A landmark ruling in New York clarifies that material generated through public AI chatbots is not protected by attorney-client privilege or work-product doctrine, raising caution for legal professionals in the use of generative AI tools.
A federal judge in New York has ruled that material generated through a public AI chatbot is not protected by attorney-client privilege or the work-product doctrine, a decision that could shape how lawyers and clients use generative AI in litigation. According to reporting by legal publishers and commentary from law firms, the case arose after a defendant used an AI system to help develop defence theories and later sought to shield the resulting exchanges from disclosure. The court rejected that effort, finding that the communications were not confidential in the way the privilege rules require.
The ruling, issued by U.S. District Judge Jed S. Rakoff in the Southern District of New York, turns on a familiar principle rather than a novel rule for new technology: privilege depends on secrecy. Legal commentators have said the defendant had used a publicly accessible chatbot without lawyer involvement, meaning the information was shared with an outside platform rather than exchanged privately with counsel. On that basis, the court treated the AI system as a third party, which undermined any claim that the material stayed within the protected attorney-client relationship.
The decision is also notable because it extends beyond privilege to work-product protection. Akerman reported that the judge concluded the AI-related material was discoverable even after the defendant passed search results to counsel. Other legal analyses said the court’s reasoning emphasised that AI tools are not licensed legal advisers and therefore do not fit neatly within doctrines built around lawyer-client communications. The result is one of the first federal rulings to squarely address whether conversations with generative AI can be kept out of litigation, and it came down firmly on the side of disclosure.
For lawyers and in-house teams, the practical message is cautionary rather than prohibitive. The case does not suggest that AI cannot be used in legal work, but it does underline the risk of feeding sensitive facts, strategy or draft arguments into consumer-facing tools that may store, process or reuse inputs. As several legal firms have noted, public AI services often reserve rights over user data, making it harder to argue that a client had a reasonable expectation of privacy.
That leaves companies and individuals facing a simple but significant rule: if confidential information is shared with a third-party AI system, traditional privilege protections may be lost. The broader implication of the ruling is that courts are likely to apply established confidentiality standards to new technology, rather than carving out special treatment for artificial intelligence.
Source Reference Map
Inspired by headline at: [1]
Sources by paragraph: - Paragraph 1: [2], [7] - Paragraph 2: [3], [4] - Paragraph 3: [3], [4], [7] - Paragraph 4: [1], [5] - Paragraph 5: [1], [6]
Source: Noah Wire Services
Verification / Sources
- https://www.bergeronclifford.com/blog/ai-sclient-privilege-canada-hepner - Please view link - unable to able to access data
- https://www.clio.com/blog/ai-attorney-client-privilege-heppner/ - In United States v. Heppner, the defendant used a free public AI chatbot to generate defence strategies without his lawyer's involvement. The court ruled that the materials were not protected by attorney-client privilege or work-product doctrine, as the communications were not confidential and were effectively disclosed to a third party. This case highlights the importance of maintaining confidentiality when using AI tools in legal contexts.
- https://www.akerman.com/en/perspectives/court-rules-that-information-disclosed-by-layperson-to-ai-tools-is-not-protected-by-attorney-client-or-work-product-privileges.html - On February 10, 2026, U.S. District Judge Jed S. Rakoff ruled that information provided to an AI tool was not privileged and therefore discoverable, even after the client provided the search results to counsel. In this securities and wire fraud criminal case, the defendant used Anthropic’s AI tool, Claude, before his arrest to run queries related to the government’s investigation. The court found that the documents were not protected by attorney-client privilege or the work-product doctrine.
- https://www.orrick.com/en/Insights/2026/03/Court-Rules-AI-Conversations-Are-Not-Privileged-What-United-States-v-Heppner-Means-for-You - On February 13, 2026, Judge Jed S. Rakoff of the U.S. District Court for the Southern District of New York issued an opinion addressing whether non-attorney communications with a generative AI platform are protected by the attorney-client privilege or work product doctrine. Judge Rakoff ruled that they are not, stating that since AI tools do not hold law licenses, communications with them are by definition not lawyer-client communications and thus are not subject to attorney-client privilege or attorney work product protections.
- https://www.nixonpeabody.com/insights/alerts/2026/02/25/ai-generated-documents-may-not-be-privileged - A recent SDNY ruling raises new issues about the attorney-client privilege and work-product protection when clients use AI tools to prepare materials for their lawyers. The ruling could affect how businesses and individuals use AI tools when preparing to communicate with their attorneys. Until the law develops further, clients should exercise caution and consult counsel before using AI for litigation-related research.
- https://www.stark-stark.com/news/are-ai-communications-protected-by-attorney-client-privilege-lessons-from-united-states-v-heppner/ - A recent decision from the United States District Court for the Southern District of New York provides one of the first judicial examinations of whether communications with generative artificial intelligence (AI) platforms can fall within the protections offered by the attorney–client privilege or the work product doctrine. In United States v. Heppner, the court held that they do not, highlighting the importance of maintaining confidentiality when using AI tools in legal contexts.
- https://www.americanbar.org/groups/litigation/resources/newsletters/corporate-counsel/ai-communications-not-privileged-what-united-states-heppner-means-corporate-clients/ - United States v. Heppner, Case No. 1:25-cr-00503-JSR (S.D.N.Y. Feb. 17, 2026). Judge Rakoff’s decision is one of the first federal decisions squarely addressing privilege in the context of generative AI—and it carries immediate implications for corporate clients and their attorneys navigating litigation risk in an AI-saturated world. The court ruled that communications with a publicly available AI platform in connection with a pending criminal investigation are not protected by attorney-client privilege or work-product doctrine.
Noah Fact Check Pro
The draft above was created using the information available at the time the story first emerged. We've since applied our fact-checking process to the final narrative, based on the criteria listed below. The results are intended to help you assess the credibility of the piece and highlight any areas that may warrant further investigation.
Freshness check
Score: 10
Notes: The article is based on a recent ruling by U.S. District Judge Jed S. Rakoff, dated February 10, 2026, with a written opinion issued on February 17, 2026. (akerman.com)
Quotes check
Score: 10
Notes: The article includes direct quotes from Judge Rakoff's ruling and other legal analyses. These quotes are consistent across multiple reputable sources, confirming their authenticity. (akerman.com)
Source reliability
Score: 8
Notes: The article is published on the Bergeron Clifford website, which appears to be a law firm blog. While law firm blogs can provide insightful analyses, they may also have inherent biases. Cross-referencing with independent news outlets would enhance reliability.
Plausibility check
Score: 10
Notes: The claims made in the article align with the known facts of the case and the legal principles involved. The ruling by Judge Rakoff is consistent with established legal doctrines regarding attorney-client privilege and the use of AI tools.
Overall assessment
Verdict (FAIL, OPEN, PASS): PASS
Confidence (LOW, MEDIUM, HIGH): MEDIUM
Summary: The article provides a timely and accurate summary of Judge Rakoff's ruling, with direct quotes and consistent information across multiple sources. However, reliance on a single law firm's blog introduces potential bias, and consulting independent news outlets would enhance the verification process.