AI, Chatbots, and Rule 5.5: Where Law Firms Cross the Unauthorized-Practice Line

A law firm that puts a chatbot on its website, or a lawyer who leans on a generative AI tool for a first draft, is closer to the unauthorized-practice rules than the marketing copy suggests. The exposure runs in two directions: outward, toward the public who may receive legal-sounding output from a tool the firm deployed, and inward, toward the lawyer who treats a model's confident answer as if it were considered legal judgment. Both directions trace back to the same small set of rules, and the rules are older and plainer than the technology.

What Rule 5.5 actually says

ABA Model Rule 5.5(a) states that a lawyer "shall not practice law in a jurisdiction in violation of the regulation of the legal profession in that jurisdiction, or assist another in doing so." Rule 5.5(b) adds that a lawyer not admitted in a jurisdiction shall not "establish an office or other systematic and continuous presence" there for the practice of law, or hold out as admitted there. Most states have adopted a version of this rule.

Two phrases do the work for AI purposes. The first is "assist another." Unauthorized practice of law is, as a baseline, defined by state law, and it generally targets a nonlawyer who gives legal advice or prepares legal instruments for another. A software tool is not a "lawyer" who can be admitted anywhere. So the question is rarely whether a chatbot itself violates Rule 5.5 in the abstract. It is whether a lawyer or firm, by deploying or relying on the tool, is assisting unauthorized practice, or is failing to supervise a nonlawyer instrumentality the way the rules require.

The second phrase is "holding out." A tool, or the marketing around it, that represents to the public that they are receiving lawyer-equivalent advice raises both UPL and false-advertising concerns, even where no admitted lawyer is in the loop at all.

The client-facing chatbot a firm deploys

Consider the common case: a 3-to-30-attorney firm adds an intake or FAQ chatbot to its site. The bot answers visitor questions, qualifies leads, and sometimes drifts into substantive territory ("Do I have a claim?" "How long do I have to file?"). The relevant guidance here is concrete.

The Florida Bar addressed this directly in Advisory Opinion 24-1 (January 19, 2024). The opinion concludes that a lawyer using a chatbot for intake or client communication must ensure prospective clients understand they are communicating with an AI program and not with a lawyer, and that the lawyer remains responsible for the information the chatbot provides, including where the chatbot gives misleading information to a prospective client. The opinion also cautions against delegating to a chatbot tasks that could themselves constitute the practice of law.

That framing is the practical core of the issue. If the firm presents the bot as a lawyer or as a substitute for legal advice, it risks holding out and assisting what amounts to unauthorized practice by a nonlawyer system. If the firm is transparent that the visitor is talking to software, and keeps the bot to logistics and general information rather than tailored legal conclusions, the risk drops substantially.

A few design choices separate the two outcomes:

• Disclose the bot's nature plainly and early, not in a buried terms-of-use link. The visitor should know before they type anything sensitive that they are not talking to a lawyer.
• Avoid case-specific legal conclusions. "Personal injury claims in this state are generally subject to a limitations period; you should speak with a lawyer about your specific dates" is general information. "You still have time to file your claim" applied to a described accident is advice.
• Do not let the bot form or imply a relationship. Make clear that using the tool does not create an attorney-client relationship and that submissions are not confidential in the way a privileged consultation would be.
• Confine scope. Tools that book consultations, collect contact details, and route questions are far safer than tools that purport to evaluate the merits of a matter.
• Supervise the vendor and the model. Under ABA Model Rules 5.1 and 5.3, a lawyer's supervisory duties extend to nonlawyer assistance, and ABA guidance treats AI tools as falling within that supervisory frame.

The cautionary precedent for tools that cross the line is Reynoso v. United States Trustee (In re Reynoso), 477 F.3d 1117 (9th Cir. 2007). There the Ninth Circuit held that a web-based program that solicited information from users and generated bankruptcy filings was a "bankruptcy petition preparer" under 11 U.S.C. section 110 and had engaged in the unauthorized practice of law. The software went beyond clerical form-filling and effectively exercised legal judgment about how to characterize a user's situation. That distinction, clerical assistance versus legal judgment, is the line a firm's chatbot must stay on the right side of.

