5/14/2026 at 9:59:03 PM
As a lawyer, I'm excited about this, but there are two roadblocks that I'm not sure how Anthropic will navigate:(1) For non-lawyers who use these skills/connectors/whatchamacallits to try to get legal advice, their communications are not protected by attorney-client privilege. This will absolutely bite some people in the ass.
(2) If a lawyer uses this with confidential client information (which, to the uninitiated, doesn't just mean SSNs and bank account numbers, but "all information relating to the representation of a client") and forgets to toggle off "Help improve Claude" in their settings, they have possibly (maybe even likely) committed malpractice.[1]
[1] https://www.americanbar.org/content/dam/aba/administrative/p...
by droidjj
5/14/2026 at 10:03:42 PM
Citation for #1 - https://harvardlawreview.org/blog/2026/03/united-states-v-he...> Judge Rakoff of the Southern District of New York — addressing “a question of first impression nationwide” — ruled that written exchanges between a criminal defendant and generative AI platform Claude were not protected by attorney-client privilege or the work product doctrine.
Much more to it than this one-liner that I pulled out, but safe to say, don't rely on or put your legal defense etc. (or elements of it) into AI unless you want it discovered.
(not a lawyer, unlike OP, who might be able to refine what I highlighted with more precision)
by bryant
5/15/2026 at 9:47:31 AM
Seems like a fair trade off if I would not be able to afford a lawyer. I'd take the "AI but not 100% confidential" any time compared with no help at all.by abc123abc123
5/14/2026 at 11:50:06 PM
In the US, are Google queries about the law considered attorney-client privilege? What about library records? Browser history? Google Maps / Uber / car travel history (when traveling to an attorney's office)?If somebody Googles "best attorney for murder NYC" a day after a murder is committed but before any case is filed against them (so they clearly had some reason to expect that case), could that be used as evidence?
by miki123211
5/15/2026 at 9:40:18 AM
I'm not sure if you were actually asking the question but regardless the answer is that all of those absolutely can and are regularly used as evidenceby weird-eye-issue
5/14/2026 at 10:42:16 PM
> exchanges between a criminal defendant and generative AI platform Claude were not protected by attorney-client privilege or the work product doctrineShouldn't that have been relatively clear to all parties involved? Maybe not to the defendant, who's apparently clueless.
The AI platform is not an attorney. A defendant's communications with an AI platform are therefore not communications between a client and their attorney, nor will the AI output constitute attorney "work product" because the AI platform is not an attorney.
Doesn't really come across as a novel problem, aside from AI being involved. I'm sure countless defendants have made the stupid mistake of talking about the facts of their case to persons other than their attorney, and those communications came back to bite them in the ass when discovered.
by dolebirchwood
5/14/2026 at 10:25:45 PM
Can anyone be your lawyer, or does a lawyer have to be certified somehow?by clickety_clack
5/14/2026 at 10:32:11 PM
It is my understanding that they must be certified. You are allowed to represent yourself, but it is my understanding that a non-lawyer cannot represent you.by xboxnolifes
5/14/2026 at 10:46:29 PM
You have to be admitted to the bar to practice law. Which is to say, other lawyers must recognize you as a lawyer, and this recognition can be taken away.by engineer_22
5/14/2026 at 11:01:41 PM
More practically, this means (in America) that you need a JD degree (4 year grad school), to pass an exam, and pass a(n oftrn horrifically thorough) character background check.by john01dav
5/14/2026 at 10:13:29 PM
For (1) it's so wild to me that if I pay a lawyer, they can run the same queries on these tools and they are protected by attorney-client privilege, but if I do it to help me prepare my defense, then the exact same queries would be subject to subpoena/discovery.Does anyone know if there exists any OPSEC procedure for me to use third party tools like this for my own concerning legal questions that is both ethical and allows me to be confident that my interactions won't land in discovery documents?
by nerdsniper
5/14/2026 at 11:25:18 PM
If you are preparing for your own defense and don't have an attorney (you're acting pro se), your own LLM use would likely be protected under work product doctrine. The court would extend you some of the same protections an attorney would have, for the limited purposes of preparing your case.This is a very narrow exemption, however.
(You would also want to make sure you're using a paid AI plan with contractually guaranteed privacy protections, otherwise it could be construed as third-party communications, which implicitly waives privilege.)
See: Warner v. Gilbarco, Inc.
by tjohns
5/14/2026 at 10:33:28 PM
> Does anyone know if there exists any OPSEC procedure for me to use third party tools like this for my own concerning legal questions that is both ethical and allows me to be confident that my interactions won't land in discovery documents?Isn't that a fundamental misunderstanding? Would "OPSEC" like that amount to destruction of evidence or contempt of court or something like that?
