Big Law Steps Up AI Training to Combat Data Breach Threats, Misuses

A growing majority of law firms are now offering — and in some cases mandating — generative AI training for lawyers, as firms seek to reduce the risks of data breaches, fabricated citations and the unauthorised use of AI tools.

According to Bloomberg Law’s 2026 Leading Law Firms survey, around 70 per cent of firms reporting on technology training said they provide generative AI instruction for attorneys. Among those firms, an average of 73 per cent of lawyers have completed the training.

Law firms say structured training, alongside dedicated governance teams, is helping lawyers experiment with AI securely while reducing the risk of exposing private or confidential information, which could trigger regulatory breaches or professional misconduct.

The survey, based on self-reported data, found that 57 per cent of participating firms have established AI governance teams.

“If you’re not giving your attorneys and staff an option for using AI safely and responsibly, they’re going to find it on their own and experiment independently,” said Robert Skinner, chief executive of Offit Kurman, a mid-sized law firm.

Training Gains Momentum

As firms increasingly look to harness AI, many are taking deliberate steps to encourage lawyers to become more comfortable with the technology while using it responsibly.

At Eversheds Sutherland, for instance, employees have been encouraged to spend at least two hours a week of their personal time familiarising themselves with their preferred AI tools, according to Lino Mendiola, the firm’s global co-chief executive and US chief executive.

“That’s on top of everything the firm asks of them. And that was the call to action,” Mendiola said, adding that the initiative was backed by formal training and embedded AI thought leadership.

Offit Kurman has also introduced layered AI training programmes through its professional development team to ensure attorneys have clear guidelines and a secure framework for integrating AI into their daily workflows.

The firm uses a mix of instructor-led sessions and computer-based learning to train lawyers on evaluating AI outputs and managing them safely. Offit Kurman reported that all of its attorneys have completed AI training.

“We believe this training is essential—not only to meet our professional responsibilities as a law firm, but also to ensure that governance doesn’t discourage lawyers from using AI. We want them to experiment responsibly and safely,” Skinner said.

Managing the Risks

One of the biggest dangers of unregulated AI use is the possibility of confidential or sensitive client information being entered into public-facing AI platforms, said Michael Bruckner, chief information officer at Duane Morris.

Bruckner said governance controls are critical in reducing the likelihood of lawyers turning to unauthorised tools.

“Our philosophy is to make tools available where governance controls are already in place, so people understand how to use them properly instead of turning to publicly available alternatives,” he said. He added that the firm also has monitoring systems to restrict access to certain public AI platforms.

Defining a clear list of approved AI tools and their appropriate uses is equally important, said Eric Felsberg, principal at Jackson Lewis, who heads the firm’s technology industry group.

“Not only does it ensure compliance with internal guidance, but it also makes people understand they can’t simply download and use any AI platform without safeguards,” Felsberg said.

The Pressure to Catch Up

The survey found that larger firms—particularly those with more than 500 lawyers—are more likely to offer AI training. The biggest firms, with more than 1,000 attorneys, also reported the highest completion rates.

Firms that fail to introduce AI training programmes or governance structures risk exposing both themselves and their clients to avoidable legal and ethical vulnerabilities.

Mark Williams, a law professor at Vanderbilt University and co-founder of the university’s AI Law Lab, said firms without AI policies may be underestimating how transformative the technology has become.

“If firms are not yet at the point of having a policy, they’re effectively betting that AI is not a paradigm shift—or underestimating how widespread it already is,” Williams said.

He warned that the risks of inadvertent AI misuse now exist across nearly all forms of knowledge work because of how modern systems are designed.

Still, even where policies exist, the challenge remains significant.

“The future is here, but it’s unevenly distributed,” Williams said. “When I work with smaller and mid-sized firms, many know they need to act, but the scale of it can feel overwhelming. It can create a kind of paralysis by analysis.”

 

 For any enquiries or information, contact ask@tlr.ae or call us on +971 52 644 3004. Follow The Law Reporters on WhatsApp Channels.