Letter · Confidentiality & client information
Confidentiality undertaking for an external reviewer or expert
Undertaking by a person outside the practice who will see client material, limiting use to a stated purpose and prohibiting upload to a tool the practice has not approved for that material.
- Kind
- Letter. A letter or email you adapt and send.
- Where it applies
- New South Wales
- AI use
- Yellow You and the tool draft together, with you directing. You check every statement you rely on.
- Law stated as at
- 22 October 2026
- Status
- Maintained. Checked on 22 October 2026 against the 5 authorities it cites, for New South Wales.
- Version
- 1
- Source
- Written for this library
When to use it
Use when an expert, a contract reviewer, a due-diligence reader or another outsider will receive client confidential information. Do not use the staff AI undertaking for that person, and do not use this letter for a member of the practice.
Used for these tasks
- Decide whether client material can go into a tool
- Build an upload checklist for a matter before any file goes into a tool
Each task page says how far AI may help with the task and what the lawyer must review.
How AI may be used
AI may complete the parties, the purpose and the list of approved tools from instructions the principal has approved. The principal decides who signs and what they may see.
AI may
- Insert the recipient, the matter and the purpose from the engagement terms
- Attach the list of tools the principal has marked as approved for this material
AI must not
- Must not decide that the client has authorised the disclosure
- Must not add a tool to the approved list
- Must not describe the letter as a deed or add execution formalities for a deed
The lawyer checks
- The client has authorised this disclosure, or another rule 9.2 ground the principal names applies
- The purpose is narrow, and the tool clause matches the tools actually approved for this material
- The recipient has signed and returned the undertaking before the material is sent
Method: how the Green, Yellow and Red levels are decided. This is guidance for planning, not legal advice.
Read the full text
The full text is available after you log in. It is free. When you log in you can:
- read the whole precedent, with its drafting notes beside it;
- copy it, or download it as a Word file or Markdown;
- add it to your firm’s knowledge base, so colleagues can find it;
- let the AI tools you connect read it from that knowledge base.
The summary, the law it rests on and the AI-use guidance above stay public. Privacy.
More in Confidentiality & client information
- AI confidentiality rules for staff (short form of the firm AI policy)
- Information barrier protocol for one matter
- Waiver of a concurrent conflict of interest (United States)
- Checklist before any file on a matter goes into a tool
- Staff and contractor AI confidentiality undertaking and acknowledgement
- Protocol before using a self-learning generative AI tool (United States)
- AI vendor confidentiality and privilege questions (short form of the vendor due-diligence questionnaire)
- Inventory of systems that can see client material
- Staff undertaking on unapproved generative AI tools (United States)
- Engagement clause: client authority for AI processing of confidential information (rider to the AI engagement clauses)
- Comparison of a provider's terms on storage, training and subprocessors
- Check before using a hypothetical in a generative AI tool (United States)
- AI data incident steps (confidentiality short form of the AI incident response procedure)
All precedents for Confidentiality & client information · Tasks and AI use in this area