Can ChatGPT Be Used Against You in Litigation?

Yes. A ChatGPT conversation is stored data, and stored data can be requested in discovery, subpoenaed, or seized under a warrant. In a copyright case a federal court ordered OpenAI to hand over a sample of 20 million de-identified user chats. In February 2026 a federal judge in New York held that a defendant's own chats with an AI platform were not privileged, and the government could read them. A 2025 order also forced OpenAI to keep chats that users had deleted, though that duty ended in September 2025. Treat anything you type into a consumer chatbot as something you may have to hand over later.

Reviewed and corrected on 12 October 2026. This is general information, not legal advice; check the cited rule or opinion before relying on it.

TL;DR

• Chats are stored data. The federal discovery rules reach electronically stored information in a party's possession, custody or control, and nothing in them sets AI chats apart.
• Two routes to the record, plus a third. A document request to you, a subpoena to the provider, or in a criminal case a warrant.
• Deleting is not a clean escape. A May 2025 order made OpenAI preserve output logs that would otherwise be deleted. OpenAI says that duty ended on 26 September 2025, but it still holds some data it set aside from April to September 2025.
• Courts have ordered chats produced at scale. In the New York Times copyright case a judge affirmed an order to produce 20 million de-identified ChatGPT logs, and wrote that users' privacy interests in those chats are weaker than in wiretapped phone calls.
• Privilege does not attach by default. In United States v. Heppner a judge held a defendant's chats with Claude were neither attorney-client privileged nor work product.
• Work product is a closer call. Two other courts recognized work-product protection for a self-represented litigant's AI use, and one of them ordered the litigant to name the AI tool used with confidential information.
• Your own prompts are the damaging part. Admissions, drafted accounts of disputed events and requests to explain away conduct carry the most risk.

AI chats are stored data

Federal Rule of Civil Procedure 34(a)(1)(A) lets a party request "any designated documents or electronically stored information" that is in the responding party's "possession, custody, or control" (Rule 34, Cornell LII, read 12 October 2026). A saved chat history on your account is electronically stored information in the ordinary sense, and Rule 34 does not carve out AI tools.

Scope still matters. Under Rule 26(b)(1) a party can get "any nonprivileged matter that is relevant to any party's claim or defense and proportional to the needs of the case" (Rule 26). A court can refuse a request for a stranger's chats for being irrelevant or disproportionate. In Warner v. Gilbarco (E.D. Mich. 10 February 2026) a magistrate judge refused to compel a self-represented plaintiff to produce her materials on using AI tools. The defendants' motion was denied mainly as untimely, and in the alternative the court said the material was not discoverable under Rule 26(b)(3)(A), was not relevant or, if marginally relevant, not proportional, and would be work product in any event (ECF No. 94). That is one magistrate judge's order and it binds no one else.

This post is the litigation and evidence angle. For the data-privacy question, see is ChatGPT confidential for legal work. For privilege in depth, see does ChatGPT have attorney-client privilege.

How an AI chat reaches the record

Route one: a document request served on you. In civil litigation another party can serve a Rule 34 request on you. If your ChatGPT history is relevant and proportional, it is within scope. Rule 37(e) covers what happens if you lose it. If electronically stored information that "should have been preserved in the anticipation or conduct of litigation is lost because a party failed to take reasonable steps to preserve it," and it cannot be restored or replaced through more discovery, a court that finds prejudice may order measures "no greater than necessary to cure the prejudice." Only on a finding that the party "acted with the intent to deprive another party of the information's use" may a court presume the information was unfavorable, instruct the jury to do so, or dismiss the case or enter a default (Rule 37). Deleting a relevant chat after a dispute is foreseeable can therefore cost you, and the penalty grows if the court finds intent.

Route two: a subpoena to the provider. A party can serve a Rule 45 subpoena on a non-party such as OpenAI. The provider can serve written objections, and on timely motion a court must quash or modify a subpoena that requires disclosure of privileged or other protected matter, if no exception or waiver applies, or that subjects a person to undue burden (Rule 45). OpenAI's privacy policy (updated 30 April 2026) says it may share personal data, "including information about your interaction with our Services," with government authorities in compliance with the law, and that if it receives a lawful subpoena it may retain data for the duration of the legal obligation. The Stored Communications Act, 18 U.S.C. § 2702(a), says a provider of an electronic communication service to the public "shall not knowingly divulge" the contents of a communication in electronic storage, subject to the exceptions in § 2702(b) (text). We did not research whether a court has applied that section to chatbot logs, so we do not rely on it here. Not verified in our October 2026 review. Check 18 U.S.C. § 2702 and recent case law.

