1. Never use a personal account or free version for client data
Consumer versions may reuse your conversations and offer no contractual commitment. Case data has no place there.
2. Choose a professional plan
Confidentiality commitment, no use of data for training, accounts managed by the practice, activity logs: these are the four minimum criteria.
3. Anonymise by default
Replace names, addresses and numbers with neutral references before submitting text. AI almost never needs a client's identity to be useful.
4. Write a usage charter
One page is enough: authorised tools, what may be entrusted to them, what is forbidden, and whom to contact if in doubt.
5. Always review
AI is sometimes wrong with great confidence. Any content intended for a client or a court is reviewed and approved by a professional.
6. Keep a record
Knowing who uses what, and for what purpose, lets you answer questions from a client, an insurer or an authority.
7. Train the team
An unexplained charter is not applied. A short training session with profession-specific examples changes everything.
These rules do not replace the advice of your professional body or adviser: they set the technical framework that makes AI usable day to day. This article presents good practice and is not legal advice.
To put this framework in place at your practice, see our Private AI for practices.