Week 2 - Client Confidentiality; the Ethics of GenAI and Cybersecurity; the InFirm Privilege; Intro to Whistleblower Exceptions to Confidentiality

ABA Ethop 512

is a standard that provides guidance on the ethical considerations surrounding the use of artificial intelligence in cybersecurity. It focuses on ensuring that AI applications respect privacy, fairness, and the foundational principles of justice in technology implementation.

• persuasive, not controlling

• Delegat, not abdicate

• “The lawyer is fully responsible”

Professor Recommendations

• Beware of complacency

• Turn it off!

• Tech clients: “No way, no how”, don’t touch legal with AI

• ND on GenAI

  • Support, not outsourcing

  • Lots of training to use effectively

Background of Case

SSW sued its former law firm, Hunter Maclean, and demanded internal communications between firm lawyers and in-house counsel. While the trial court ordered the firm to produce those documents, the Court of Appeals vacated that decision and sent the case back for review.

St. Simons Waterfront hired Hunter Maclean to draft pre-sale contracts for a condo project, but buyers later tried to rescind their purchases due to contract defects.

When Hunter Maclean attorneys realized the client might blame the firm for rescissions, they alerted in-house counsel Arnold Young, who consulted outside legal counsel. Hunter Maclean continued handling routine closings while assisting the client in transitioning to a replacement law firm.

St. Simons Waterfront filed a malpractice lawsuit against Hunter Maclean and demanded internal communications involving both inside and outside lawyers. Hunter Maclean asserted attorney-client privilege, leading the client to file a motion to compel discovery.

Procedural Posture

Trial Court Ruling Imputing Conflicts of Interest: The trial court protected outside legal advice but ordered the disclosure of internal in-house communications. It ruled that the law firm's conflict of interest with its client extended to the in-house counsel and destroyed the privilege.

Court of Appeals Framework Restructured by Supreme Court: The Court of Appeals created a specialized test incorporating ethics rules and client consent to judge in-house privilege. The Georgia Supreme Court replaced that approach with standard state privilege laws, removing ethics rules from the evidentiary test.

Court Standard for In-House Privilege

Court ruled that standard privilege rules apply to internal communications with a law firm's in-house counsel. It clarified that lawyer ethics rules regarding conflicts of interest do not remove or alter legal evidentiary privilege.

Statutory Basis and Purpose of Attorney-Client Privilege

Attorney-client privilege protects confidential legal communications so clients feel safe speaking candidly with their lawyers. Because privilege keeps relevant information out of trial, courts construe the protection narrowly.

Application of Privilege to In-House Corporate Counsel

Georgia law firmly establishes that attorney-client privilege protects confidential consultations between corporate employees and corporate in-house counsel.

Jurisdictional Approaches to Law Firm In-House Privilege: Courts across the United States take conflicting approaches to law firm in-house privilege, ranging from denying protection entirely to allowing it under narrow conditions.

Establishing the Firm as In-House Counsel's Client: To establish an attorney-client relationship, a firm must prove in-house counsel was genuinely providing legal defense to the law firm as a client. Maintaining separate billing records and isolated legal files helps prove the firm was acting as the client. A formal, full-time in-house counsel position makes proving an internal attorney-client relationship much easier.

Irrelevance of Ethics Rules to Evidentiary Privilege

The Georgia Supreme Court held that state bar ethics rules are not intended to dictate or alter courtroom privilege laws. Consequently, potential conflict-of-interest violations do not destroy attorney-client privilege between a firm and its in-house counsel.

Imputed Conflicts Under Professional Conduct Rules: When law firm attorneys seek defense advice against a client, their conflict of interest is automatically imputed to other firm lawyers under ethics rules. Some outside courts use this imputed conflict rule to strip away in-house privilege entirely.

General Rules on Attorney-Client Prvilege

Attorney-Client Relationship Rules (Was there attorney-client privilege)

In summary, internal privilege attaches whenever a genuine attorney-client relationship exists and standard privilege prerequisites are satisfied.

Requirement for Legal Advice Purpose and Employment Scope: Privileged communications must occur specifically to seek or deliver legal advice within the scope of employment. Firm lawyers must consult in-house counsel in their capacity as representatives of the law firm itself

Maintaining Confidentiality for Intra-Firm Communications: To maintain privilege, internal legal discussions must remain confidential. Access should be limited strictly to in-house counsel, firm management, and staff directly involved in the underlying client matter.

Inapplicability of Privilege Under Crime-Fraud Exception: The crime-fraud exception invalidates privilege if in-house counsel is used to advance illegal acts or fraud rather than a legitimate legal defense.

Rejection by the Court and Reasoning

Rejection of Fiduciary Exception in Georgia Law: Georgia explicitly declined to create a "fiduciary exception" that would force law firms to share internal legal advice with current clients. Inapplicability of Real Client Rationale in Adversarial Context: The "real client" theory does not support a fiduciary exception because a law firm defending against a lawsuit does not share common interests with the suing client.

Priority of Privilege Over Ethical Duty of Loyalty: The court rejected claims that a lawyer's ethical duty of loyalty overrides evidentiary privilege. Professional loyalty duties are distinct from evidence law and do not automatically eliminate privilege protections.

Work Product Protection and elements

Work-product rules protect litigation preparation materials unless the requesting party shows substantial need and undue hardship. An attorney's mental impressions, opinions, and legal strategies receive absolute protection from discovery.

Continued Reaffirmation of Client File Ownership: Clients remain entitled to their own original legal files because the client owns the work generated during representation. The court reaffirmed that prior state precedent protecting client file ownership remains fully intact.

Application of Work Product Protection in Adversarial Posture: Once a law firm and client become legal adversaries, work-product protections apply to defense materials prepared by in-house counsel. The Court of Appeals decision was vacated and remanded to evaluate the case under these standards.

