California SB 574: Attorney AI Law — What Firms Must Do by January 2027

Summary

• Governor Newsom signed California SB 574 on September 30, 2026 — the first US state statute to codify mandatory AI compliance obligations for attorneys.
• The statute takes effect January 1, 2027, giving California law firms approximately 90 days to comply.
• Four obligations apply to every California attorney who uses generative AI: personal citation verification, consumer AI data prohibition, no-delegation-of-practice, and anti-discrimination compliance.
• SB 574 runs on top of — not in place of — California COPRAC ethics amendments to Rules 1.1, 1.4, 1.6, 3.3, 5.1, and 5.3. Both apply simultaneously.
• A violation of SB 574 carries civil liability and court sanctions in addition to bar discipline — a fundamentally different exposure profile than a COPRAC-only violation.
• The most time-sensitive compliance action is a written citation verification protocol. Every California attorney who signs court filings needs one before January 1.

---

What SB 574 Requires

SB 574 creates four statutory obligations for California attorneys using generative AI in legal practice. These are not bar ethics rules — they are codified in the California Business and Professions Code, enforceable through civil litigation and court sanction as well as bar discipline.

1. Personal Citation Verification

Before any AI-generated citation goes into a court filing, the signing attorney must verify it personally. Not a paralegal. Not the AI platform's built-in citation checker. Not another AI tool run on top of the first one.

The attorney who signs the filing must confirm: (1) the case exists, (2) the quoted passage appears verbatim in the original decision, and (3) the citation remains good law — not overruled or narrowed on the point being cited. Westlaw or Lexis is the required verification source.

The stakes for skipping this step were already escalating before SB 574 became law. AI citation sanctions exceeded $145,000 in Q1 2026 alone across documented cases. Two Oregon attorneys paid $110,000 in a single matter. A Nebraska attorney was suspended indefinitely over 57 defective citations. As of mid-2026, 41 courts — 27 federal district courts and 14 state courts — require some form of mandatory AI citation certification before filing. SB 574 adds a statutory violation on top of all of that for California attorneys.

2. Confidential Client Data Stays Out of Consumer-Grade AI

Attorneys cannot input sensitive client information — Social Security numbers, dates of birth, driver's license numbers, and other personally identifying information — into public or consumer-grade AI systems. If attorneys at your firm are using personal ChatGPT accounts, Gemini without an enterprise subscription, or any consumer-tier AI for client matter work, that practice ends now.

This was already required under COPRAC Rule 1.6. SB 574 makes it a statutory obligation with civil liability exposure on top of bar discipline.

3. No Delegating the Practice of Law to AI

SB 574's most ambiguous provision prohibits delegating "the practice of law" to generative AI. The bill does not define what that means for AI purposes — courts have wrestled with that question in unauthorized practice disputes for decades and will now define it in the AI context through enforcement and case law.

The safest compliance posture for a firm using AI-assisted drafting: document that the attorney exercises independent professional judgment over every final work product. Reviewing and approving AI output wholesale — rubber-stamping AI drafts without meaningful attorney analysis — is the behavior most at risk under a broad reading of this clause.

4. Anti-Discrimination Compliance

Attorneys must ensure AI use does not produce unlawful discrimination based on protected characteristics. If an AI tool generates recommendations with disparate impact on a protected class, and you act on them, the legal exposure is yours. The practical implication for most small firms is awareness: understand what your AI tools are doing and be alert to outputs that raise discrimination concerns.

---

The Four-Step Compliance Checklist

California attorneys have until January 1, 2027. These four steps address the material compliance requirements in priority order.

Step 1: Write a Citation Verification Protocol This Week

One page. Four steps. Every attorney who signs court filings follows it before any filing that includes AI-generated research or drafting:

1. Search each AI-generated citation in Westlaw or Lexis.
2. Confirm the quoted passage appears verbatim in the source document.
3. Confirm the case has not been overruled or narrowed on the cited point.
4. Log the verification in a matter note: date, initials, tool used.

