Author: Lisa Vandesteeg
Long gone are the days when attorneys could take an “as needed” approach to technology. Over the past few years, the American Bar Association (ABA) has continued to update its guidance on ethical requirements related to technology and cybersecurity, including Formal Opinion 477R in 2017 and Formal Opinion 483 in 2018. Prompted by the massive shift in the way attorneys – and nearly every business, for that matter – are interacting with their clients and engaging in the practice of law remotely due to the coronavirus pandemic, the ABA issued Formal Opinion 498 in March 2021.
The opinion takes a fresh look at the latest technological advances and changes to the ways attorneys practice law in a remote work environment and provides guidance on how to navigate the heightened cybersecurity risks attorneys face.
“At all times, but especially when practicing virtually, lawyers must fully consider and implement reasonable measures to safeguard confidential information and take reasonable precautions when transmitting such information,” the opinion states.
Expanding on the recommendations outlined in Formal Opinion 477R, ABA Opinion 498 provides guidance on general cybersecurity responsibilities, including:
The opinion also addresses activities that have been more prevalent in light of our remote work arrangements:
Formal opinion 498 reiterated that supervising attorneys have an obligation to ensure that attorneys on their team are abiding by these rules as well, and specifically recommended “routine communication and other interaction…to discern the health and wellness of the lawyer’s team members.”
The complex relationship between technological advances and the accompanying risks can create a confusing landscape for attorneys, and the unique circumstances of the past year have exacerbated these complexities. But one thing remains certain: competence in technology cannot simply be outsourced and attorneys’ ethical obligations cannot be minimized. The Model Rules – and ABA’s recent opinions – make it clear that attorneys must educate themselves on the ever-changing risks and the benefits of technology.