Can a law firm regulated by the SRA use an AI worker?
Yes. The SRA says firms are free to use AI if they meet its standards, and stay accountable for the work. What its 2026 warning notice says.
·
5 minute read
Yes. The Solicitors Regulation Authority (SRA), which regulates solicitors and law firms in England and Wales, says firms are free to use AI tools provided they meet its standards. What it fixes is who answers for the work: its warning notice of 17 August 2026 says those who use AI remain accountable for their work however it was prepared. Admin can go to an AI worker. Legal judgement and sign-off stay with a solicitor.
What has the SRA said about AI?
That notice, "Misuse of AI", is relevant to all firms and individuals the SRA regulates. Its points, in its own words:
Firms may use AI. Firms "have the freedom to use AI tools and adopt new ways of working, provided they ensure that they meet our standards."
Accountability does not move. "AI has no separate legal personality; solicitors and regulated individuals who use AI in the course of delivering legal services remain accountable for their work and outputs, regardless of how that work has been prepared."
Human oversight is expected. "Appropriate human oversight, informed professional judgement and a proportionate, risk-based approach are essential to ensure compliance with your regulatory and legal obligations."
Two concerns are named. False or incorrect information, including citations, in court and other documents, and risks to client confidentiality.
It carries a warning. "If you fail to have proper regard to this warning notice, you are at risk of disciplinary action."
The SRA's Risk Outlook report of 20 November 2023 adds a point on clients: tell them when AI will be used on their case and how it will operate, the manner being for the firm. Neither document is a rule. The rules are in the two Codes, and the SRA says it will have regard to the warning notice when it exercises its regulatory functions.
Which rules in the Codes apply?
The Code of Conduct for Solicitors requires a competent and timely service (paragraph 3.2). A solicitor who supervises or manages others remains accountable for the work carried out through them and effectively supervises it (3.5). Clients' affairs are kept confidential unless disclosure is required or permitted by law or the client consents (6.3).
The Code of Conduct for Firms asks the same of the firm: effective governance, systems and controls (2.1), accountability where its work is carried out through others, including those it contracts with (2.3), and an effective system for supervising clients' matters (4.4). The compliance officer for legal practice (COLP) must take all reasonable steps to ensure compliance (9.1).
How your firm meets these paragraphs is for your COLP and your own policies; this article states the duties and does not advise on compliance.
What does the SRA expect on client confidentiality?
The warning notice says client information should be entered into AI systems only where appropriate contractual, technical and organisational safeguards are in place. Firms and solicitors should satisfy themselves of four things: that client data remains within a secure environment, is not accessed by unauthorised third parties, is not used to train AI models except where explicitly authorised and appropriate, and is not retained longer than necessary. The rule behind them is paragraph 6.3, in both Codes.
On where the data is held and whether it trains AI, our answer is one sentence: Your data is stored in the UK, and is never used to train AI models. Security, who can reach the data and how long it is kept are set out in the contract.
The firm is also the controller of its clients' personal data under UK GDPR, which requires a written contract with whoever processes it for the firm. Its terms are listed in AI workers and client data under UK GDPR.
Which work fits an AI worker?
The roles that fit sit around the legal work, not in it. Each AI worker has one role, a specification the firm has approved and a named person who checks its work. A worker can take the details of a new enquiry, list every party for the conflict search and draft the client care letter from the firm's precedent (matter intake and engagement letters). It can ask a client for ID and source-of-funds evidence and chase what is missing (client onboarding). It can remind clients of unpaid bills on the schedule the firm sets. Each change it makes to the firm's records is logged with who approved it. Our page for law firms has the full list, and how to scale a law firm without hiring makes the case for them.
What stays with a solicitor?
Whether there is a conflict and whether to act. The worker shows what the search found. The judgement is a solicitor's.
Legal advice. An email that asks for advice goes to a fee earner.
The terms of the client care letter. The worker drafts from precedent; a fee earner approves scope, costs information and terms before anything is sent.
Anti-money laundering. The client and matter risk assessment is the fee earner's. A suspicion goes to the firm's money laundering reporting officer.
Client money. The worker has no access to client account and moves no money.
Key dates. Court and limitation dates are the fee earner's to enter and watch.
Undertakings and complaints. The worker gives no undertaking and confirms none. Every complaint goes to a person.
What to decide before the worker starts
The limits, in writing. What the worker may send without approval, if anything, and what always waits for a fee earner.
The COLP's view. The role specification is a document your COLP can read, question and keep on file.
Around a matter, the worker would take the enquiry details, list the parties for the conflict search and draft the client care letter from your precedent, and your solicitors would decide whether to act and approve every term. Your COLP can read the role specification, question it and keep it on file. Talk to our agent.
Carlos Oliveira
Founder of The AR Dept
Losing billable hours to this process every week?
Check if your team’s routine admin can be handed to an AI worker.