Industries · Law Firms

Technology That Keeps Privileged Information Privileged

Firms hold some of their clients' most sensitive information, and ethics rules now expect lawyers to understand the technology protecting it. We give firms secure document exchange, protected devices and a plan for when something goes wrong.

ABA Model RulesEthics duties
What the rules expectTechnology duties in the ABA Model Rules and opinions
Rule 1.1 · Technology competenceDuty
Rule 1.6(c) · Reasonable safeguardsDuty
Op. 477R · Securing communicationsGuidance
Op. 483 · After a data breachGuidance
Op. 512 · Generative AI toolsGuidance
States adopt their own versions; your state bar's rules control.
Why It Matters

Confidentiality is an ethical duty

A breach at a law firm is not just an IT incident. It can become a professional responsibility problem.

⚖️

Clients expect discretion

Litigation strategy, deal terms and personal matters live in your files. Corporate clients increasingly send security questionnaires before engaging outside counsel.

💸

Wire fraud targets closings

Business email compromise aimed at real estate closings and settlements can divert client funds with a single spoofed message.

📨

Email is not a vault

Discovery, contracts and medical records are still emailed as attachments that can be misdirected, forwarded or intercepted.

Rules at a Glance

The ethics rules that touch your IT

The ABA Model Rules and formal opinions spell out what "reasonable" looks like for client information.

Rule 1.6(c)

requires reasonable efforts to prevent unauthorized access to or disclosure of information relating to a client's representation.

Op. 477R

says lawyers must assess how sensitive a communication is and may need enhanced security, such as encryption, for some client information.

Op. 483

sets out duties to monitor for breaches, act to stop them and notify current clients when their information is affected.

Source: ABA Model Rules of Professional Conduct. Most states adopt their own versions of these rules.

Not legal advice. Shiny Moose provides IT and security services, not legal or compliance advice. The rules summarized here are simplified; your firm remains responsible for its own policies and should confirm its obligations with counsel or its compliance advisor.
How We Help

Practical safeguards for a modern practice

Reasonable, documented security that fits how attorneys and staff already work.

Common Questions

Good to Know

Does using your services satisfy our ethics obligations?

They support them. "Reasonable efforts" depends on your firm and your clients, so confirm your obligations with ethics counsel. We provide the technical safeguards and records that show what you put in place.

Can clients and opposing counsel use Secure File Share without an account?

Yes. You can send password-protected, expiring links for downloads or uploads, and revoke them at any time.

Will this work with our practice management software?

We secure the devices, network and accounts around the tools you already use. Tell us what you run and we'll walk through how it fits.

What happens if we have a breach?

We help contain it, work out what was accessed and restore from backup. The activity records also help you decide which clients need to be notified.

Ready to review
your firm's safeguards?