Summary

In a February 17, 2026 memorandum in United States v. Heppner, Judge Jed Rakoff held that a criminal defendant's written exchanges with Anthropic's consumer Claude service were protected by neither attorney-client privilege nor the work product doctrine. The opinion matters because it moves AI risk for lawyers beyond fake citations and into confidentiality, privilege, and workflow design.

Why It Matters

For lawyers, this is a direct operational signal about how AI can fail before any court filing is even drafted:

  • clients and legal teams can lose privilege by using public AI tools on their own initiative
  • firm AI policies need to distinguish consumer tools from counsel-directed, secure workflows
  • discovery, internal investigations, and defense preparation now require clearer AI instructions
  • legal teams need explicit supervision rules for any AI-assisted summarization or strategy drafting

PI Tool Angle

For private investigators working with counsel on civil, criminal, or internal-investigation matters, the practical angle is a secure case-review assistant or timeline-generation workflow that operates only inside a counsel-directed environment with contractual confidentiality protections. That PI angle is an internal inference from the court's reasoning, not a source-stated private-investigator use case.

What the Source Says

The opinion says the case presented a question of first impression nationwide: whether communications with a publicly available AI platform in connection with a pending criminal investigation are protected by privilege or work product. The court emphasized that Heppner used Claude after receiving a grand jury subpoena, did not do so at counsel's direction, and had no reasonable expectation of confidentiality because Anthropic's privacy terms permitted broad data use and disclosure. Judge Rakoff further wrote that if counsel had directed the use of Claude, the analysis might have looked different, but because Heppner acted on his own and the documents did not reflect counsel's strategy, the protections did not attach.