Client Confidentiality for Junior Associates

Practically every junior associate is aware of the associate who emailed opposing counsel by mistake or posted last week’s draft with a full commentary. Some are fortunate enough to realize their mistake. For others, it becomes a permanent part of the file for years to come.

Client confidentiality is an area you might learn about in law school but often is not given priority in practice. The rules are fairly straightforward but may be difficult to follow.

Junior associates make decisions throughout the day while tired, hurried, or working outside the office. Here are practical tips for keeping your clients’ information safe. This takes intentionality and discipline.

Legal & Operational Framework	Key Authority / Rule	Core Requirement for Associates
Duty of Confidentiality	ABA Model Rule 1.6	Broadly prohibits revealing any information relating to client representation without informed consent or specific exceptions.
Attorney-Client Privilege	Common Law Evidence Doctrine	Evidentiary rule protecting confidential legal advice from compulsory courtroom or discovery disclosure.
Virtual & Remote Practice	ABA Formal Opinion 498	Requires proactive cybersecurity, encrypted communication channels, and vetted virtual workflows outside the office.
Generative AI Tools	ABA Formal Opinion 512	Mandates understanding how AI vendors store and train on prompts; requires client consent before inputting confidential data.
Incident Escalation	Firm Loss Prevention Policies	Obligates immediate reporting of accidental disclosures, lost hardware, or security breaches to supervising partners.

Confidentiality Is Not the Same as Privilege

Newly minted attorneys are liable to not know the difference between attorney-client privilege and confidentiality. The two are similar, but not the same. Attorney-client privilege is a testimonial rule of evidence, which allows lawyers to refuse to disclose certain communications in court. The duty of confidentiality is more expansive.

ABA Model Rule 1.6, which has been adopted in most U.S. jurisdictions in one form or another, states that a lawyer shall not reveal information relating to the representation of a client unless an exception to the duty of confidentiality applies.

This includes extensive information about the client, the intent to sue, terms of a negotiation, and third-party information.

Practical Habits Starting with Simple Physical Actions

Practices are initiated with simple actions that often go unnoticed because they seem straightforward.

Lock your screen whenever you leave your desk, even if it’s only to walk to the printer. It only takes one keystroke.

Keep printed documents face down or in a folder when they are not in use. Take away printed jobs that aren’t being used, instead of leaving them in the common tray. Any print-outs that contain the client’s personal details (including drafts or sticky notes containing the client’s phone number) should be destroyed in the firm’s secure shredding bin.

Most Errors Happen with Emails

Mishandled emails continue to be one of the leading sources of accidental disclosure. The causes are generally straightforward: autocomplete fills in the wrong name from your contact list; you send a “Reply All” to the wrong person; or you send an email with an attached document, which contains tracked changes and other hidden data.

These other habits can greatly minimize the chance of accidental disclosures:

Add recipients at the bottom: Compose the message, proofread, and attach files before adding recipients to prevent the “Send” button from being clicked unintentionally.
Open each attachment: Ensure it is the latest version and clear away all comments, tracked changes, and metadata.
Utilize the firm’s secure file transfer or encryption tools: Transfer sensitive attachments via approved tools rather than by email.
Review email chains before they are forwarded: Be sure not to include private data from the earlier emails before forwarding the messages.

Client work should not be undertaken on personal email addresses or messaging services unless explicitly permitted by the firm as this can remove information from the firm’s systems (which have a responsibility to retain and protect it).

Outside the Office

Legal work nowadays is rarely done entirely in the office. Perhaps you’ll go through a matter file in a coffee shop before a meeting, have a question clarified with a client in a hallway at the courthouse, or send a draft from a boarding gate at the airport. All of them come with added risks to the traditional office workplace.

What Others Can See and Hear

First, imagine what other people might see or hear. A privacy screen for laptop computers will help prevent someone close enough to see your screen from being able to read your documents. Whenever you can, sit with your back against a wall.

If you have to call about a case, get somewhere private and do not speak loudly about sensitive information. Court hallways are crowded with people who have some connection with the other side.

Network Security

If you’re using free Wi-Fi in a café or an airport, great! Just remember, you’ve got no idea who owns the network or who else is on it.

ABA Formal Opinion 498 on virtual practice stresses that lawyers should pay attention to the security of their communications with clients and take appropriate protective measures. A VPN establishes an encrypted connection from your computer to a server, which makes it far more difficult for other users of the network to snoop on your communication.

Even if you are allowed to use a personal computer for some tasks, consult the IT department beforehand rather than choosing the best VPN service provider yourself, since some products may not meet the firm’s security standards.

Device Safety

Always keep the firm’s devices on you, encrypt them and put a strong password on them, and inform IT straight away if you lose them.

Public Discussions and Social Media

But some disclosures of client information don’t involve technology at all. They’re made in the elevator or on the train, where lawyers are sharing the details of their cases as though there’s no one within earshot. There’s always someone within earshot.

Discuss matters in private places. When you do need to speak of a matter in a public place, just speak in general terms, and do not mention any parties or anything else identifying.

Friends and relatives are no exception. Discussing an exciting case with your partner over dinner may seem harmless, but the duty of confidentiality does not end when you leave the office.

Generative AI and Client Information

AI tools are now routinely incorporated into the legal work of a number of firms. They also introduce important confidentiality considerations. ABA Formal Opinion 512, released on July 3, 2024, said lawyers must understand the treatment of any specific AI tool before using it with a client’s information. Many AI tools remember or use submitted information for training purposes, it said, and clients will need to give informed consent to the insertion of client data into such tools.

If Things Go Wrong, What Should You Do?

Mistakes can happen. All lawyers are human. A prompt, correct response is vital.

If you send the email to the wrong person, lose your computer or device, or suspect that someone is trying to hack into your email account, tell your supervising partner or the firm’s general counsel immediately. Do not keep quiet and sit around hoping that nothing bad will happen. Firms have procedures for these types of errors, and a quick response can prevent serious harm.

Conclusion

Confidentiality is a daily practice. Lock your screen when stepping away. Confirm you’re sending to the correct recipient in an email. Connect to the firm’s VPN when you’re on a Wi-Fi network in a coffee shop. Don’t have confidential calls in coffee shops. Think carefully before entering client information into a new tool. It’s the little things.

Adopt these practices early in the development of your legal practice. Read the policies of your firm and seek clarification where appropriate. Handle all client matters with extreme care. After all, your client may be watching.