---
title: "Collect facts for a breach notice without writing the notice"
url: "https://ailawframework.com/practice/financial-services-regulation/draft-a-reportable-breach-assessment-and-notification/united-states"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A28-T1-R3-US"
practice_area: "Financial Services Regulation (AFSL/ASIC/credit)"
tier: "red"
lawyer_review: "required"
jurisdictions: ["US"]
last_reviewed: "2026-10-22"
---

# Collect facts for a breach notice without writing the notice

> List the incident date, the systems named, and the customers or regulators already contacted according to the file. Write no notification.

Canonical page: https://ailawframework.com/practice/financial-services-regulation/draft-a-reportable-breach-assessment-and-notification/united-states  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Financial Services Regulation (AFSL/ASIC/credit)](https://ailawframework.com/practice/financial-services-regulation.md) |
| Human involvement | Red: Lawyer writes; AI may check, clarify or collect data |
| How AI is used | List the incident date, the systems named, and the customers or regulators already contacted according to the file. Write no notification. |
| What the lawyer must review | Any notice to a regulator or a customer is written by the lawyer. No breach-notification timetable was opened, so none is stated. Rule 206(4)-7 and Model Rule 1.6 govern the file and the use of a tool. Formal Opinion 512 requires verification before text is used. |
| Written for | United States |
| Applies to | [Draft a reportable-breach assessment and notification](https://ailawframework.com/practice/financial-services-regulation/draft-a-reportable-breach-assessment-and-notification.md) |

## Checking plan

- What the AI does: List the incident date, the systems named, and the customers or regulators already contacted according to the file. Write no notification.
- Basis: Checked against the linked sources on 22 October 2026. Confirm the current instrument before reliance.

## Notes

- The tool writes nothing that is sent.
- Do not add a deadline from an unopened regulation.

## Sources

- [17 C.F.R. section 275.206(4)-7, Compliance procedures and practices](https://www.law.cornell.edu/cfr/text/17/275.206(4)-7) (checked 2026-10-22)
- [ABA Model Rule 1.6, Confidentiality of Information](https://www.americanbar.org/groups/professional_responsibility/publications/model_rules_of_professional_conduct/rule_1_6_confidentiality_of_information/) (checked 2026-10-22)
- [ABA Formal Opinion 512, Generative Artificial Intelligence Tools (29 July 2024)](https://www.americanbar.org/content/dam/aba/administrative/professional_responsibility/ethics-opinions/aba-formal-opinion-512.pdf) (checked 2026-10-22)

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*