UPL (unauthorised practice of law) is illegal in every US state. Bar committees in California, New York, and Florida proactively investigate software-mediated services. The FTC pursued DoNotPay in 2024 for similar patterns. Comply Code flags the language and missing disclaimers that have triggered those investigations.
Non-attorneys can't 'practise law'. Statutes were written for humans; bars apply them to software products. Cease-and-desist letter is the typical first contact.
Federal layer for overclaiming AI legal capability. The DoNotPay 'robot lawyer' framing was the operative violation, independent of UPL.
Most state bars regulate marketing of legal services even by non-lawyers (advertising lawyer-like services without admission is itself enforceable).
Your signup, document-generation, and billing flows are commercial places of public accommodation. WCAG violations are demand-letter targets.
Legal questions involve sensitive personal data (immigration, criminal, family) — special-category under GDPR Art. 9. Pixels firing pre-consent = violation.
If users believe a privilege exists with your tool, and you process their data in ways inconsistent with privilege rules, both UPL and tort exposure apply.
That's exactly when it applies. UPL statutes prohibit non-attorneys from practising law. If your software provides advice tailored to a user's situation, takes action on their behalf (drafting filings, sending demand letters, negotiating), or markets itself as a lawyer, state bars treat it the same as a non-attorney human doing the same thing. See our article on UPL for the three-question test bars actually apply.
Direct equivalence claims ("AI lawyer", "replaces your attorney", "same as a lawyer"), active-representation language ("we'll file your case", "we'll negotiate for you"), outcome promises ("win your case", "beat the IRS"), and "legal advice" framings. State bar UPL committees and the FTC's DoNotPay action all cited these specific patterns. Comply Code flags them in your rendered page text.
The FTC's 2024 consent order against DoNotPay was a $193K settlement under Section 5 (deceptive marketing). The cited violations centred on the "world's first robot lawyer" framing and claims to perform legal services without attorney oversight. Multiple state bars filed parallel UPL complaints. DoNotPay restructured, added prominent disclaimers, and continues operating — UPL is rarely fatal but is expensive to get wrong.
The established floor: a persistent "not legal advice" disclaimer on every page that generates legal content, an "information not advice" framing on every output, an explicit "no attorney-client relationship" disclaimer, a jurisdictional scope statement, and (for premium products) a human-attorney review upsell. LegalZoom, Rocket Lawyer, and Clerky all carry essentially this language. It's not bulletproof but it's the recognisable industry baseline.
California, New York, and Florida — each runs an active UPL committee with institutional memory of software-mediated services. Florida is the notable outlier in that UPL is a third-degree felony under Fla. Stat. §454.23, although criminal prosecutions are rare. Most enforcement starts as a state-bar cease-and-desist letter, not a criminal action.
Free unlimited scans. $19 unlocks every fix prompt on a scan. $29/mo for unlimited. Read the full UPL guide →
Run a free audit →