A federal court ordered OpenAI to hand over 20 million ChatGPT conversation logs. A different federal court ordered a litigation expert to turn over the exact AI prompts she used to build her case. A criminal defendant found out the hard way that his exchanges with an AI chatbot offered him no legal protection at all. And news reporting in 2026 described federal prosecutors introducing a defendant’s ChatGPT conversation history as evidence in a criminal arson case, though the underlying details of that case remain under seal. All of this happened within the first eight months of 2026, and together it answers a question a lot of people have never thought to ask: is anything typed into an AI chatbot private?
What Happened This Year
On January 5, 2026, U.S. District Judge Sidney Stein of the Southern District of New York affirmed two discovery orders requiring OpenAI to produce a sample of 20 million de-identified ChatGPT user logs as part of the copyright litigation brought by The New York Times and other news organizations. The court had already ordered OpenAI to stop deleting ChatGPT logs entirely, preserving output data across every paid and free tier while the litigation was pending. OpenAI’s Chief Strategy Officer publicly argued that the tech industry needed a new legal concept, something like an “AI privilege,” to shield user conversations from subpoena the way attorney-client communications are shielded. The court rejected that argument outright. The users whose conversations were swept into that 20-million-log sample received no notice and had no opportunity to object before the fact.
Four months later, on May 18, 2026, a federal magistrate judge in Connecticut went a step further in a different kind of case. In Conservation Law Foundation v. Shell Oil Co., an environmental litigation expert had used OpenAI’s GPT-4o to filter through Shell’s discovery documents while preparing her expert report. Shell moved to compel production of the actual prompts she used. The court agreed, ruling that the prompts were part of the expert’s discoverable methodology under Federal Rule of Civil Procedure 26, no different than her notes or her search terms would have been. The plaintiff has objected and the order is currently stayed while that objection is resolved, but it marks the first time a federal court has directly addressed whether the questions someone asks an AI tool are themselves subject to discovery.
By late August 2026, The Washington Post and CNN were reporting a broader pattern: AI chatbot logs turning up as evidence in both civil and criminal cases with increasing frequency, not as a novelty but as a routine part of how disputes now get litigated.
Why None of This Should Be Surprising
Courts are not inventing a new rule for AI. They are applying an old one. Under discovery law, anything a party creates or stores that is relevant to a case is potentially discoverable unless a recognized privilege protects it. Emails are discoverable. Text messages are discoverable. Draft documents are discoverable. Courts are treating AI conversations the same way, as ordinary electronically stored information, because that is functionally what they are: text a person typed and a company stored on a server.
What makes this different from a text message to a friend is where the legal protection stops. A conversation with your own attorney is protected by attorney-client privilege. A conversation with ChatGPT is not, and no consumer AI platform’s terms of service create anything close to that protection. Deleting the conversation on your end does not remove it from the company’s servers, and once a preservation order or a litigation hold is in place, even conversations you deleted can be pulled back and produced.
How This Reaches a Criminal Case
In criminal investigations, prosecutors and law enforcement can obtain AI chat logs through a search warrant directed at the AI provider, or through a subpoena, the same tools used to obtain email and cloud storage records. Once obtained, a person’s prompts are generally treated as admissible statements, not barred as hearsay once properly authenticated, because they are the defendant’s words. A prompt that reads like an admission, a request for information tied to the underlying conduct, or an attempt to work out how to explain something away carries real risk precisely because it came from the person under investigation, in their words, with no attorney involved and no privilege attached. See our full Criminal Defense page for how the firm handles cases involving digital evidence.
The Case That Hits Closest to Home: United States v. Heppner
On February 17, 2026, U.S. District Judge Jed S. Rakoff of the Southern District of New York issued a written opinion in United States v. Heppner (Case No. 25 Cr. 503), ruling on what the court itself called a question of first impression nationwide: are a criminal defendant’s written exchanges with a publicly available AI chatbot protected by attorney-client privilege or the work product doctrine? The work product doctrine is the rule that shields materials an attorney prepares in anticipation of litigation. Judge Rakoff’s answer was no, on both counts. The court gave four reasons. The AI platform is not an attorney, so the exchanges were never attorney-client communications to begin with. The platform’s privacy policy permitted collecting and sharing user inputs and outputs, so there was no expectation of confidentiality. The defendant had not used the tool at his own attorney’s direction. And the resulting material did not reflect defense counsel’s strategy or work product. The government’s motion was granted, and the documents were subject to inspection.
One week earlier, on February 10, 2026, a federal court in Michigan reached a different result on a similar question. In Warner v. Gilbarco, Inc. (E.D. Mich., No. 2:24-cv-12333), the defendants tried to compel a self-represented plaintiff to produce everything related to her use of a generative AI tool while preparing her case, arguing that using the tool waived any privilege or work product protection. The court denied the motion, finding that her use of the AI tool to prepare her litigation materials fell within traditional work product protection, the same way using a word processor or a legal research database would.
