How Transparent Should a Law Firm Be About Using AI for Client Intake?

A prospective client should not have to guess whether they are interacting with an AI system, why information is being requested or whether a person will review the outcome. Transparency does not require a lengthy technical explanation at the start of every enquiry. It requires clear, timely information about the system’s purpose, the role automation plays, how personal information will be used and where human responsibility begins. For law firms, this clarity supports informed participation, protects trust and reduces the risk of technology creating an impression the firm did not intend.

TL;DR: Key takeaways

Law firms should be open when AI is involved in collecting or progressing an enquiry.
The disclosure should explain purpose and impact, not simply label the tool as “AI”.
Privacy information should appear when it is relevant, not remain hidden in a website footer.
Prospective clients should understand the limits of the interaction and how to reach a person.
Transparency wording must remain accurate as the technology and process change.

What should a law firm tell prospective clients about AI-powered intake?

A law firm should clearly explain:

That the person is interacting with an automated or AI-supported intake system.
What the system is intended to do.
What information it will collect.
Why that information is needed.
How the information will be used.
Who may receive or access it.
Whether the system influences qualification, routing or appointment availability.
When a member of the firm will review the enquiry.
How the person can request human assistance.
That the interaction does not provide legal advice or confirm that the firm has accepted the matter.
Where the complete privacy information can be found.

The explanation should be proportionate to the effect of the system. A tool that records a callback request does not require the same explanation as one that assesses answers and determines which next step is offered.

Why is an “AI-powered” label not enough?

Telling someone that a system uses AI identifies the technology, but it does not explain what the technology is doing.

The prospective client needs to understand the practical effect of the interaction.

A meaningful notice should answer:

Is the system gathering information or generating advice?
Does it classify or qualify the enquiry?
Does it determine which team or appointment is offered?
Will a person review the information?
Can the person challenge, correct or supplement an answer?
What happens if the system cannot handle the enquiry?

Transparency should focus on the person’s experience and choices rather than technical terminology.

Phrases such as “intelligent assistant” can be unclear if they conceal whether a human is involved. The wording should not encourage someone to believe they are speaking directly with a solicitor when they are not.

What does UK data-protection guidance require?

The ICO’s guidance on the right to be informed states that individuals must receive information about the collection and use of their personal data. This includes the purposes of processing, retention periods, recipients and applicable rights.

The ICO says privacy information should be:

Concise.
Transparent.
Intelligible.
Easily accessible.
Written in clear and plain language.

Where AI is applied to personal data, the same guidance says organisations should be upfront about it and explain their purpose for using the technology. If solely automated decisions produce legal or similarly significant effects, additional information may be required.

Not every automated intake classification will meet that threshold. Firms should assess the actual process and obtain appropriate advice rather than assuming that every use of AI is legally identical.

The ICO page notes that its guidance is under review following the Data (Use and Access) Act 2025. Firms should check the latest version when preparing or revising their privacy information.

Use layered transparency throughout the intake journey

A single privacy-policy link is unlikely to answer every question at the moment the information becomes relevant.

A layered approach allows the firm to give people the most important information first, with access to greater detail when needed.

Layer one: Immediate disclosure

Before the interaction begins, the person should understand that the system is automated or AI-supported.

The notice should briefly explain its purpose and clarify whether human support is available.

This is the point to prevent the mistaken belief that a solicitor is personally responding.

Layer two: Contextual information

More specific information should appear when the system requests data that needs additional explanation.

This may cover:

Why a particular category of information is required.
Whether answering is optional.
How the answer affects the next stage.
Why an upload is being requested.
Whether the information will receive human review.

The ICO refers to this approach as providing just-in-time privacy information.

Layer three: Complete privacy information

The full privacy notice should remain readily available throughout the interaction.

It should accurately describe:

The identity of the firm acting as controller.
Contact details for privacy enquiries.
Processing purposes and lawful bases.
Categories of information collected.
Recipients and service providers.
Applicable international transfers.
Retention periods.
Individual rights.
Complaint routes.
Relevant automated decision-making or profiling.

The notice should describe the actual intake process rather than repeat generic privacy wording that could apply to any part of the firm.

Layer four: Outcome confirmation

When the interaction ends, the person should receive a clear account of what happens next.

That confirmation should distinguish between:

An enquiry being received.
An enquiry being provisionally classified.
A consultation being arranged.
A matter being formally accepted.

These are not interchangeable outcomes. Transparent language prevents an automated next step from being mistaken for confirmation that the firm has agreed to act.

Explain the limits of the system

An AI-powered intake system should have defined boundaries, and those boundaries should be visible to the prospective client.

The firm should state that:

The interaction does not provide legal advice.
The system cannot confirm that the firm will act.
Information submitted may require human review.
Urgent or emergency matters may require another contact route.
The person should not rely on the interaction to protect a limitation date or legal deadline.
Appointment availability does not itself establish a solicitor-client relationship.
Formal engagement requires the firm’s approved acceptance process.