Route three: a warrant. In a criminal case the government can seize devices and accounts. In Heppner, discussed below, agents searched the defendant's home under a warrant and seized about thirty-one documents recording his conversations with Claude.

Admissibility is a separate step. Getting a chat in discovery does not put it in evidence. The party offering it must authenticate it, meaning "evidence sufficient to support a finding that the item is what the proponent claims it is" (Federal Rule of Evidence 901(a), text). Your own prompts, offered against you, are excluded from the hearsay definition as a statement of an opposing party under Rule 801(d)(2)(A). Rule 801 defines a "statement" as "a person's oral assertion, written assertion, or nonverbal conduct," so the model's replies call for a different analysis from your prompts (Rule 801). Those are the general rules, not a prediction for any one case.

The OpenAI preservation order, and how it ended

The order came in the copyright suits that The New York Times and other news organizations brought against OpenAI, now part of In re OpenAI, Inc. Copyright Infringement Litigation, No. 25-md-3143 (S.D.N.Y.). On 13 May 2025 Magistrate Judge Ona T. Wang told OpenAI "to preserve and segregate all output log data that would otherwise be deleted on a going forward basis until further order of the Court," whether the deletion would be at a user's request or because of privacy laws (order).

OpenAI told users who was in scope: Free, Plus, Pro and Team subscribers, and API customers with no Zero Data Retention agreement. Enterprise, Edu and Zero Data Retention API customers were outside it (OpenAI, "How we're responding to The New York Times' data demands", updated 22 October 2025).

That ongoing duty ended. A stipulation approved by Judge Wang on 9 October 2025 terminated it as of 26 September 2025 (ECF No. 922). Three things continue:

• OpenAI keeps the output log data it had already segregated before 26 September 2025, except data from requests originating in the European Economic Area, Switzerland or the United Kingdom.
• OpenAI keeps preserving new output logs for accounts associated with the domains the news plaintiffs listed.
• The stipulation does not waive anyone's obligations under Rule 37(e), and the parties reserved their rights to seek further relief.

OpenAI's page now says it is back to its usual practice of removing deleted chats and Temporary Chats from its systems within 30 days. It adds that it is still securely storing limited historical data from April to September 2025, that only a small audited legal and security team can reach it, and that the data "will not be turned over to the New York Times, the Court, or anyone else at this time."

The 20 million logs

Separately from preservation, the news plaintiffs and a group of class plaintiffs sought chat logs in discovery. In July 2025 the news plaintiffs moved to compel a sample of 120 million consumer ChatGPT logs. OpenAI proposed a sample of 20 million de-identified conversations instead, and the news plaintiffs agreed to proceed with that sample while continuing to ask for more. On 7 November 2025 Judge Wang ordered OpenAI to produce the whole de-identified 20 million log sample to the news plaintiffs, and on 5 December 2025 she ordered the same for the class plaintiffs. On 5 January 2026 District Judge Sidney Stein denied OpenAI's objections and affirmed both orders (ECF No. 1021).

Judge Wang had treated users' privacy as one factor in the proportionality analysis and found it adequately protected by cutting the pool from tens of billions of logs to 20 million, de-identification, and an existing protective order. Judge Stein added that privacy interests in wiretapped phone calls "are stronger than the privacy interests in users' conversations with ChatGPT which users voluntarily disclosed to OpenAI and which OpenAI retains in the normal course of its business."

What this shows is that chat logs are discoverable in principle. It does not show that your chat will reach your own adversary. Those logs went to the news and class plaintiffs, de-identified, in one copyright case. Whether a particular chat is reachable depends on what it is, what is requested, and any protective order. OpenAI has contested these demands publicly, and a provider's objection does not put data out of a court's reach.

Is a chat privileged? Heppner, Warner and Morgan

Privilege is the protection people assume they have, and the first reported decisions say they usually do not.

United States v. Heppner (S.D.N.Y., 17 February 2026). Judge Jed Rakoff ruled that a defendant's written exchanges with the generative AI platform Claude were protected by neither attorney-client privilege nor the work product doctrine. He described it as appearing to answer a question of first impression nationwide. The defendant had used Claude on his own, after (his counsel said) receiving a grand jury subpoena, to prepare reports outlining defense strategy, and his counsel conceded they "did not direct" him to do so. The court found no attorney on the other end, no confidentiality given the privacy policy users of Claude consent to, and no purpose of obtaining legal advice from the tool. It added that non-privileged communications are not "alchemically changed into privileged ones upon being shared with counsel." The court also said that had counsel directed the use, the tool "might arguably be said to have functioned in a manner akin to a highly trained professional who may act as a lawyer's agent," and left that question open (memorandum, ECF No. 27). As of 12 October 2026 the CourtListener docket (No. 1:25-cr-503) shows a motion for acquittal or a new trial filed in June 2026, the U.S. Attorney's Office page (updated 11 September 2026) says sentencing is set for 21 October 2026, and we found no appellate ruling on the privilege question.

