Artificial intelligence (AI) has moved from novelty to infrastructure faster than many law firms anticipated. What began as limited experimentation with generative AI tools for drafting and research has, in many firms, become a routine part of how work gets done. In many cases, this shift has occurred without formal policy, defined supervision standards, or a clear view of the implications for professional liability.

The efficiency case for AI in legal practice is well established. Research that once required hours can now be completed in minutes. Document review that required teams can often be handled by a single attorney using the right tools. Drafting, summarization and contract analysis all show measurable productivity gains. In a competitive market for legal services, those gains are increasingly difficult to ignore.

At the same time, productivity gains and liability exposure are increasing together. Firms that have accelerated adoption without developing governance frameworks are creating a risk profile that their professional liability programs weren't designed to absorb.

According to our 2026 AI Adoption and Risk Survey, 63% of businesses have fully implemented AI in at least part of their operations, up from 45% a year earlier. The same survey identifies AI errors, misinformation and hallucinations as the top perceived risk (57%), followed by legal and reputational exposure from misuse (56%) and data protection concerns (55%). These aren't theoretical risks. They reflect the reality of deploying tools that are powerful, probabilistic and capable of producing confident but incorrect outputs without appropriate oversight.

For law firms, where the work product is the advice and the attorney stands behind its accuracy, these risks have direct professional implications.

Where AI creates professional liability exposure

AI-related risk in legal practice tends to concentrate in specific areas.

Scrutiny is already here

Courts, clients and insurers are actively evaluating AI use in legal practice.

Courts are taking action

Federal courts have implemented standing orders requiring disclosure of AI use in filings. Sanctions related to AI-generated citation errors have already occurred. Judicial expectations are shifting toward active scrutiny.

Clients are asking questions

Sophisticated clients are increasingly asking how law firms use AI and what controls are in place. These questions are appearing in RFPs, engagement discussions and ongoing client reviews.

Firms that cannot clearly articulate their approach are at a competitive disadvantage.

Insurers are paying attention

Professional liability underwriters are beginning to assess AI governance as part of the risk profile. Renewal applications are starting to include questions about AI usage, controls and oversight.

Firms that can describe structured governance practices present a more favorable risk profile than those with informal adoption.

Where leadership exposure sits

AI risk isn't primarily a technology issue. It's a leadership issue that happens to involve technology.

  • The delegation gap: AI governance is often assigned to IT or innovation teams. However, the underlying issue is professional responsibility. When an AI-related error leads to a claim, the adequacy of firm supervision becomes a leadership question.
  • Uneven adoption creates uneven risk: Without formal governance, individual attorneys and practice groups define their own standards. This creates inconsistency across the firm and makes risk difficult to monitor or defend in the event of a claim.
  • Reputational risk compounds liability risk: AI-related errors can quickly become reputational events. A high-profile mistake involving inaccurate filings or confidentiality breaches can create long-term consequences that extend beyond the immediate financial impact.

Insurance considerations

The professional liability implications of AI adoption are still developing in the insurance market, but the contours of the issue are becoming clear enough to warrant specific attention.

AI errors and professional liability coverage

Professional liability policies are designed to respond to errors and omissions in legal services. AI-related errors may fall within coverage if appropriate supervision standards are met.

Where supervision is inadequate, coverage questions become more complex, particularly around whether the standard of care was satisfied.

Intersection of cyber and professional liability coverage

Data exposure related to AI tool usage may trigger both professional liability and cyber policies. Understanding how these coverages interact is important, particularly if unsecured tools are involved.

Underwriting expectations

Insurance applications are beginning to address AI governance directly. Firms with defined policies, training and controls present a more stable and insurable profile.

Strategic implications for law firm risk and AI governance

The adoption of AI in legal practice introduces a set of interrelated risks that extend beyond technology and into professional responsibility, client relationships and insurance strategy. For firm leadership, several themes warrant focused attention.

AI adoption without governance changes the firm's risk posture

While the efficiency benefits of AI are material, they don't exist independently of risk. Firms that have implemented AI tools without establishing clear policies, supervision protocols and acceptable use standards are not simply innovating. They are expanding their exposure in ways that are not always visible within existing risk management frameworks.

Professional standards apply fully to AI-assisted work

The use of AI doesn't alter an attorney's duty of competence, supervision, or independent judgment. Work products that incorporate AI-generated content must be reviewed, verified and validated to the same standard as traditionally developed legal work. Any assumption that AI reduces these obligations introduces both professional and liability risk.

External scrutiny is already shaping expectations

Courts, clients and insurers are actively evaluating how law firms are deploying AI. Disclosure requirements are emerging in court systems, clients are incorporating AI governance into selection and oversight processes and insurers are beginning to consider governance maturity in underwriting. Firms should expect increasing expectations for transparency and accountability.

Confidentiality and data handling present immediate exposure

The use of AI tools, particularly those supported by third-party infrastructure, raises important questions about how client data is processed, stored and protected. Without clear guidance on approved tools and data handling practices, firms may be exposing sensitive information in ways that conflict with professional obligations.

AI governance is becoming part of the insurability discussion

As insurers refine their understanding of AI-related risk, governance practices are emerging as a meaningful differentiator. Firms that can demonstrate structured oversight, training and defined usage standards are better positioned in renewal discussions than those operating with informal or decentralized adoption.

The moment of accountability

Firms that manage AI risk effectively aren't necessarily those that delayed adoption. They are the ones who recognized early that deploying powerful tools without governance introduces meaningful exposure.

The efficiency benefits of AI are compelling and, in many cases, necessary. However, efficiency and accountability must advance together.

Firms that establish clear supervision standards, governance frameworks and disclosure practices will be better positioned to benefit from AI while managing its risks.

This work doesn't begin with technology teams alone. It begins with leadership recognizing that AI governance is a professional responsibility issue and treating it accordingly.

For a deeper examination of governance frameworks and leadership accountability, see the companion article in this series, "AI Governance Isn't an Attorney Decision."

View Now


Disclaimer

The information contained herein is offered as insurance Industry guidance and provided as an overview of current market risks and available coverages and is intended for discussion purposes only. This publication is not intended to offer financial, tax, legal or client-specific insurance or risk management advice. General insurance descriptions contained herein do not include complete Insurance policy definitions, terms, and/or conditions, and should not be relied on for coverage interpretation. Actual insurance policies must always be consulted for full coverage details and analysis. Insurance brokerage and related services provided by Arthur J. Gallagher Risk Management Services, LLC License Nos. IL 100292093 / CA 0D69293 © 2026 Arthur J. Gallagher & Co., and affiliates & subsidiaries |