Munir v SSHD [2026] UKUT 81
"To put client letters and decision letters from the Home Office into a public AI tool … is to place this information on the internet in the public domain, and thus to breach client confidentiality and waive legal privilege."
The Tribunal drew an explicit line between public AI platforms and "closed-source AI tools which do not place information in the public domain" — the latter acceptable for exactly these tasks. The supervising solicitor was referred to the SRA; the firm, to the ICO. Self-hosted, audit-chained, never-leaves-the-firm is no longer a sales pitch — it is a practising-certificate question. DONNA is built for it.