This takes approximately 15 minutes for a filing with five citations. Write it, circulate it to every attorney and paralegal who touches litigation, and document that you follow it. Under COPRAC Rule 3.3, this is what competent citation practice with AI already looks like. Under SB 574, it satisfies the statutory personal-verification requirement. The protocol protects both ways.

Write this week — not in November. The implementation window is short and courts will not accept "we were planning to" as a defense if a citation violation arises in January.

Step 2: Audit AI Tools Actually in Use

Not which tools you have approved. Which tools attorneys are actually using, for which tasks, and whether any of those tools involve entering client data.

Walk through three questions for each tool:

• Is this a consumer-grade or enterprise-privacy-compliant version?
• What client information could enter this tool?
• Does the attorney review and exercise independent judgment over the output, or does the output go out with minimal modification?

If an attorney is using a free personal ChatGPT account for any client matter work, that tool comes off the approved list. If AI-generated drafts are going out with light touch-ups but no meaningful attorney analysis, your "no delegation" compliance posture is at risk.

Step 3: Update Your Engagement Letter

Add one sentence to your standard engagement letter template: "Our firm uses AI tools to assist with legal research, drafting, and document review. All AI-assisted work is reviewed and verified by a licensed attorney before delivery."

For fuller coverage, add: "We do not input your personally identifying information — including Social Security numbers, dates of birth, or driver's license numbers — into publicly accessible AI systems."

Engagement letters already signed do not need retroactive updates. But updating your template now protects every new matter you open before January 1. COPRAC Rule 1.4 already required disclosure of material AI use. SB 574 signed raises the stakes for missing it.

Step 4: Document Your AI Workflow Supervision

Write down what AI does in your firm, step by step, and where attorney review occurs. For each AI workflow: (1) what task the tool performs, (2) at what point an attorney reviews the output, (3) how the attorney makes independent professional judgments rather than approving AI output wholesale.

This documentation serves two functions: it demonstrates your "no delegation" compliance posture under SB 574, and it creates the supervision record that COPRAC Rules 5.1 and 5.3 require for attorney and non-attorney AI use. A firm with documented workflows can demonstrate compliance. A firm without them cannot.

---

SB 574 and COPRAC: Two Parallel Tracks

California attorneys are now operating under two overlapping legal frameworks. Understanding the difference matters because the enforcement mechanisms are different.

COPRAC ethics rules — specifically amendments to Rules 1.1, 1.4, 1.6, 3.3, 5.1, and 5.3, approved through the California State Bar's public comment process in 2026 — are bar ethics rules. They set the professional responsibility standards for California attorneys. Violations lead to bar discipline: warnings, formal charges, suspension, or disbarment.

SB 574 is statutory law, codified in the California Business and Professions Code. It is not a bar rule. It is a statute passed by the legislature and signed by the governor. Violating a statute governing your license and practice can mean civil liability through private lawsuit, court sanctions imposed in the matter, and loss of licensure — in addition to bar discipline that may also be triggered.

An attorney who files an AI-generated brief with hallucinated citations and fails to verify them before submission:

• Violates COPRAC Rule 3.3 (candor to the tribunal) — subject to bar discipline
• Violates SB 574 (personal citation verification requirement) — subject to civil liability and court sanctions
• May face sanctions from the court under existing Federal Rule 11 or California Code of Civil Procedure § 128.7 authority

These tracks are independent. A court can sanction the attorney for the filing violation. The California State Bar can initiate discipline for the COPRAC violation. A client who suffers harm can bring a civil claim under SB 574. All three can happen in the same matter.

The firms most at risk are those treating SB 574 as redundant with COPRAC and assuming their existing ethics compliance is sufficient. It may be. But the enforcement exposure under statute is broader than under ethics rules alone, and the civil liability track opens avenues that bar discipline does not.

