Professional Responsibility: Confidentiality

Confidentiality is the bedrock of the attorney-client relationship, enabling the open communication necessary for effective legal representation. This duty extends far beyond the well-known attorney-client privilege, creating a protective ethical shield around all client information. As a legal professional, you must navigate its broad scope and critically important exceptions to fulfill your obligations without compromising client trust or legal integrity.

The Broad Scope of the Duty of Confidentiality

The duty of confidentiality is defined by Model Rule 1.6 of the American Bar Association's Model Rules of Professional Conduct. Its scope is intentionally expansive, covering "all information relating to the representation of a client," regardless of its source. This means you must protect not only what your client tells you in confidence but also information you glean from documents, third parties, observations, and even publicly available sources if it is connected to your representation. For example, if you discover a client's home address through public records while handling their estate plan, that information is still covered by Rule 1.6.

This broad scope creates a default rule of nondisclosure. It applies during the representation and continues indefinitely after the attorney-client relationship ends. The information does not need to be labeled "secret" or "confidential" by the client; the rule applies automatically. The purpose is to encourage clients to be completely candid with their lawyers, secure in the knowledge that their disclosures will not be revealed.

Exceptions to Confidentiality Under Model Rule 1.6

While the duty is broad, it is not absolute. Model Rule 1.6(b) outlines specific circumstances where you are permitted to reveal information relating to representation. Critically, these are discretionary exceptions; you are not generally required to disclose under Rule 1.6, unless another rule or law compels it. The key exceptions are:

1. To Prevent Reasonably Certain Death or Substantial Bodily Harm: You may reveal information to the extent you reasonably believe necessary to prevent a client from committing a crime or fraud that is reasonably certain to result in such harm. For instance, if a client in a custody case reveals a specific, imminent plan to abduct their child and flee the country, threatening the child's safety, you may have a basis to disclose.

1. To Prevent, Mitigate, or Rectify Substantial Financial Harm: This exception applies when a client has used or is using your services to further a crime or fraud that has caused, or is reasonably certain to cause, substantial financial injury. Disclosure is permitted only to the extent necessary to prevent, mitigate, or rectify the harm. If you discover a corporate client used legal opinions you drafted to defraud investors, you may disclose information to stop the ongoing fraud or notify affected parties.

1. To Secure Legal Advice about Your Compliance: You may reveal confidential information to obtain legal ethics advice for yourself. If you are uncertain whether a situation triggers one of these exceptions, you may consult with another lawyer or your state's bar counsel without violating Rule 1.6.

1. To Establish a Claim or Defense in a Controversy: You may disclose information necessary in a dispute between you and the client (e.g., a fee collection lawsuit or a malpractice action) or to respond to allegations in any proceeding concerning your representation of the client.

1. To Comply with Court Orders or Other Law: You may disclose information when required by a court order or other law. However, you must first challenge the order if there is a non-frivolous basis for doing so, such as arguing the information is protected by attorney-client privilege.

Confidentiality Versus Attorney-Client Privilege

A common point of confusion is the difference between the ethical duty of confidentiality and the attorney-client privilege. While related, they are distinct legal concepts. The privilege is an evidentiary rule that protects communications between a lawyer and client from being disclosed in a legal proceeding. It belongs to the client, who alone can waive it. Its scope is narrower than confidentiality.

Confidentiality, governed by Rule 1.6, is broader in three key ways. First, it protects all information relating to the representation, not just communications. Second, it applies in all contexts, not just in legal proceedings. A casual conversation at a social event is governed by the duty of confidentiality. Third, it can be waived by the lawyer's disclosure, not just the client's. Inadvertently leaving a client file in a public place may breach confidentiality but does not necessarily destroy the attorney-client privilege for a future trial. The privilege is a subset of the larger confidentiality obligation.

Confidentiality and the Organizational Client

Representing an organization, such as a corporation or government agency, presents unique confidentiality challenges. Under Model Rule 1.13, the client is the organization itself, not its officers, directors, or employees. You owe your duty of confidentiality to the entity. This means information you receive from a company's employees is generally protected from disclosure to outsiders, but you may be obligated to report that information up the ladder within the organization.

For example, if a mid-level manager at a corporate client tells you they are falsifying safety reports, that information is confidential vis-à-vis the world. However, your duty is to the corporation. You likely have an obligation to report this misconduct up the corporate chain—perhaps to the CEO or board of directors—so they can address the threat to the organization. Navigating this internal reporting, while maintaining confidentiality against external parties, is a core skill in organizational representation.

Common Pitfalls

1. Inadvertent Disclosure and "Everyday" Conversations: The greatest risk is often not a deliberate breach but an unguarded moment. Discussing a case in an elevator, leaving a case file open in a public café, or talking too generally about a "interesting client" at a social gathering can violate confidentiality. Correction: Treat all client information as sensitive. Be mindful of your surroundings, secure physical and digital files, and avoid discussing matters even in hypothetical terms outside secure, private settings.

1. Misjudging the "To Prevent Harm" Exception: Lawyers may over-disclose out of a well-intentioned but misguided sense of urgency, or under-disclose due to an overly rigid view of the duty. Correction: The standard is "reasonably certain" death, bodily harm, or substantial financial injury. You must make a factual, objective analysis. When in doubt, seek guidance through the "secure legal advice" exception before acting.

1. Confusing Client Identity in Organizational Representation: Treating an individual corporate contact as "the client" can lead you to follow their instructions against the organization's best interest, or mistakenly believe you can keep their secrets from the organization's leadership. Correction: Constantly reinforce in your own mind that the entity is the client. Clarify this at the outset of communications with constituents and structure your reporting and advice accordingly.

1. Failing to Properly Challenge a Court Order: Simply complying with a subpoena or court order demanding client information without assessment is a mistake. Correction: You have an affirmative duty to assert all non-frivolous objections on behalf of your client, such as claims of privilege or that the request is overly broad. Only if the court upholds the order after challenge must you comply.

Summary

• The duty of confidentiality under Model Rule 1.6 is extraordinarily broad, protecting all information relating to the representation from any source, and it survives the termination of the attorney-client relationship.
• Key exceptions permit, but do not require, disclosure to prevent reasonably certain death or substantial bodily harm, to prevent or rectify substantial financial harm from client crime/fraud, to secure legal ethics advice, and to comply with court orders.
• Attorney-client privilege is a narrower, evidentiary rule protecting communications in legal proceedings, while the ethical duty of confidentiality applies to all information in all contexts.
• When representing an organizational client, the client is the entity, not its individual members. You must protect the organization's confidential information from outsiders while often being obligated to report misconduct up the corporate ladder internally.
• Vigilance against inadvertent disclosure in informal settings is as crucial as understanding the formal rules, and you must actively challenge court orders for client information when a non-frivolous basis exists.