no privilege, by definition.
- Other side: for many users, AI is effectively used as legal research or note-taking, and privilege should focus on case preparation, not the formal status of the “listener.”
- Dispute over whether privilege should evolve to treat certain AI tools as part of the privileged workflow.
Comparisons to Email, Docs, and Phone Calls
- Many note tension between this ruling and everyday use of Gmail/Outlook/Google Docs/Office 365, whose TOS also allow some data access.
- Some argue: using cloud tools doesn’t normally destroy privilege; users reasonably expect confidentiality (similar to phone carriers as “common carriers”).
- Others point out: this judge leaned heavily on the AI provider’s explicit “no confidentiality” language, which could equally threaten privilege for cloud-integrated tools with AI features.
Work Product and Client Notes
- Debate over whether client-created materials for eventual use by counsel should be protected.
- One view: only materials prepared by or at direction of counsel qualify; this decision narrows work-product and overrules a more expansive prior case.
- Another view: strategy notes and research done by an accused in anticipation of litigation should be protected, even without explicit attorney direction.
Implications for Lawyers and Pro Se Litigants
- Concern that pro se defendants effectively lose confidential preparation if AI use is discoverable, while lawyers may still gain some work-product protection.
- Worry that ubiquitous AI integrations (Copilot, Gemini sidebars, etc.) could silently undermine privilege for both lawyers and clients.
Privacy Policies, Logging, and Alternatives
- Heavy emphasis on AI privacy policies: training use and disclosure to authorities undermine any “reasonable expectation of confidentiality.”
- Discussion of “no-log” or self-hosted models, VPN use, and even darknet-style AI services; others note legal compulsion can force logging or disclosure anyway.
- Open question whether a HIPAA-like regime or enclave-based “legal AI” service could eventually satisfy courts’ confidentiality expectations.