Seven Security Considerations for Lawyers
By: Michael Naughton
Legal practices, as organizations that maintain sensitive data, must be mindful of security threats. The ABA Model Rules of Professional Conduct set forth the duties and responsibilities expected of lawyers. These include providing competent representation that requires legal knowledge, skill thoroughness and preparation. The Model Rules also highlight the duty of a lawyer to not reveal information related to the representation of a client without client consent and should make reasonable efforts to prevent inadvertent/unauthorized disclosure of or access to information related to the representation of a client. Lastly, the Model Rules state that a lawyer shall store clients’ property, in connection with a representation, separate from the lawyer’s own property.
ABA Formal Opinion 477R, published in 2017, confronted the transmission of information over the internet related to the representation of a client. In the Opinion, the committee recognized the sophistication of InfoSec threats and noted that some forms of electronic communication may be vulnerable. Pointing to Model Rule 1.6(c), the committee cited the following “reasonable efforts” determination factors:
Consistent with this analysis, it was found that “particularly strong protective measures, like encryption, are warranted in some circumstances.” Considering information security and protecting client information, the opinion offered seven considerations for lawyers:
Accordingly, legal practices ranging from solo-practitioners to multi-national firms are mandated to maintain the confidentiality, integrity and availability of information related to the representation of clients. Lawyers must take appropriate steps to identify and defend against InfoSec events. Review of the Michigan and the ABA Model Rules of Professional Conduct provide models that can assist legal practitioners to consider the implications of security events and tactics to use within their businesses to mitigate problems.
About the author: Michael C. Naughton is a co-Owner North Coast Legal, PLC. He is