The Georgia State Bar just dropped new guidance on how lawyers can use generative AI, and it’s going to fundamentally change how we all practice law in Atlanta. Starting January 1, 2026, these rules set clear ethical lines for using AI in legal research, drafting, and talking to clients. Every attorney, especially those of us in workers’ compensation, has to take a hard look at our current processes to make sure we’re compliant. These new lawyer rules are going to have a real impact on every firm’s day-to-day operations and our duties to our clients.
Key Takeaways
- The Georgia Rules of Professional Conduct, especially Rule 1.1 and Rule 1.6, have been updated to directly address the ethical use of generative AI in law practice.
- You absolutely cannot expose confidential client information to public AI models. This means you must use secure, private platforms or get very good at anonymizing data before you use it.
- Any work product an AI helps create must be subject to diligent attorney review and verification for accuracy, correct legal precedent, and factual truth before it’s filed or sent to a client.
- Lawyers have a duty to tell clients they’re using generative AI for their case, and you have to get informed consent if you’re using it for anything significant or involving sensitive data.
- If you don’t follow these rules, you can face disciplinary action and professional misconduct sanctions, which means you need to get a firm policy in place immediately.
New Amendments to Georgia Rules of Professional Conduct
The Georgia Supreme Court, acting on advice from the State Bar’s Standing Committee on Professionalism, went ahead and approved changes to some key Rules of Professional Conduct. The biggest changes hit exactly how attorneys can use generative AI in their daily work. They made specific tweaks to Rule 1.1 (Competence) and Rule 1.6 (Confidentiality of Information) that give us explicit instructions. The new text in Rule 1.1 states that being a competent lawyer now includes understanding the benefits and risks of technology, and that absolutely includes AI. This means you can’t just start using some new AI tool without first figuring out how it works, what its limits are, and where it’s likely to mess up. For instance, if you just let an AI draft a complex motion and don’t independently check the citations or the logic, you’d be breaching your duty of competence under the updated rule.
On top of that, the changes to Rule 1.6 are incredibly strict about client data. The rule now says lawyers have to use reasonable care to prevent confidential client information from being disclosed when using AI. This is a clear mandate. Firms have to put real safeguards in place. That could mean paying for enterprise-level AI platforms that have solid data privacy agreements, or it could be as simple as having an ironclad rule that no confidential details ever get typed into a public AI model like the ones everyone’s using online. The Bar’s official comments make it clear that “reasonable care” is a moving target, which means we’re all responsible for keeping up with the latest in AI security. An advisory from the State Bar of Georgia (gabar.org) confirms these changes are about getting ahead of the curve to keep our ethical standards high as tech advances.
Data Security and Client Confidentiality in the AI Era
The biggest worry with using generative AI in a law practice is data security and client confidentiality. Public AI models are powerful, but they work by processing and learning from the data people feed them. If you input sensitive client information, medical records, financial statements, privileged conversations, into one of these models, you risk that data becoming part of the AI’s training set. That could effectively expose it to other people. That’s a flat-out violation of Rule 1.6.
Injured on the job?
3 in 5 injured workers never receive their full benefits. Your employer’s insurer is not on your side.
As a workers’ compensation attorney in Atlanta, I handle extremely sensitive information all day: detailed medical histories, vocational rehab reports, private financial data. Imagine feeding a client’s entire medical file into a public AI tool to get a quick summary because you’re short on time. Once processed, pieces of that information could pop up in an answer the AI gives to some other user later. The potential damage to attorney-client privilege and your professional standing is catastrophic. Firms have to either buy secure, private AI systems or create strict protocols for anonymizing data before it ever goes near an AI. This means scrubbing all personally identifiable information, case numbers, and other unique details from documents before you upload them. You also have to train every single person on your team on these protocols. It’s so serious that the Georgia Office of Bar Admissions (gasupreme.us) is already adding questions on AI ethics to the bar exam, showing how foundational this knowledge is becoming.
Verification and Attorney Oversight: The Non-Delegable Duty
While AI can definitely speed up work like drafting an initial complaint or summarizing a long deposition, its output is never a replacement for a lawyer’s own judgment and review. The new rules couldn’t be clearer about this: the ultimate responsibility for the accuracy and legal soundness of any work product lies with the attorney. You can’t delegate this duty. AI models are famous for “hallucinations”, they produce plausible-sounding information that’s factually wrong or legally off-base. They will literally invent case citations, misread statutes, or miss a critical detail that changes everything.
For a workers’ comp lawyer, this means if you use AI to help draft a response to an employer’s summary judgment motion, you have to personally verify every single legal argument, every cited case, and every fact. That involves cross-checking the AI’s citations in an official legal database, reading the full text of statutes like O.C.G.A. Section 34-9-17 (on notice of injury), and making sure the AI’s analysis actually fits with current Georgia case law. Just copying and pasting what an AI gives you would be professional negligence. The State Board of Workers’ Compensation (sbwc.georgia.gov) also updates its own rules, and an AI model might not have the most recent version, which is another reason a human has to be in charge. My own experience tells me that while AI can give you a decent first draft, the final analysis and critical review have to be done by a human. The stakes are just too high.
