California AI Practice Guidance: 2024 State Bar Opinion

The State Bar of California issued guidance on AI use in legal practice in 2024, building on ABA Formal Opinions 512/533 and applying California-specific rules.

Background

The California State Bar Standing Committee on Professional Responsibility and Conduct has issued guidance on AI use in legal practice, supplementing ABA Opinions 512 and 533.

Key California-specific provisions

Confidentiality

AI use must:

1. Maintain client confidentiality under California Rule 1.6
2. Pass Business Associate Agreement (BAA) review for HIPAA-covered matters
3. Ensure vendor security meets California requirements
4. Comply with CCPA for any personal information processing

Supervision

California Rule 5.3 supervision applies to AI tools:

1. Reasonable supervision of AI outputs
2. Vendor vetting and ongoing review
3. Audit log retention
4. Quarterly compliance review

Fees

California Rule 4-210 requires:

1. Fees not unconscionable
2. AI cost savings may reduce fees for clients
3. Disclosure of AI use on billing if relevant
4. Trust account rules apply to retainers

Competence

California Rule 1.1 (Competence) requires:

1. Keep abreast of changes in law and practice
2. AI tools fall under competence requirements
3. Training and continuing education on AI use

California-specific implementation patterns

Engagement letter language

Working California engagement letter language:

"We may use AI-assisted tools including [tool name] in providing legal services to you. These tools process client information under our confidentiality and security policies, including California State Bar requirements under Rule 1.6 and applicable CCPA provisions. All AI-generated outputs are reviewed by a licensed California attorney before being relied upon. AI cost savings may reduce fees for certain tasks; we will discuss this with you if relevant."

AI use log

Per California requirements:

1. Per-matter AI query and response log
2. Vendor name and version
3. Citation verification status
4. Attorney review timestamp

Vendor vetting

Working vendor checklist for California practices:

1. CCPA compliance (privacy policy review)
2. BAA available
3. SOC 2 Type II
4. Data residency (US-only preferred for sensitive matters)
5. Audit log access
6. Breach history review

Acknowledgments

This article summarizes public sources including the California State Bar guidance, ABA Formal Opinions 512/533.

Dillon Deutsch has worked with California-licensed lawyers on AI compliance. https://courtgpt.ai