Warner v. Gilbarco (E.D. Mich., 10 February 2026). In the order described above, the magistrate judge said that if the defendants argued the plaintiff waived work-product protection by using ChatGPT, "the work-product waiver has to be a waiver to an adversary or in a way likely to get in an adversary's hand."

Morgan v. V2X (D. Colo., 30 March 2026). A magistrate judge held that Rule 26(b)(3) can protect a self-represented plaintiff's AI-assisted litigation preparation, but ordered him to disclose the name of any AI platform he used with information the defendant had designated confidential. The court also amended the protective order to bar inputting confidential information into any AI platform unless the provider is contractually prohibited from storing or using inputs to train its model and from disclosing inputs to third parties (with an exception for service delivery), and the provider must let the user delete the information on request. The court said this will, at least for now, bar the parties from using most, if not all, mainstream low-cost or free AI tools to process confidential information (order). That order was tailored to one case. It shows how a protective order can change what you may paste into a chatbot.

These rulings differ on facts and none binds courts elsewhere. We found no US statute or court rule that creates an "AI privilege." Sam Altman said on a July 2025 podcast, as quoted by TechCrunch, "we haven't figured that out yet for when you talk to ChatGPT" and "we should have the same concept of privacy for your conversations with AI that we do with a therapist or whatever" (TechCrunch, 25 July 2025). That is Altman's view, and no rule follows from it.

Civil and criminal cases

The mechanics are similar in civil and criminal matters. The difference is who seeks the record and what follows. A civil party uses discovery to build a claim or defense, and a chat can show what you believed, what you knew, and when. A prosecutor can use a warrant or subpoena and then offer what was found.

One example from the charging documents: in October 2025 federal prosecutors in Los Angeles charged Jonathan Rinderknecht over the January 2025 Palisades Fire. The affidavit supporting the criminal complaint recites ChatGPT prompts as part of its account, including a question he allegedly typed during a 911 call asking whether you are at fault if a fire is lit because of your cigarettes. He was indicted on 15 October 2025 (complaint, a media-hosted copy; Justice Department case page). These are allegations that have not been tested at trial, and we did not check the case's current status beyond the Justice Department page.

Prompts that raise the most risk

Most chats carry little risk. The ones that cause trouble capture your state of mind, your account of disputed events, or an attempt to manage a known problem.

• The admission. A prompt like "I knew the figures were off before I signed off on them" records the fact in your own words.
• The drafted account. Asking the model to help write an email or statement about disputed events records what you were trying to construct, including your edits.
• The justification request. A prompt asking how to minimize or explain away conduct can be read as awareness that the conduct was a problem.
• The timeline question. A question about what happens legally after a given event can pin down what you knew and when.
• The identifier. Names, dates, dollar figures and addresses turn a vague chat into a record that matches only you.

Guidance for individuals

These steps apply even when no dispute exists yet.

• Assume permanence. Write as if the chat could be produced later, because it can.
• Do not narrate a dispute. Keep your account of contested events out of a consumer chatbot.
• Skip the "explain it away" prompts.
• Strip identifiers when you do not need them.
• Know your preservation duty. Once you reasonably expect a legal dispute, do not delete relevant records. Talk to a lawyer first.

Guidance for lawyers advising clients

• Add AI chat histories to the litigation-hold scope alongside email, messaging apps and cloud files.
• Ask the discovery question early. Find out whether the client used AI tools to discuss the events at issue.
• Counsel clients before they delete. A well-meant cleanup can raise Rule 37(e) issues.
• Read the protective order before anyone pastes confidential material into an AI tool, since orders like the one in Morgan can restrict it.
• Watch your own confidentiality duty. ABA Formal Opinion 512 says a client's informed consent is required before inputting information relating to the representation into a self-learning generative AI tool whose output could disclose it, and that boilerplate in an engagement letter is not enough. The ABA Formal Opinion 512 guide covers the professional rules, and your state's own rules control.

A checklist to reduce exposure

• Treat every chat as a record. Discoverable, subpoenable, and possibly admissible.
• Keep admissions and contested accounts out of consumer chatbots.
• Do not rely on delete. It does not erase a preservation duty.
• Check which plan you are on. OpenAI says the 2025 preservation order reached Free, Plus, Pro, Team and API without Zero Data Retention, and not Enterprise or Edu.
• Confirm retention controls exist and you understand them. See where your legal AI data actually goes.
• Set a litigation hold that names AI tools before a dispute heats up.
• Get legal advice on preservation the moment a dispute is foreseeable.