Informed Consent and Client Communication
The updated rules also create new duties around client communication and informed consent. We now have to disclose our use of generative AI to clients, particularly when we’re processing their data or when AI is playing a big part in the case strategy. How much you have to disclose depends on the situation. If an AI tool is just being used for basic administrative tasks without touching confidential info, a general disclosure in your engagement letter might work. But if you’re using AI to analyze sensitive medical records or to build out a key legal argument, you need to have a much more detailed conversation with the client, explaining what the tech does and what it can’t do. Getting their explicit, informed consent in those situations is now an ethical requirement.
Clients deserve to know how their cases are being handled. Transparency is what builds trust. Think about it: how would a client in a complex workers’ comp claim feel finding out their private medical details might have been compromised because their lawyer casually used a public AI tool? That’s exactly the kind of disaster these rules are designed to prevent. We should all be thinking about adding language to our engagement letters that explains the firm’s approach to technology and AI, and how we protect client data. It’s a proactive step that shows we’re committed to doing this right.
Consequences of Non-Compliance
The Georgia State Bar does not mess around with violations of the Rules of Professional Conduct. If you don’t comply with these new AI rules, you can face serious consequences, from a private reprimand all the way to suspension or disbarment. The punishment will depend on how bad the violation was and whether you have a prior disciplinary history. For example, accidentally exposing some client data one time with an unsecure AI tool might get you a formal reprimand and an order to take more ethics classes. But doing it repeatedly or intentionally could get you suspended from practice. Your firm’s reputation, and your personal one, is also on the line. News of an ethical breach gets around fast, and it can destroy client trust. This isn’t just about dodging a penalty. It’s about protecting the integrity of our profession. My advice to every lawyer in Georgia is to take these rules seriously. They’re not suggestions, they’re fundamental obligations.
Steps for Atlanta Law Firms to Ensure Compliance
To handle this new reality, law firms in Atlanta, especially workers’ comp firms, need to take some specific actions. First, you have to do a full audit of all the tech you’re currently using to see where generative AI is already being used, whether you have a policy for it or not. Second, you must develop and write down clear policies and procedures for AI use that follow the amended Rules of Professional Conduct. The policy has to cover data input, how you verify AI output, and what you tell clients. Third, you should invest in secure, enterprise-grade AI solutions that come with strong data privacy guarantees and don’t use your client data to train their public models. If you can’t afford that, you have to create rock-solid protocols for anonymizing any client information before it goes into an AI.
Fourth, you need to provide real training to all lawyers and staff on the new policies, focusing on the ethical problems and the practical steps to avoid them. This training needs to be ongoing, because the technology and the rules are going to keep changing. Fifth, update your engagement letters and client intake forms to disclose AI use and get informed consent when you need it. Finally, create an internal review process to check on AI use periodically, make sure everyone is complying, and adapt as the tech and regulations evolve. For example, it’s just smart practice to regularly check for updates from the State Bar of Georgia or any new rulings from the Fulton County Superior Court about technology. These aren’t optional steps. They are what’s required to practice ethically and responsibly in 2026 and beyond.
The introduction of specific generative AI lawyer rules by the Georgia State Bar is a major shift for the legal profession here. Following these regulations is about upholding our duties of competence, confidentiality, and trust in a world filled with new technology. Firms need to act now to create strong policies, train their people, and put client protection first to succeed in this new legal environment.
What specific Georgia Rules of Professional Conduct were amended regarding generative AI?
The primary rules that got updated are Rule 1.1 (Competence) and Rule 1.6 (Confidentiality of Information). The official commentary provides extra detail on how to apply them to technology.
Can I use public generative AI tools like ChatGPT for legal research in Georgia?
You can, but with huge caveats. You can never, ever input confidential client information. The risk of a data breach is too high. Also, you must rigorously verify every piece of information the AI gives you for accuracy, as they are known to make things up.
Do I need to tell my clients if I use AI in their case?
Yes. You generally have to inform clients about using generative AI. This is especially true if you’re processing their sensitive data or using AI for a significant part of the legal strategy, which often requires getting their informed consent first.
What are the potential penalties for violating these new AI rules?
The penalties can range from a private reprimand and being forced to take ethics courses all the way up to suspension from practice or even disbarment, depending on how serious the violation is.
How can a small law firm in Atlanta ensure compliance without a large tech budget?
Small firms can comply by being extremely strict with data anonymization protocols (stripping out all identifying client info). They also need to train all staff, have clear written policies, and carefully vet any third-party AI tools for their data security practices, even if they aren’t expensive enterprise solutions.
