How law firms can harness the power of AI safely
Artificial intelligence is no longer a future concern for law firms — it is already embedded in day-to-day tools, systems and behaviours. From transcription and document review to research and marketing, AI is reshaping legal work at pace. The challenge facing firms now is not whether to adopt AI, but how to do so safely, responsibly and without introducing unnecessary risk.
That was the focus of HiveRisk‘s recent What’s the Buzz…? webinar, delivered in collaboration with Heather Anson and Peter Wright of Anson Evaluate and Digital Law. The session explored what law firm leaders, compliance teams and DPOs need to understand and the practical steps they can take to introduce AI with confidence.
AI is already happening – whether firms like it or not
A key theme throughout the webinar was the reality that banning AI does not prevent its use.
As Kate Burt, CEO of HiveRisk, shared during the session:
“A blanket ‘don’t use AI’ policy doesn’t stop usage – it pushes it into the shadows. When people find workarounds, the data risk often becomes worse, not better.”
AI is embedded into browsers, transcription tools, spellcheckers, research platforms and case management systems. Staff are often using these tools with positive intent to save time or reduce friction but without clear guidance, this creates risk that firms cannot see or control.
Governance gaps are widening
Heather highlighted a striking insight from the Clio 2025 Legal Trends Report: many law firms either do not have an AI policy, or staff do not know one exists.
This gap between policy and practice is critical. Governance only works when it is clearly communicated, understood and embedded into everyday workflows.
As Heather explained:
“AI is a starting point – never the end. You should treat it like a trainee solicitor. Useful, yes, but nothing should ever go out without proper review.”
This framing resonated strongly with attendees. AI can support legal work, but professional judgment, accountability and oversight remain essential.
Hallucinations, confidentiality and professional risk
Peter provided a regulatory and legal perspective, highlighting that the risks associated with AI misuse are no longer hypothetical. Courts, regulators and professional bodies are now encountering real cases where AI-generated content has introduced serious errors.
Peter warned:
“AI can be of assistance, but it is not authoritative or infallible.”
He also stressed that law firms cannot assume AI systems are compliant by default:
“Whatever system you’re using has to comply with the laws of England and Wales – including UK data protection law.”
This includes understanding where data is stored, how it is processed, whether appropriate safeguards are in place for international transfers, and what contractual protections exist if something goes wrong.
Where AI delivers the most value today
One of the most practical insights from the session was where law firms are currently seeing the strongest return from AI adoption.
Heather shared that firms achieving the greatest benefits are focusing first on back-office and operational use cases – areas traditionally burdened by inefficiency and non-billable time. Workflow automation, internal knowledge management and marketing support often present lower risk and faster gains than client-facing legal advice.
As Heather noted:
“The most successful firms start by asking what they actually need – not what’s being sold to them.”
Practical takeaways for law firms
The packed session concluded with a set of clear, actionable takeaways for firms looking to move forward safely:
- Accept reality: AI is already in use – focus on control, not prohibition
- Create clear AI guidelines and ensure staff understand them
- Treat AI output as a draft, not an authority
- Ask suppliers the right questions: server location, data transfers, encryption, backups, break clauses and liability
- Involve the DPO early and conduct DPIAs where required
- Start with internal efficiency, where risk is lower and value is clearer
As AI continues to evolve, law firms that succeed will be those that enable innovation while maintaining trust, confidentiality and compliance. With the right governance and oversight, AI can become a strategic advantage rather than a regulatory headache.