How AI Is Changing Malpractice Risk for Law Firms

Artificial intelligence has moved from novelty to necessity in many law firms. Attorneys use AI-powered tools for legal research, contract analysis, document review, client intake, and even initial case assessments. While these tools can dramatically improve efficiency and reduce costs, they also introduce malpractice risks that most firms have not fully accounted for. The professional liability implications of AI adoption deserve careful attention from every managing partner and risk manager.

AI-Assisted Legal Research Errors

The most publicized AI-related malpractice risk involves legal research tools that generate fabricated citations. Large language models can produce plausible-sounding case names, docket numbers, and holdings that do not actually exist. Several attorneys have already faced sanctions and malpractice claims after filing briefs containing AI-hallucinated citations that opposing counsel or the court identified as fictitious.

The core problem is that AI research tools do not distinguish between retrieving existing case law and generating text that looks like case law. An attorney who relies on AI-generated research without independently verifying every citation through a traditional legal database is taking on significant risk. Courts have made clear that the duty of competence under Model Rule 1.1 extends to the tools attorneys choose to use. Blaming the technology is not a defense.

Firms should establish written policies requiring independent verification of all AI-generated legal citations before any filing or client communication. Some firms have implemented a two-step workflow where AI tools generate initial research and a separate attorney verifies each citation against Westlaw or Lexis before the work product moves forward.

Chatbot and Client Intake Risks

Many firms have deployed AI-powered chatbots on their websites to handle initial client inquiries and intake. These tools can screen potential clients, gather basic case information, and schedule consultations. However, they also create risk. If a chatbot provides legal advice rather than general information, the firm may have inadvertently established an attorney-client relationship with someone it never intended to represent.

The distinction between legal information and legal advice is nuanced, and current AI tools are not reliable at maintaining that boundary. A chatbot that tells a website visitor their case has merit or recommends a specific course of action could create duties the firm never intended to assume. If the firm then declines to take the case and the potential client suffers harm, a malpractice claim based on detrimental reliance is plausible.

Firms using intake chatbots should include clear disclaimers that the chatbot does not provide legal advice and that no attorney-client relationship is formed through the interaction. The chatbot's responses should be carefully scripted and regularly audited to ensure they remain within informational boundaries. Having an attorney review the chatbot's conversation logs on a regular basis is a prudent safeguard.

AI Contract Drafting Liability

AI-powered contract drafting and review tools have become increasingly sophisticated, and many firms use them to generate first drafts of agreements, identify problematic clauses, or suggest alternative language. The efficiency gains are real, but so are the risks. AI drafting tools can miss jurisdiction-specific requirements, generate unenforceable provisions, or fail to account for recent changes in applicable law.

When a firm delivers a contract to a client, the firm is responsible for the accuracy and completeness of that document regardless of how it was produced. If an AI-drafted contract contains a defective indemnification clause that costs the client millions in a subsequent dispute, the malpractice exposure falls on the attorney who reviewed and delivered the document, not on the AI vendor.

The appropriate use of AI drafting tools is as a starting point, never as a finished product. Every AI-generated contract should undergo the same level of attorney review that a first draft from a junior associate would receive. Firms should document their review procedures and maintain records showing that competent attorney oversight was applied to all AI-assisted work product.

Coverage Implications

Most current legal malpractice policies do not specifically address AI-related claims. The good news is that they generally do not exclude them either. A malpractice claim arising from an AI research error or a defective AI-drafted contract would likely be covered under the standard professional services insuring agreement, provided the firm was engaged in the practice of law when the error occurred.

However, some carriers are beginning to add AI-related questions to their applications, and it is possible that future policies may include exclusions or sublimits for AI-related claims, particularly for firms that cannot demonstrate adequate oversight procedures. Firms should proactively discuss their AI usage with their insurance broker and carrier. Demonstrating that you have written AI governance policies, verification procedures, and training protocols can help ensure continued coverage and may even result in more favorable underwriting treatment.

Building an AI Risk Management Framework

Every firm using AI tools should implement a formal AI governance framework that includes a written acceptable-use policy, mandatory verification procedures for AI-generated work product, regular training for all attorneys and staff, and periodic audits of AI tool outputs. Document everything. In the event of a malpractice claim, a well-documented AI governance program demonstrates the firm took its professional obligations seriously and took reasonable steps to mitigate the technology's known limitations.

The firms that will thrive in the AI era are those that embrace the efficiency benefits while maintaining the professional judgment and oversight that clients and courts expect. AI is a tool, not a substitute for competent legal practice, and the firms that treat it accordingly will manage their malpractice risk most effectively.