SRA Warns Solicitors Over AI Misuse Risks in UK Law

• The Solicitors Regulation Authority (SRA) has warned solicitors against lax use of generative AI due to rising instances of hallucinated case law and confidentiality breaches.
• Law firms must implement effective governance structures, systems, and controls to manage the risks associated with AI use.
• Entering confidential information into open-source AI tools can amount to a waiver of privilege, emphasizing the need for contractual, technical, and organizational safeguards to protect client confidentiality.

The SRA acknowledges that AI can be a valuable tool for legal services when used correctly, but emphasizes that it also presents significant risks.

The Solicitors Regulation Authority (SRA) has issued a warning to solicitors regarding the misuse of generative AI in UK law. This move comes after a series of high-profile incidents involving AI-generated errors and confidentiality breaches at law firms. For instance, Pinsent Masons was found to have cited an insolvency rule that did not exist due to a junior lawyer's AI-hallucinated research. Similarly, US firm Sullivan & Cromwell apologized to a New York judge after discovering AI-hallucinated citations in one of its court filings. These incidents highlight the risks associated with relying on generative AI without proper oversight and controls.

The SRA acknowledges that AI can be a valuable tool for legal services when used correctly, but emphasizes that it also presents significant risks. The authority notes that these risks are centered around AI's tendency to hallucinate and potential breaches of client confidentiality when sensitive materials are uploaded to AI systems. In fact, the SRA itself received 42 reports related to potential AI misuse between July 2025 and July 2026. To mitigate these risks, the SRA stresses that firms must have effective governance structures, systems, and controls in place to manage any risks associated with AI use.

The warning issued by the SRA serves as a reminder to lawyers and law firms of their obligations when using generative AI. The authority emphasizes that individuals remain responsible for the work they produce, regardless of whether AI is used or not. Furthermore, the SRA notes that entering confidential information into open-source AI tools can amount to a waiver of privilege, highlighting the importance of implementing contractual, technical, and organizational safeguards to protect client confidentiality. As Aileen Armstrong, SRA executive director strategy and policy, commented, 'Firms and solicitors must have appropriate oversight and controls in place to ensure consumers receive high-quality legal services and our standards are met.'

Lawyers should review their firm's governance structures and controls to manage the risks associated with using generative AI, including implementing contractual, technical, and organisational safeguards to protect client confidentiality.

Source: Original reporting via Briefly