Can a Law Firm License Its Data to AI? Rule 1.6, ABA Op. 512 & What's Actually Licensable

A law firm can license only its own operational workflow data: IT tickets, HR and onboarding processes, internal training, and facilities and vendor management. Client files, matter documents, privileged communications, work product and billing narratives fall under ABA Model Rule 1.6 and stay out. Mode's legal minimum is low; the ethics scoping is the hard part.

Why do AI buyers want law firm data at all?

AI developers are building agents meant to do multi-step office work, and legal is one of the fields they most want to automate. Business Insider reported on October 13, 2026 that law and accounting "see especially high demand," and that data showing how work actually gets done is what buyers value. Mode's October 13 release set lower minimums for law and accounting firms "because AI labs are prioritizing legal and accounting data."

That demand creates a tension. The records an AI lab would value most from a law firm, the drafting, negotiation and advice, are exactly the records a lawyer is barred from disclosing. What a firm can offer is the record of how a professional services business runs itself. That is still workflow data, and Mode's model prices it by headcount and history, but it is a narrower asset than the pitch decks imply.

Does your firm meet Mode's headcount minimum?

Mode has published more than one number, and they changed within two weeks of launch. Use the program page figure as the current one and confirm during intake.

Mode's application asks for full-time desk employees, non-desk employees and years of operational data. Lawyers, paralegals, legal assistants and back-office staff are all desk employees for this purpose. A 6-to-9-person firm sits below the referral page target, so ask Mode directly which number governs.

What does Rule 1.6 actually prohibit?

ABA Model Rule 1.6(a) says: "A lawyer shall not reveal information relating to the representation of a client unless the client gives informed consent," subject to listed exceptions. None of the exceptions covers selling or licensing records. Three features of the rule matter here:

• It is broader than privilege. "Information relating to the representation" covers far more than privileged communications. A client's identity, the fact that a matter exists, deal terms, fee arrangements and the content of routine scheduling emails can all qualify.
• Rule 1.6(c) adds a security duty. Lawyers must "make reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to" client information. Handing a vendor sign-in access to a mailbox that holds client email is the kind of event this clause covers, even if the vendor promises to filter.
• States set the real rule. Your state's version of Rule 1.6, and its bar opinions, govern your firm. The ABA text is the model, not the law in your jurisdiction.

Mode says it removes or transforms names and contact details before onward delivery. Novaes said labs "don't care about who your customers are" and "all of that data gets transformed." In our reading, that answers a different question. De-identification is about what the final buyer sees. Rule 1.6 is about whether the firm may reveal the information to anyone outside the firm, and Mode's own process has its staff export and process the agreed copy before filtering it.

What does ABA Formal Opinion 512 add?

Formal Opinion 512, issued July 29, 2024, is the ABA ethics committee's first formal opinion on generative AI. It addresses lawyers using AI tools, not firms licensing records to AI buyers. Two of its conclusions still bear directly on this decision, as summarized by Uptime Legal:

1. Before putting information relating to a representation into a self-learning AI tool, a lawyer needs the client's informed consent.
2. "Merely adding general, boiler-plate provisions to engagement letters purporting to authorize the lawyer to use GAI is not sufficient."

If client information cannot go into a self-learning tool without matter-specific informed consent, it is hard to see how the same information could go into a training corpus sold to AI developers on the strength of an engagement-letter clause. The opinion also asks lawyers to read vendor terms, confirm retention and breach-notice commitments, and supervise outside providers under Rules 5.1 and 5.3. Those same checks apply to a data buyer's workspace.

We are not your ethics counsel, and nothing here is legal advice. Opinion 512 is persuasive guidance, not a binding rule, and state bars have issued their own AI opinions. Have counsel review your proposed scope against your state's rules.

What is actually licensable at a law firm?

Mode's program page lists the categories it buys: email and calendar, documents and files, chat and collaboration, calls and transcripts, CRM and sales, and billing and operations. At a law firm, sort each system by whether it can hold client information.

