06/15/2026
WARNING TO CLIENTS: If clients upload confidential legal advice, litigation strategy, or privileged facts into a public AI platform, that disclosure may not be protected under attorney-client privilege.
United States v. Heppner (S.D.N.Y. 2026) is one of the first reported cases addressing whether documents created through a generative AI system are protected by the attorney-client privilege or the work-product doctrine. The court held that they were not protected under the facts presented.
Background
Bradley Heppner, a corporate executive facing a federal criminal investigation and later indictment for securities fraud and related offenses, used the AI chatbot Claude to analyze his legal situation and generate potential defense arguments.
Importantly:
He used Claude on his own initiative.
His lawyer did not direct or request the AI work.
He later shared the AI-generated materials with his attorney and claimed they were privileged.
The Court's Ruling
1. No Attorney-Client Privilege
The court found that the essential requirements for attorney-client privilege were missing:
Claude is not a lawyer. Communications with an AI chatbot are not communications with legal counsel.
No reasonable expectation of confidentiality. The court relied heavily on Claude's terms and privacy policies, which allowed information to be retained and potentially disclosed under certain circumstances.
No attorney-directed legal consultation. Heppner was not communicating through Claude as part of a lawyer-supervised process. Simply giving the resulting documents to his lawyer afterward did not make them privileged.
2. No Work-Product Protection
The court also rejected protection under the work-product doctrine because:
The documents were not prepared by counsel.
They were not created at counsel's direction.
Although the documents later influenced defense strategy, they did not reflect counsel's mental impressions when they were created.
The Court's Broader Message
The court emphasized that AI does not create a new legal exception:
The novelty of AI does not exempt it from traditional legal rules.
Courts will continue to apply established concepts such as:
confidentiality,
attorney involvement,
waiver,
agency relationships, and
work-product requirements.
Practical Implications
Clients should not assume AI conversations are privileged
Talking to a public AI system about a legal matter is generally not the same as talking to a lawyer.
Entering attorney advice into AI may risk waiver
If clients upload confidential legal advice, litigation strategy, or privileged facts into a public AI platform, a court may treat that disclosure as sharing information with a third party.
Law firms need AI policies
The decision encourages firms to:
educate clients about AI risks,
prohibit uploading privileged materials into public AI systems,
address AI use in engagement letters, and
evaluate enterprise AI tools with stronger confidentiality protections.
AI prompts and outputs may be discoverable
The ruling suggests that AI chat logs, prompts, and generated reports could become discoverable evidence in litigation or investigations.
What the Case Did Not Decide
The decision's reach is narrower than some headlines suggest. The court did not decide whether privilege or work-product protection might apply when:
lawyers themselves use AI as a drafting or research tool,
AI is used under attorney supervision,
an AI platform has stronger contractual confidentiality protections, or
AI functions as an agent of counsel in a carefully structured arrangement.
Bottom Line
The key takeaway is not that "AI-generated documents are never privileged." Rather, the case holds that traditional privilege rules still govern AI use. Under the facts of Heppner—use of a public AI tool by a client acting independently, without attorney direction, and without assured confidentiality—the AI-generated materials were not protected and could be obtained by the government.
For now, lawyers and clients should assume that information entered into consumer AI systems may later be discoverable unless there is a strong, legally supported basis for protection.