The precise wording should be reviewed by the firm and aligned with its services, jurisdiction, regulatory obligations and insurance arrangements.

Do not make the AI appear more authoritative than it is

Conversational technology can communicate confidently even when its role is limited.

The name, visual design and language of the system should not imply that it:

Is a qualified legal professional.
Can provide personalised legal advice.
Has accepted professional responsibility.
Can assess every form of urgency.
Has completed conflicts or regulatory checks.
Can guarantee that the firm will accept the enquiry.

Transparency includes avoiding misleading impressions as well as providing formal privacy information.

Make the human route clear

Transparency is incomplete if the firm explains that AI is involved but provides no practical route to human assistance.

The intake process should explain:

When a person will review the enquiry.
How human contact can be requested.
What happens when the system cannot determine the next step.
How inaccurate information can be corrected.
Where accessibility support can be obtained.
How concerns about personal-information handling can be raised.

Automation should create an organised route to the firm, not a barrier between the person and professional support.

How much should the firm explain about automated qualification?

A firm does not necessarily need to publish its complete commercial acceptance criteria. It should, however, give people a meaningful understanding of how automation affects them.

If the system uses answers to determine whether an appointment is offered or which route is presented, the person should not be left with the impression that a solicitor has personally assessed the matter.

The explanation should be sufficient to answer:

What decision or recommendation is being supported?
Which broad categories of information influence it?
Is the result final or subject to human review?
What can the person do if the result appears wrong?
Will the information be used for another purpose?

The greater the impact of automation on the person, the stronger the need for a clear explanation and an appropriate human-review route.

Keep transparency information accurate

A privacy notice can become inaccurate when the technology changes but the website wording does not.

The firm should review its disclosure whenever there is a change to:

The supplier.
The AI model or technical architecture.
The information collected.
The qualification criteria.
The purpose for using the data.
Storage or retention arrangements.
Subprocessors.
International transfers.
Human-review procedures.
The actions the system can perform.

Responsibility for the wording should be assigned to a named role. Marketing, operations, compliance, data protection and legal leadership may all need to contribute.

Professional responsibility remains with the firm

In September 2026, the SRA published a warning notice on the misuse of AI. It states that firms remain responsible for their professional duties when using AI and should maintain appropriate governance, supervision and safeguards.

The notice also warns that information entered into AI systems may be stored, retained or used in ways that create confidentiality and data-protection risks, depending on the provider’s terms, settings and architecture.

For SRA-regulated firms, this creates a clear reason to align public transparency with internal governance. The firm’s wording should match what actually happens to the information behind the interface.

Firms regulated in Northern Ireland, Scotland or the Republic of Ireland should consult the guidance and professional requirements applicable to their jurisdiction.

This article is general educational information and does not constitute legal or regulatory advice.

How Auvia fits into a transparent intake process

Auvia is an AI-powered client-intake platform designed for law firms and accountancy practices.

It responds to enquiries, asks qualifying questions, books suitable consultations and provides the fee earner with a briefing before the meeting.

When introducing Auvia, a firm should clearly explain the role the system performs. Prospective clients should understand that it supports the preliminary intake process and does not provide legal advice or replace professional judgement.

The firm should also align its privacy information, website wording, qualification rules and human-review process before launch.

Technology can make intake more responsive and structured. Transparency ensures that the improvement does not depend on creating a false impression about who or what is making the decision.

Conclusion

Law firms should be transparent enough for prospective clients to understand the system, its purpose, its effect and its limits.

The most effective disclosure is not a wall of technical or legal language. It is a series of clear explanations delivered when the information matters.

A prospective client should know that AI is involved, why questions are being asked, how the answers affect the next step and when responsibility passes to a person.

To see how Auvia could support a transparent, structured intake process for your firm, book an Auvia demo .

null

Frequently asked questions

Must a law firm tell someone that AI is being used during intake?

Where AI processes personal data, ICO guidance says organisations should be upfront about its use and explain the purpose. The exact information required depends on how the system operates and affects the individual.

Is linking to a privacy notice sufficient?

Not necessarily. The person must be made aware of the information and given an easy way to access it. Short disclosures and just-in-time notices can make important information visible at the relevant point.

Does transparency require publishing the firm’s qualification criteria?

Not in full. The firm should provide a meaningful explanation of how automation affects the enquiry without necessarily disclosing confidential commercial rules or controls that could be manipulated.

Should the intake system identify itself as AI in every message?

Repeated disclosure may not be necessary if the information remains clear and visible. The firm should ensure the person is not allowed to forget or misunderstand that the interaction is automated.

What happens if a prospective client disagrees with the automated outcome?

The firm should provide an appropriate route to correct information, add relevant context or request human review. The route should be proportionate to the significance of the outcome.