Read together, these two rulings, decided one week apart in different federal districts, show that courts are not applying a single blanket rule to AI conversations. The outcome turns on who used the tool, why, under whose direction, and what the platform’s terms of service say about confidentiality. A criminal defendant asking an AI chatbot for help understanding his situation, without an attorney involved, got no protection. A self-represented civil litigant using the same kind of tool to help prepare materials for her own case did.
How This Reaches a Civil Case
In civil litigation, the same records become a target through ordinary discovery requests to the opposing party or a third-party subpoena directed at the AI provider. Employment disputes, contract disputes, fraud claims, and family law cases where someone’s intent, state of mind, or timeline is contested are the kinds of cases where a chat log documenting what someone was thinking in real time can become central evidence. The Connecticut ruling adds another layer unique to litigation itself: if an expert witness used an AI tool to help build their opinion, the prompts behind that work can now be treated as part of their methodology and ordered produced, the same way their notes and calculations always have been. See our full Civil Litigation page for how the firm handles discovery disputes.
How Courts Treat an AI Chat
Discovery and subpoenas reach AI conversations through an actual pending case and a genuine relevance argument, never through a fishing expedition across everyone’s chat history. Many people assume that typing something into an AI chatbot is closer to thinking out loud than writing it down. Courts treat it as writing it down.
Questions About AI Chats and Court Discovery
Can ChatGPT logs truly be subpoenaed?
Yes. Courts treat AI chat logs as ordinary electronically stored information, the same category as emails and text messages. They can be obtained either through a discovery request directed at the person who had the conversation or through a third-party subpoena directed at the AI company that stored it.
Is anything I type into an AI chatbot protected like attorney-client privilege?
No. A conversation with a consumer AI chatbot is not protected by any recognized legal privilege. Attorney-client privilege applies to communications with your own attorney alone. In United States v. Heppner, a federal court in New York ruled that a criminal defendant’s exchanges with an AI chatbot were not protected by attorney-client privilege or the work product doctrine, in part because the platform itself is not an attorney. OpenAI’s Chief Strategy Officer separately argued for a new form of “AI privilege” in the New York Times litigation, and the court rejected that argument too.
Does deleting an AI conversation protect it from discovery?
Not reliably. Once a preservation order or litigation hold is in place, deleted or temporary conversations can still be recovered and produced from the provider’s servers. Deletion on your end does not guarantee removal from the company’s systems.
Can my AI chat messages be used as evidence against me?
Yes. A person’s prompts are generally treated as admissible statements once properly authenticated, since they are the person’s words. This applies in both criminal cases, where prosecutors can obtain logs through a warrant or subpoena, and civil cases, where the opposing party can request them through discovery.
Are an expert witness’s AI prompts discoverable in a lawsuit?
According to a May 2026 federal ruling in Connecticut, yes, when the prompts are part of how the expert built their opinion. The court in Conservation Law Foundation v. Shell Oil Co. treated an expert’s AI prompts as part of their discoverable methodology under Federal Rule of Civil Procedure 26. That ruling is currently stayed while an objection to it is resolved, so it is not yet the final word on the question.
Does this apply to AI tools other than ChatGPT?
The legal reasoning in these rulings is not limited to any one AI product. Any consumer AI service that stores conversations on its servers can be subpoenaed, and any provider involved in litigation can find its stored logs subject to a preservation order, regardless of which company built the tool.
Should I ask an AI chatbot for legal advice about my case?
Be careful. As United States v. Heppner shows, what you type into a consumer AI tool while trying to understand your legal situation is not protected the way a conversation with your actual attorney is, and it can be turned over to the other side. An AI tool can help you understand general concepts, but it cannot function as your lawyer, and treating it like one can create a record that works against you later. A live call to a lawyer works differently, because Florida’s prospective-client rule protects what you tell a lawyer while discussing whether to hire them. See our post on asking a lawyer a question for free for details.
Will the AI company tell me if my data gets subpoenaed?
Not necessarily, and not in advance. In the OpenAI litigation, the users whose conversations were included in the 20-million-log production received no notice and had no chance to object before their data was produced. Notification practices vary by company and by the type of legal process involved, and there is no general legal requirement that a user be told before their AI conversations are handed over.
If I’m representing myself, is it safe to use AI to help prepare my case?
It depends on how you use it. In Warner v. Gilbarco, Inc., a court protected a self-represented plaintiff’s use of an AI tool to prepare her litigation materials, treating it as ordinary work product. The outcome was different in United States v. Heppner, where a criminal defendant’s AI exchanges got no protection at all. The distinction is not the technology, it is the context: preparing materials for your case is not the same as having an open-ended conversation with a chatbot about your situation, and the two can be treated very differently.
If You Are Involved in a Criminal Investigation or Civil Dispute
What you have typed into an AI tool, and whether it can be used against you, depends on the facts of your situation and which court’s rules apply. If you are under investigation or involved in litigation and are unsure what you may have exposed, call me directly. Calls reach me, Andre Rouviere, not an intake center, and the first consultation is free with no obligation to hire the firm. If it’s after hours or the weekend, the office keeps a 24-hour answering service.