---

What Happens If a Firm Violates SB 574

SB 574 creates enforcement exposure on three distinct tracks:

Court sanctions. A court handling a matter where an SB 574 violation occurs — such as an AI citation submitted without personal verification — can impose monetary sanctions, order remediation, or refer the matter to the State Bar. Courts were already imposing significant sanctions for AI citation failures before the statute; SB 574 provides an additional statutory basis for those sanctions.

Civil liability. Because SB 574 is codified in the Business and Professions Code, a violation can give rise to civil claims. The exact contours of civil liability under SB 574 will be defined through litigation — but firms should understand that a client who suffers harm from an AI-related professional failure now has a statutory violation to anchor a civil claim, not just a malpractice theory.

Bar discipline. A SB 574 violation is also likely a violation of one or more COPRAC ethics rules (particularly Rules 1.1, 1.6, or 3.3 depending on the nature of the violation). The California State Bar can initiate disciplinary proceedings independently of any civil or court action. Consequences range from private reprovals to suspension or disbarment.

Malpractice insurance implications. Malpractice carriers are beginning to track documented AI compliance procedures as a factor in renewal and underwriting conversations. A firm without a documented citation verification protocol is in a materially different position than one with a documented, logged process — both in claims defensibility and, increasingly, in premium terms.

The practical takeaway: the consequences of getting this wrong are significantly more severe than they were 12 months ago, and they are layered in ways that multiply rather than substitute for each other.

---

SB 574 Compliance Timeline

Date	Milestone
September 30, 2026	SB 574 signed — statute enacted
October 31, 2026	Target: written citation verification protocol complete and circulated
November 30, 2026	Target: updated engagement letters and AI workflow documentation
January 1, 2027	Statute takes effect — all four obligations are legally enforceable

If January 1 arrives without a written citation verification protocol, updated engagement letters, and documented AI workflows, you start the year out of compliance.

---

What Out-of-State Firms with California Bar Admission Need to Know

SB 574 applies to California-licensed attorneys, not California-based firms.

If you hold a California bar admission and practice anywhere in the United States — from a Dallas office, a remote setup in Colorado, or a two-attorney firm in New Jersey — SB 574 applies to your practice. The statute governs the attorney's license, not the firm's location.

If you are a firm without California-admitted attorneys, SB 574 does not directly apply yet. But California has 260,000 licensed attorneys — the largest state bar in the US — and SB 574 is now the first statutory AI compliance framework for attorneys in any state. The template is written. New York, Texas, Florida, and Illinois have been watching the California legislative process closely. If you are not a California-admitted attorney today, you may be operating under a similar statute within 12 to 24 months.

The time to build compliant AI workflows is before your state legislature acts.

---

Related Resources

• California SB 574 Is Law: Compliance Action Guide — The three-action compliance checklist for California law firms after Newsom's signature
• California SB 574 on Newsom's Desk: What the October 12 Deadline Meant — The governor's review window, what sign vs. veto meant, and the two steps that mattered either way
• California Is About to Pass the Strictest AI Law for Lawyers — The full breakdown of SB 574's provisions, the "no delegation" ambiguity, and the COPRAC parallel
• AI Citation Verification: What 41 Courts Now Require — The court-specific certification requirements and the three-step verification workflow
• AI Compliance for Law Firms: Professional Responsibility Guide — ABA Formal Opinion 512, COPRAC requirements, and the four-component compliance framework for small law firms

---

Sources

• California Legislative Information, SB 574 bill history (leginfo.legislature.ca.gov)
• California State Bar COPRAC AI ethics amendments, Rules 1.1, 1.4, 1.6, 3.3, 5.1, 5.3 (2026)
• ABA Formal Opinion 512: Generative AI Tools (July 2024)
• Artificial Lawyer, "California SB 574: Will AI's Home State Kill Off AI for Law?" (August 26, 2026)
• ComplexDiscovery AI sanctions tracker Q1 2026
• Damien Charlotin, GC AI Sanctions Tracker (mid-2026)
• Hunton Andrews Kurth, "Guardrails for Legal AI: What California's SB 574 Would Require of Attorneys and Arbitrators"