LEGAL REGULATION OF ATTORNEY-CLIENT PRIVILEGE IN THE CONTEXT OF CLOUD SERVICES AND ARTIFICIAL INTELLIGENCE SYSTEMS
DOI:
https://doi.org/10.32782/2523-4269-2026-95-114-119Keywords:
attorney-client privilege, cloud services, artificial intelligence, personal data protection, cross-border data transfers, confidentiality, European Court of Human RightsAbstract
The article examines the legal protection of attorney-client privilege in the context of the digitalization of legal activities caused by the use of cloud services and artificial intelligence systems by attorneys. It is substantiated that the use of foreign digital platforms in the process of a lawyer’s professional activity creates risks for the confidentiality of information about clients due to the possible cross-border transfer of personal data and access to them by technology providers. It is established that the legislation of Ukraine does not contain special legal regulation of the use of cloud services and artificial intelligence systems by attorneys and does not determine the specifics of the relationship between the obligation to observe attorneyclient privilege and the regime for the protection of personal data during their cross-border transfer. The provisions of the legislation of Ukraine, Regulation (EU) 2016/679 (GDPR), the practice of the European Court of Human Rights, the recommendations of the Council of Bars and Law Societies of Europe (CCBE) and the American Bar Association (ABA) are analyzed. It is proven that the use of foreign cloud and AI services actualizes the problem of simultaneous application of the attorney-client privilege regime and personal data protection. The existence of a regulatory inconsistency between the provisions of the legislation is substantiated and a mechanism for overcoming it is proposed by applying the principle of lex specialis derogat generali. It is proposed to improve national legislation by extending special guarantees of attorney-client privilege to the use of digital services, introducing a special regime for cross-border transfer of information constituting a professional secret, and developing professional recommendations for the safe use of artificial intelligence technologies in advocacy. It is concluded that effective protection of attorney-client privilege requires the adaptation of traditional legal mechanisms to the modern digital environment, taking into account European standards for the protection of human rights
References
1. Про адвокатуру та адвокатську діяльність : Закон України від 05.07.2012 № 5076-VI. Верховна Рада України. URL: https://zakon.rada.gov.ua/laws/show/5076-17#Text.
2. Правила адвокатської етики від 09.06.2017 (у ред. від 15.02.2019). З’їзд адвокатів України. URL: https://zakon.rada.gov.ua/rada/show/n0001891-17#Text.
3. Про захист персональних даних : Закон України від 01.06.2010 № 2297-VI. Верховна Рада України. URL: https://zakon.rada.gov.ua/laws/show/2297-17#Text.
4. Деякі питання передачі персональних даних за межі України засобами Єдиного державного вебпорталу електро-нних послуг : постанова Кабінету Міністрів України від 16 серпня 2022 р. № 910. Кабінет Міністрів України. URL: https://zakon.rada.gov.ua/laws/show/910-2022-%D0%BF#Text.
5. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation). Official Journal of the European Union. L 119, 04.05.2016. URL: https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng.
6. Проєкт Закону про захист персональних даних : реєстр. № 8153 від 25.10.2022. Верховна Рада України. URL: https://itd.rada.gov.ua/billInfo/Bills/Card/40707.
7. Ортинська М. Штучний інтелект: практичні та етичні питання у роботі юриста. Вища школа адвокатури НААУ. URL: https://www.hsa.org.ua/blog/stucnii-intelekt-prakticni-ta-eticni-pitannia-u-roboti-iurista.
8. CCBE guide on the use of generative AI by lawyers. Brussels : Council of Bars and Law Societies of Europe. 2 October 2025. 28 р. URL: https://www.ccbe.eu/fileadmin/speciality_distribution/public/documents/IT_LAW/ITL_Guides_recommendations/EN_ITL_20251002_CCBE-guide-on-the-use-of-the-use-of-generative-AI-for-lawyers.pdf.
9. CCBE technical guide on the use of AI tools and models by lawyers. Brussels : Council of Bars and Law Societies of Europe. 27 March 2026. 19 р. URL: https://www.ccbe.eu/fileadmin/speciality_distribution/public/documents/IT_LAW/ITL_Guides_recommendations/EN_ITL_20260327_CCBE-technical-guide-on-the-use-of-AI-tools-and-models-by-lawyers.pdf.
10. Generative Artificial Intelligence Tools. Formal Opinion 512. American Bar Association. Standing Committee on Ethics and Professional Responsibility. Chicago, 29 July 2024. 15 р. URL: https://www.americanbar.org/content/dam/aba/administrative/professional_responsibility/ethics-opinions/aba-formal-opinion-512.pdf.
11. Protocol amending the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (CETS № 223). Council of Europe, Strasbourg, 10 Oct. 2018. URL: https://www.coe.int/en/web/conventions/full-list?module=treaty-detail&treatynum=223.
12. Convention for the Protection of Human Rights and Fundamental Freedoms (ETS № 005) : Council of Europe Convention, Rome, 4 Nov. 1950. URL: https://rm.coe.int/1680a2353d.
13. Case of Michaud v. France, European Court of Human Rights (Fifth Section), Application No. 12323/11, Judgment of 6 December 2012. URL: https://hudoc.echr.coe.int/fre?i=001-115377.
14. Reznik v. Ukraine, no. 31175/14, Judgment, European Court of Human Rights, 23 January 2025. HUDOC Database. URL: https://hudoc.echr.coe.int/eng?i=001-240192.
15. Golovan v. Ukraine, no. 41716/06, Judgment, European Court of Human Rights, 5 July 2012. HUDOC Database. URL: https://hudoc.echr.coe.int/ukr?i=001-112021.
16. Denysyuk and Others v. Ukraine, nos. 22790/19 and 3 others, Judgment, European Court of Human Rights, 13 February 2025. HUDOC Database. URL: https://hudoc.echr.coe.int/eng?i=001-241747.
17. Černý and Others v. the Czech Republic (Applications nos. 37514/20, 37525/20, 37533/20, 37546/20 and 37555/20): Judgment of the European Court of Human Rights, 18 December 2025. HUDOC Database. URL: https://hudoc.echr.coe.int/eng?i=001-247564.
18. Про виконання рішень та застосування практики Європейського суду з прав людини : Закон України від 23.02.2006 № 3477-IV. Верховна Рада України. URL: https://zakon.rada.gov.ua/laws/show/3477-15#Text.
19. Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence and amending Regulations (EC) № 300/2008, (EU) № 167/2013, (EU) № 168/2013, (EU) 2018/858, (EU) 2018/1139 and (EU) 2019/2144 and Directives 2014/90/EU, (EU) 2016/797 and (EU) 2020/1828 (Artificial Intelligence Act). Official Journal of the European Union. OJ L, 2024/1689, 12.7.2024. URL: http://data.europa.eu/eli/reg/2024/1689/oj.