Like if all your incriminating documents are on some encrypted drive, it's not like that defeats discovery. You're supposed to decrypt them and hand them over.
by palmotea
5/14/2026 at 10:58:07 PM
That’s absolutely part of my question. I’m not familiar enough with discovery to fully understand this.by nerdsniper
5/15/2026 at 2:22:40 AM
Discovery in a criminal trial is more limited than in a civil trial.Your only real defense against discovery is to not have said it, or to have destroyed all records of it before the hint of discovery wafted on the wind.
by bombcar
5/14/2026 at 10:44:25 PM
> if I do it to help me prepare my defense, then the exact same queries would be subject to subpoena/discoveryWe need a law where someone can clearly designate a chat privileged, with severe consequences for mis-use.
by JumpCrisscross
5/14/2026 at 10:47:25 PM
Wouldn't that same logic exclude evidence from Google searches, like "how to get away with murder"?by tptacek
5/14/2026 at 11:03:24 PM
Yes? Which makes it feel like the answer is just “No.” Unless you use Mullvad, TailsOS, and don’t log into the service. But I’m not sure if that’s “ethical” for Google/DDG searches and it’s not really possible for Claude/Kagi. I would assume that simply using a “secret” account isn't a magic way to avoid discovery either.by nerdsniper
5/14/2026 at 11:39:25 PM
>For (1) it's so wild to me that if I pay a lawyer, they can run the same queries on these tools and they are protected by attorney-client privilege, but if I do it to help me prepare my defense, then the exact same queries would be subject to subpoena/discovery.How's this any different than any professional license? You're basically paying for preferential treatment from the state in a given subject area.
by cucumber3732842
5/15/2026 at 8:01:45 AM
> How's this any different than any professional license? You're basically paying for preferential treatment from the state in a given subject area.Because it's got nothing to do with the professional part? Licensing should affect their practice of law, sure, but it shouldn't grant random other privileges.
by lmm
5/14/2026 at 10:30:39 PM
Self host your own LLMby AndrewKemendo
5/14/2026 at 10:42:33 PM
Why do you think this would be less discoverable than hosting your own email server?by singleshot_
5/14/2026 at 10:49:42 PM
If you use a stateless client (like just rawdogging cli llama.cpp) there’s nothing to discover. Setting a program with an option to have logs to not do that could conceivably get you in trouble but using a widely used program that never had logs seems like it has to be fine. Maybe they could nail you for googling “which local llm approach generates logs?” also, don’t get nailed by your bash history!by QuadmasterXLII
5/14/2026 at 10:49:04 PM
Because you don't keep logs.by kevin42
5/15/2026 at 1:30:08 AM
Because nobody would know about it unless you told them for some reasonby AndrewKemendo
5/14/2026 at 10:38:58 PM
You’d need to hand that mac mini over if subpoenaedby nvr219
5/15/2026 at 1:30:57 AM
Can’t hand over something that doesn’t exist if it’s running in a VM container and gets destroyed every 12 hoursby AndrewKemendo
5/15/2026 at 9:17:31 AM
Slightly related: Amazon’s bedrock has better privacy guarantees. This seems to be skills that can be added to Desktop app, which can connect to Bedrock for inference.by shivekkhurana
5/14/2026 at 10:04:53 PM
For #2, I’d expect you’d use this through an organization/business account that has data retention turned off by default.by SkyPuncher
5/14/2026 at 11:21:10 PM
#1 is a little complicated. Communications with an AI are possibly sometimes protected by work-product doctrine... but only if you're representing yourself as a pro se litigant, and strictly limited to mental impressions and opinion work product of counsel (in this case, extended to the pro se litigant). See: Warner v. Gilbarco, Inc.There's a good summary of the current state of things here: https://www.akerman.com/en/perspectives/ai-privilege-and-wor...
Also worth noting that none of this is binding precedent, so expect this field to evolve over time.
by tjohns
5/15/2026 at 8:23:09 AM
> As a lawyer, I'm excited about this,As in "I'm excited to win a lot of money dismantling hallucinated quotations and invalid assumptions"?
by troupo
5/14/2026 at 10:54:56 PM
what if either user uses these skills with offline weights? should help with 2), at least right?by 0gs
5/14/2026 at 10:17:31 PM
In the legal world are there certifications for handling privileged information?For example in the medical world if you are a provider covered by HIPAA you must have a signed "Business Associate Agreement" with any party that handles the covered protected health information (PHI).
by colechristensen
5/15/2026 at 12:05:54 AM
It’s a bit of a moot point because the amount of times that your AI logs are going to be subpoenaed in your court case approaches zero.by bethekidyouwant