That table is the honest pitch. Business Insider described a marketing agency that sold Micro1 design files and client-onboarding checklists but no client-specific material. A law firm can draw the same line, but fewer of its records land on the safe side, and the line runs through the middle of most mailboxes.

Could client consent widen the scope?

In theory, yes. Rule 1.6(a) allows disclosure when the client gives informed consent, which the Model Rules define as agreement after the lawyer explains the material risks and reasonably available alternatives. In practice, consent is a poor route for a data-licensing deal, for four reasons:

• Scale. A single partner's mailbox can touch hundreds of clients. Opinion 512's reasoning points toward a matter-by-matter conversation, not a blanket clause, and that conversation would have to happen with every client whose information is in scope.
• Former clients. Rule 1.9(c) bars revealing information relating to a former client's representation except as the rules would permit for a current client. Years of history, which Mode says it values, means years of former clients you may not be able to reach.
• Third parties. Matter files hold information about opposing parties, witnesses, co-counsel and courts. None of them consented to anything, and their information is often what makes a record identifiable.
• The ask itself. A consent request tells the client that the firm expects to be paid for records of the client's matter. Few firms will want to have that conversation, and fewer clients will agree.

The practical result is that most firms that proceed will scope to firm-only records and skip consent entirely. That keeps the ethics analysis simple, and it is what we would expect counsel to recommend first.

What about your own employees' data?

Licensing even a clean operations record means licensing your staff's messages. If any of your employees are in California, their personal information has been fully covered by the CCPA since the employee-data exemption expired on January 1, 2023, according to the California Privacy Protection Agency. Other states have their own notice and consent rules. Emory law professor Ifeoma Ajunwa told Business Insider that whether employees' consent extends to the sale of their data is "an ethically gray area." Decide before signing how you will tell staff, and whether anyone can opt out.

What could a law firm be paid?

No public figure is specific to law firms. These are the ranges on record, each attributed:

Mode says its calculator "is illustrative, not a guaranteed offer" and that it reviews the systems and dates in scope, years of history, record volume and quality, and ownership terms before making a fixed offer. A firm that excludes mailboxes, matter files and billing has removed the bulk of its record volume. Expect a scoped-down law firm to price below what its headcount alone suggests. Our estimator applies Mode's legal minimum and published range to your headcount; read the methodology before relying on any number.

How does the process run, and where does ethics review fit?

The 14-day LOI window is short for a firm that needs an ethics opinion. Business Insider reported that some brokers make "exploding offers" that expire in 48 hours. Do not let any buyer's timetable compress your review. Our process guide covers each stage in more detail.

What should a managing partner check before signing?

• Written scope. A system-by-system list, with date ranges, that excludes anything holding client information.
• Ethics review. A written opinion from ethics counsel on the scope under your state's Rule 1.6 and any state AI guidance.
• Client agreements. Outside counsel guidelines and engagement letters often restrict use of firm records beyond the matter. Check your largest clients' terms.
• Vendor access. Who at Mode, or its contractors, sees the unfiltered copy, and under what confidentiality terms.
• Filtering evidence. Mode's release says it built its own PII-removal tools after other vendors would not let it audit theirs. Ask for a written description and sample output. Do not accept claims that data is fully anonymous; no vendor can promise that.
• Exclusivity. Mode's program page says the agreement defines scope and any exclusivity.
• Insurance. Novaes said Mode was "working on" a third-party insurance policy for potential data leaks. Ask whether a policy exists before relying on one.
• Staff notice. How and when employees are told.

Our risk checklist expands on each item, and our BizBuyData review covers the program itself.

Who are we, and how do we get paid?

DataLicensingAudit is an independent referral partner of Mode. If your firm signs a licensing agreement after we introduce it, Mode may pay us a referral fee; that does not change what you are paid. Details are on our disclosure page. We are not a law firm and do not give legal or ethics advice. Talk to your counsel. Accounting firms face a parallel set of rules; see our accounting firms page.