Class Notes

Lawyer communications with firm’s GC privileged against current firm client

• Does SSW get seek to communication with Macleans’ GC during time Hunter Mclean was representing SSW

Takeaways:

• Must observe hallmarks of privilege

  • Esp. confidentiality - tell the GC, not your office neightbor

  • Take GC’s direction onwritings, client communications

  • Firm should designate GC (firm policy)

  • GC should not be involved in the client rep.

  • Do NOT billt he client for time spent on consultations

  • Keep docs re disputed with client separate from client file

• Not yet the rule in every US jurisdiction or EU

Quiz on Shredded Memo

Anita to Steve, No violation to 1.6 because Steve part of firm, No because Steve not GC

• If addressed to Ethics Committe it is privileged

Anita to friend (lawyer outside the firm), if friend was acting as counsel, communication privileged

Broad Scope of Confidentiality and Technology Risks

The obligation of confidentiality broadly forbids attorneys from disclosing information related to representation and requires competent steps to prevent unauthorized access. Modern technological shifts toward email, cloud storage, and electronic databases have substantially increased the vulnerability of client data to interception.

Ethical Limits of Metadata and Spymail: Lawyers frequently face dilemmas regarding embedded metadata—such as hidden author comments—and email tracking tools ("spymail") designed to monitor recipient behavior. Utilizing tracking code or extracting opposing counsel's internal draft notes risks violating ethical prohibitions against dishonesty under Model Rules 4.4 and 8.4(c).

The "Reasonable Efforts" Ethical Standard

Whether a lawyer acts unethically during a data leak depends on whether they made "reasonable efforts" to prevent unauthorized disclosure under Model Rule 1.6(c). Model Rule 1.1 also obligates attorneys to keep abreast of the benefits and risks associated with technology, weighing factors like data sensitivity and safeguard costs.

Required Baseline Security and Cyber Threats: Ethics opinions dictate that baseline security procedures—such as strong passwords, firewalls, antivirus tools, and encryption—are mandatory for legal practice. High-profile incidents like the Panama Papers leak highlight how law firms are increasingly targeted for cyberattacks due to the sensitive nature of their files.

Inadvertent Disclosures and Model Rule 4.4(b)

Confidentiality breaches frequently result from human carelessness, such as sending emails to the wrong recipient or misplacing privileged materials during discovery. Model Rule 4.4(b) provides a safety net by requiring any receiving lawyer who knows or should know that a document was inadvertently sent to promptly notify the sender.

Duty Regarding Suspicious Inadvertent Receipt: An ongoing ethical debate exists regarding whether receiving lawyers have a broader affirmative duty to refrain from reviewing materials they suspect are confidential. Federal Rule of Civil Procedure 26(b)(5)(B) similarly mandates returning, sequestering, or destroying inadvertently produced trial preparation materials upon notice.

General Structure of Confidentiality Exceptions

While confidentiality is broad, legal rules carve out specific discretionary and mandatory exceptions permitting or requiring lawyers to reveal confidential information. State ethics codes vary widely, with some jurisdictions imposing far stricter mandatory disclosure requirements than the ABA Model Rules.

Obvious Exceptions

Implied Authorization and Client Consent: Model Rule 1.6(a) permits lawyers to disclose information that is "impliedly authorized" to carry out the client's representation, such as details stated in formal court complaints. Lawyers may also disclose confidential information whenever the client grants informed consent for specific uses, such as marketing or scheduling.

Historical Model Code Discretionary Approach to Client Crime

The historical Model Code granted lawyers broad discretion to reveal a client's intent to commit any crime, regardless of severity. However, this model restricted disclosure strictly to crimes committed directly by the client, excluding third-party acts.

Pre-2002 Model Rules Strict Confidentiality

Prior to 2002 amendments, the Model Rules eliminated most attorney discretion in favor of strict confidentiality. Disclosure was permitted solely when necessary to prevent a client from committing a crime likely to cause imminent death or substantial bodily harm.

Modern Compromise Standard for Disclosing Harm

The current version of Model Rule 1.6(b) balances confidentiality and harm prevention by permitting disclosure to prevent reasonably certain death, bodily harm, or severe financial injury resulting from client crime or fraud using the lawyer's services.

Non-Physical State Exceptions

Certain state rules extend confidentiality exceptions beyond physical or financial damage to safeguard civil rights. For instance, Massachusetts permits lawyers to disclose client information to prevent significant political disenfranchisement or voter suppression.

Florida's Unique Disclosure Mandates

Florida Rule 1.6 establishes mandatory disclosure to prevent client crimes or imminent death/bodily harm, alongside permissive disclosure for self-defense, fee disputes, or ethics compliance. It also explicitly requires attorneys to exhaust appellate remedies when ordered by a court to disclose confidential information.

Rule on Disclosing Minimum Necessary Information

Whenever an exception permits or mandates disclosing confidential client information, the lawyer is ethically required to disclose no more information than necessary to achieve the specific outcome.

Class Notes

bl. lawyer “may reveal”

1. “reasonably certain” does not have to have any connection to client, does not need to be imminent

2. [before the fact]: “client from committing crime or fraud” “substantial injury to the financial interests or property of another” “financial injury” “in furtherance” “lawyer’s service”

3. [after the fact] same as above

Comment: “only to the extent the lawyer reasaonbly belives the disclsoure is necessary toa accomplish one of the purposes specified”

Problem 2-2

Old Model code would have discretion, other’s probably not

Problem 2-3

Old Model Code would have discretion, yes to others as well since it would prevent reaonably death and injury

Problem 2-8

Don’t talk about the exceptions, only the self-harm

Problem 2-6

Yes, straight forward