The AI regulatory landscape for lawyers is evolving fast. In 2023, only a handful of jurisdictions had addressed AI use. By 2026, the majority have at least informal guidance — but the specifics vary enormously. Some states have issued formal ethics opinions with detailed requirements. Others rely entirely on existing Rules of Professional Conduct. Overlaid on all of this: the EU AI Act risk tiers apply to any firm processing EU client data, and ABA Formal Opinion 512 (July 2024) sets the baseline competence and supervision standard regardless of state guidance.
This guide covers every state: what regulation exists, what the bar has said, notable cases, and what attorneys should do right now. At the federal level, FTC AI enforcement authority under Section 5 of the FTC Act adds unfair/deceptive acts exposure when AI outputs are client-facing and unverified — a risk that state ethics opinions don't fully address. Executive Order 14110 (Biden's 2023 AI executive order) was rescinded by the Trump administration in January 2025; its successor status matters to firms that built compliance programs around its voluntary commitments, since those federal guidance anchors are now gone and the regulatory burden has shifted further toward state law. The emerging state preemption doctrine for AI laws is the next litigation frontier: as federal agencies pull back, states are filling the gap, but it remains unresolved whether comprehensive state AI laws (Colorado SB 205, Utah SB 149, California) will survive federal preemption challenges if Congress eventually passes framework legislation.
Related: AI Case Law · AI Disclosure Directory · AI Tools for Lawyers · AI by Practice Area