When the vendor overpromises

Even a firm with disciplined design inherits risk from how a tool is marketed, and the consumer-protection regulators are now active in this space. In a matter resolved in early 2025, the Federal Trade Commission finalized an order against DoNotPay, which had marketed an "AI lawyer." The FTC's complaint alleged the company had not tested whether its service performed at the level of a human lawyer and had not retained attorneys to validate its law-related features. The final order required DoNotPay to pay $193,000 in monetary relief, to notify subscribers from the 2021-2023 period, and barred claims that the service performs like a human lawyer absent supporting evidence. The Commission approved the final order by a 5-0 vote in early 2025.

The lesson for a firm is not that it will be sued by the FTC. It is that "performs like a lawyer" claims are now treated as actionable when unsupported, by regulators and, in a UPL frame, by bar authorities. If a vendor's pitch leans on lawyer-equivalence, that framing should not migrate into the firm's own website copy.

The inward risk: the lawyer who over-relies

The second direction is subtler and, for most firms, more likely to cause harm. A licensed lawyer cannot commit unauthorized practice by definition. But a lawyer who delegates legal judgment to a tool, and passes its output along as the lawyer's own work without independent verification, has functionally let a nonlawyer system do the lawyering. That implicates competence under Model Rule 1.1, candor under Rule 3.3, and the supervisory duties of Rules 5.1 and 5.3, and it is the conduct most likely to produce visible discipline.

The reference point is Mata v. Avianca, Inc., 678 F. Supp. 3d 443 (S.D.N.Y. 2023). Counsel submitted a brief containing citations fabricated by ChatGPT, including the now-notorious Varghese v. China Southern Airlines and several other invented decisions with fabricated quotations. Judge P. Kevin Castel imposed a $5,000 sanction under Federal Rule of Civil Procedure 11, finding that the attorneys had acted in subjective bad faith, and ordered them to notify the real judges whose names had been attached to the fake opinions. The tool did not practice law without a license. The lawyers abdicated the part of practice that was theirs to perform.

This is why ABA Formal Opinion 512, "Generative Artificial Intelligence Tools" (July 29, 2024), the ABA Standing Committee's first formal opinion on the subject, frames the duties as the lawyer's own rather than the tool's. The opinion addresses competence, confidentiality, communication, candor to tribunals, supervisory responsibility, and reasonable fees. Its through-line is that a lawyer must understand a tool's capabilities and limitations, must not let model output, including hallucinated authority, form the basis of filings, and must independently verify the work. State opinions echo this: the New York City Bar's Formal Opinion 2024-5 and North Carolina 2024 Formal Ethics Opinion 1 both treat verification and supervision as nondelegable.

A practical checklist

For the client-facing side:

• Label the chatbot as AI, prominently, before any substantive exchange.
• Keep the bot to general information, scheduling, and routing; route legal questions to a lawyer.
• State that no attorney-client relationship is formed and that inputs are not privileged.
• Vet vendor marketing claims and do not repeat lawyer-equivalence language as your own.
• Treat the tool as nonlawyer assistance you must supervise under Rules 5.1 and 5.3.

For the internal-use side:

• Verify every citation, quotation, and proposition in any AI-assisted draft against primary sources before it leaves the firm.
• Treat model output as a starting draft, never as the legal judgment itself.
• Keep client confidences out of tools that may train on or expose inputs, and obtain informed consent where appropriate.
• Adopt a written AI-use policy and train staff on it, so supervision is a system rather than a hope.

The unifying principle

Across both directions, Rule 5.5 and the unauthorized-practice rules ask one question: is a licensed lawyer actually exercising the legal judgment the public is paying for, or has that judgment been handed to a system that cannot be admitted, supervised in the ordinary sense, or held accountable. A chatbot that says it is a chatbot and stays in its lane is a convenience. A tool that holds itself out as a lawyer, or a lawyer who lets a tool do the thinking and signs the result, is the problem the rules were built to catch. The technology is new. The line is not.

This is general information for lawyers and law-firm leaders, not legal advice, and it does not create an attorney-client relationship. The authorities are cited so you can read them yourself.