Summary

ChatGPT conversations can be used against you in litigation. A court can reach them through a request to you, a subpoena to the provider or a warrant. Deletion does not reliably remove them, and the first reported decisions found no attorney-client privilege for a represented defendant's own chats. The rulings so far are narrow and fact-specific, and the law is still developing. For related questions see ChatGPT for lawyers.

For the US statutes, regulations and court rules these laws sit in, see the US primary law API.

FAQ

Can ChatGPT conversations be used against me in court? Yes. They are stored data that can be requested in discovery, subpoenaed from the provider or seized under a warrant. Offered against you, your own prompts are not excluded as hearsay under Federal Rule of Evidence 801(d)(2)(A), but the party offering them must authenticate them.

Can the other side get my ChatGPT history through discovery? If the chats are relevant and proportional to the dispute, they can be requested under Rule 34, or a party can subpoena OpenAI under Rule 45. Once litigation is reasonably foreseeable you may have a duty to preserve them rather than delete.

Does deleting a ChatGPT chat protect me? Not reliably. A May 2025 order made OpenAI preserve output logs that would otherwise be deleted. OpenAI says that duty ended on 26 September 2025 and it now deletes chats within 30 days, but it still stores limited April to September 2025 data. Under Rule 37(e), losing electronically stored information that should have been preserved can lead to court-ordered measures, and to harsher ones if intent to deprive is found.

Are my ChatGPT chats private or privileged? They may feel private, but we found no US statute or court rule giving them privilege. In United States v. Heppner (S.D.N.Y. 17 February 2026) a represented defendant's own chats with Claude were held neither privileged nor work product. Courts in Warner and Morgan recognized work-product protection for a self-represented litigant's AI use, which is a different question.

What is the OpenAI preservation order? On 13 May 2025 a magistrate judge directed OpenAI to preserve and segregate output log data that would otherwise be deleted, in the news organizations' copyright case. A stipulation approved on 9 October 2025 ended the going-forward duty as of 26 September 2025. OpenAI still keeps data already segregated, and new logs for accounts tied to domains the plaintiffs listed.

What kinds of ChatGPT prompts are most damaging in a case? Admissions, drafts of an account of disputed events, and requests to explain away conduct. Questions that reveal what you knew, and when, also raise risk, as do names, dates and dollar figures that tie a chat to you.

Can prosecutors use ChatGPT logs in a criminal case? They can seek them. In Heppner agents seized a defendant's AI chat documents under a search warrant, and a 2025 criminal complaint in Los Angeles recites ChatGPT prompts among its allegations. Those allegations have not been proven.

How can lawyers reduce exposure when using AI? Keep client confidences out of consumer accounts, add AI chat histories to litigation holds, and read protective orders before pasting confidential material into any tool. ABA Formal Opinion 512 requires informed client consent before inputting information relating to the representation into a self-learning tool that could expose it.

Sources

• In re OpenAI, Inc. Copyright Infringement Litigation, No. 25-md-3143: preservation order of 13 May 2025 (CourtListener RECAP)
• Stipulation and Order terminating the ongoing preservation obligation, ECF No. 922 (9 October 2025) (CourtListener RECAP)
• Order affirming the 20 million log orders, ECF No. 1021 (5 January 2026) (CourtListener RECAP)
• United States v. Heppner, No. 25 Cr. 503 (JSR), ECF No. 27 (S.D.N.Y. 17 February 2026) (CourtListener RECAP)
• Warner v. Gilbarco, Inc., No. 2:24-cv-12333, ECF No. 94 (E.D. Mich. 10 February 2026) (CourtListener RECAP)
• Morgan v. V2X, Inc., No. 25-cv-01991, Doc. 65 (D. Colo. 30 March 2026) (CourtListener RECAP)
• How we're responding to The New York Times' data demands (OpenAI, 5 June 2025, updated 22 October 2025) and OpenAI privacy policy (updated 30 April 2026)
• Sam Altman warns there's no legal confidentiality when using ChatGPT as a therapist (TechCrunch, 25 July 2025)
• Federal Rules of Civil Procedure 26, 34, 37 and 45; Federal Rules of Evidence 801 and 901; 18 U.S.C. § 2702 (Cornell LII)
• Criminal complaint, United States v. Rinderknecht (C.D. Cal.) and Justice Department case page
• ABA Formal Opinion 512, Generative Artificial Intelligence Tools (American Bar Association, 29 July 2024)

Last updated: 12 October 2026.

Arshita Anand

Co-Founder & CEO · Attorney

Arshita leads product and strategy at Vaquill AI, the US primary law data API. As an attorney, she decides which law we carry, how each section is sourced and cited, and what legal AI and compliance teams need from the data.