AI in law firms: what the 2026 framework allows

By Mathis GuillemoisPublished on 5 min read

Glass law book, balance scale, and sealed folder on a dark violet reflective surface.

France's bar council published an AI ethics guide for law firms on March 17, 2026. It allows the use of AI tools under several conditions: professional secrecy preserved, GDPR compliance, competence, caution, independence, client information, balanced fees. This framework sets what a firm can actually automate without losing anything that matters.

What does the bar council's March 2026 guide say?

France's bar council, the Conseil national des barreaux, adopted a guide on ethics and artificial intelligence on March 17, 2026, built as an operational document rather than a statement of principle: it lists concrete risks, good practices, and examples drawn from case law.

Seven requirements are named, and none of them bans AI, they set conditions for using it:

  • protecting professional secrecy,
  • complying with GDPR,
  • competence in how the tool is used,
  • caution about its output,
  • the lawyer's independence in the final decision,
  • informing the client about the use of AI,
  • setting fees fairly when AI reduces time spent on a file.

This framework arrives as adoption is moving fast across legal professions: according to the France Num 2025 barometer, the usage rate among specialized and technical services, which includes legal professions, reaches 41 percent, up 19 points, and AI adoption overall has doubled in a year to reach 26 percent.

Does attorney client privilege survive an AI tool?

Yes, provided the right type of tool is chosen. Professional secrecy does not ban AI as such, it bans letting case information leave the firm toward a system that cannot guarantee it stays under control. A consumer tool, whose terms of use often allow reusing conversations to train future models, does not meet that guarantee: information entrusted by a client should never end up there.

A system where the data stays under control, identified hosting, no retraining, traceable access, belongs to a different category of tool. We cover this distinction in more depth in our article on GDPR and AI agents.

The CNIL's practical AI factsheets detail the GDPR obligations that apply to an AI system, but they focus on the development phase of those systems: they do not remove the need to check, for a tool already in use, what guarantees the provider actually offers on the data sent to it.

What actually gets automated in a law firm

Once the framework is set, the question becomes concrete: what can be delegated, and what cannot.

TaskWhat can be automatedWhat stays with the lawyer
Drafting a documentFirst version from the firm's own templatesFinal wording, persuasive phrasing
File trackingDeadlines and overdue tasks visible on one screenPrioritizing, deciding what to act on
Document researchFinding matches in the firm's existing libraryLegal judgment on the result
BillingPreparing the time spent entriesSetting the fee

For document research, a document AI agent can read a firm's existing library and surface a precedent or a standard clause in seconds, where a manual search often takes dozens of minutes. The lawyer keeps control over how the result is used.

What AI should not do in a law firm

Three tasks do not get delegated, whatever the tool. The final wording of a document stays with the lawyer: a version prepared by an agent is a draft, never a deliverable. Legal judgment on a case, reading a situation and choosing a strategy, does not transfer either, that is exactly what the client is paying for. The relationship with the client, finally, stays with the lawyer, not handed to an automated assistant answering in their place.

This is not a technical limit, it is an ethical one set by the bar council's own guide through its independence requirement: the decision stays the lawyer's, the tool only prepares the ground. This is the same human validation principle we cover in how to stay in control of an AI agent.

The real starting point: your templates, not the tool

The blocker is almost never the AI tool itself, it is the state of the firm's document library before connecting anything to it.

Where to start without breaking anything

The starting point is not picking a tool, it is the state of the existing document library: the document templates, the way the firm writes, what is already reused from one case to the next. A first targeted project, on a single document type or a single tracking process, starts at 1,500 euros as a flat fee, never a daily rate.

Before any commitment, a free 30-minute assessment checks what is genuinely automatable in the firm's current setup, and what needs to stay manual to preserve professional secrecy. Discover our support for law firms.

The takeaway

The bar council's March 2026 guide does not ban AI in law firms, it sets the conditions for it: professional secrecy preserved, GDPR compliance, competence, caution, independence, client information. What actually gets automated sits in the preparation, never in the final decision, which stays entirely the lawyer's own work. The real starting point is not picking a tool, it is the state of the firm's document library.

To find out what is genuinely automatable in your firm without touching professional secrecy, our free 30-minute assessment starts from your actual files and tools. See how our method works or check out our case studies.

Frequently asked questions

Can lawyers use ChatGPT?

Yes, but not without precautions. France's bar council guide from March 2026 does not ban any tool on principle, it sets conditions: professional secrecy preserved, GDPR compliance, competence and caution in how the tool is used. A consumer tool such as ChatGPT raises a specific problem, its terms of use often allow reuse of conversations, which makes it risky as soon as any case information passes through it.

How do you protect attorney client privilege when using AI?

By choosing a system where the data stays under control rather than a consumer tool: identified hosting, no retraining on your conversations, a confidentiality agreement with the provider. A firm should never enter identifying case information into a tool that cannot guarantee this control, however popular that tool is otherwise.

Which tasks in a law firm can be automated?

Drafting a first version of a document from the firm's own templates, tracking deadlines and overdue files, searching an existing document library. What always stays with the lawyer: the final wording, the legal judgment on the case, and the relationship with the client. AI prepares, it never decides in the lawyer's place.

Do you have to tell your client you are using AI?

Yes. The bar council guide lists informing the client among the requirements of its framework, alongside professional secrecy or fair fee setting. This does not require a separate document, a mention in the engagement letter is enough, as long as it clearly states that an AI tool takes part in preparing certain case documents.

Sources

Read next

Back to the blog