---
title: "Policy on putting client documents into an AI knowledge tool"
url: "https://ailawframework.com/precedents/knowledge-management/client-document-ai-input-policy"
type: "precedent"
site: "AI Law Framework"
id: "km-client-document-ai-input-policy"
area_id: "KM"
kind: "policy"
ai_level: "yellow"
version: 1
task_ids: ["KM-B12-18"]
law_stated_as_at: "2026-10-22"
---

# Policy on putting client documents into an AI knowledge tool

> A policy for when personal information from a client document may be put into an AI knowledge tool: APP 6, the OAIC warning against public generative tools, and the point that a false or generated output about a person…

Canonical page: https://ailawframework.com/precedents/knowledge-management/client-document-ai-input-policy  
Law stated as at: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

A policy for when personal information from a client document may be put into an AI knowledge tool: APP 6, the OAIC warning against public generative tools, and the point that a false or generated output about a person is still personal information.

## Key facts

- Kind: Policy. A policy or procedure for a firm or client.
- Practice area: [Knowledge Management](https://ailawframework.com/precedents/knowledge-management.md)
- Jurisdictions: Australia
- AI level: Yellow. You and the tool draft together, with you directing. You check every statement you rely on.
- Law stated as at: 2026-10-22
- Status: Maintained. Checked on 2026-10-22 against the authority it cites, for Australia.

## When to use it

Use when the firm writes or reviews its rule on using client documents as AI knowledge. It sits beside the privilege clearance. It does not decide privilege, and it does not authorise a vendor.

## Used for these tasks

- [Draft a firm policy on using client documents as AI knowledge](https://ailawframework.com/practice/knowledge-management/draft-a-firm-policy-on-using-client-documents-as-ai-knowledge.md)

## How AI may be used

AI may point a user to this policy and list whether a document has been marked as cleared; the lawyer decides whether a secondary use is permitted.

**AI may:**

- Quote this policy when a user asks whether a client document may be pasted into a tool
- List documents a lawyer has already marked as not for a public tool

**AI must not:**

- Must not put a client document into a publicly available generative AI tool
- Must not decide that a client would reasonably expect an AI use of their information
- Must not treat a hallucination or a deepfake about an identifiable person as outside the Privacy Act

**The lawyer checks:**

- Privilege clearance is still done under the separate record before advice files are ingested
- A public generative tool is not used for personal information, and particularly not for sensitive information
- If the developer can see the input, that disclosure is covered by the collection notice and the privacy policy, or it is not made

## Authorities

- [Office of the Australian Information Commissioner, Guidance on privacy and the use of commercially available AI products, updated 21 October 2024: APP 3, APP 5, APP 6, and the recommendation on publicly available generative AI tools](https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/guidance-on-privacy-and-the-use-of-commercially-available-ai-products)

## Full text and drafting notes

The full text and the drafting notes are not part of this public page. Signed-in firm accounts can read them at https://ailawframework.com/precedents/knowledge-management/client-document-ai-input-policy and through the signed-in MCP connector https://ailawframework.com/mcp/firm.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*