It’s Time to Review, Update, and Strengthen Your Risk Management Procedures
Del O’Roark, Loss Prevention Consultant, Lawyers Mutual Insurance Company of Kentucky
For years the bane of many a lawyer’s existence was how to manage client paper files. Issues concerned the duty of a lawyer to maintain, return, and destroy client files consistent with the requirements of confidentiality, the property interest of clients in their files, and good malpractice risk management. With the replacement of the typewriter by the computer client documents are now routinely created in electronic format (e-documents) and often transmitted by e-mail. For this reason, one might think the ethical duties of file management got easier to manage because, of course, there would be so much less paper to control.
As we all know that did not turn out to be the case. There seems to be nearly as much paper to file as ever. Adding to the burden is that in addition to e-documents, copious amounts of e-mail relevant to a representation are sent over the Internet to clients, courts, and third persons, as well as e-mail sent within the firm about a matter. In today’s practice of law most clients of necessity now require two files – one paper and the other electronic. As the old saying goes every solution breeds new problems.
The purpose of this article is to review a lawyer’s duty to include e-documents in a client’s file. The Bar of the City of New York Committee on Professional and Judicial Ethics Formal Opinion 2008-1 nicely framed the issues with these questions:
This article begins with a review of the guidance in KBA ethics opinions on client file management and the coverage of e-documents and e-mail in the 2009 Kentucky Rules of Professional Conduct. This is followed with an analysis of the questions raised and answered in Formal Opinion 2008-1. The article concludes with suggested risk management practices for client e-files.
Is a client entitled to a copy of the file?
The general rule in Kentucky is that clients are entitled to the return of their complete file upon termination of a representation with the exception of uncompensated work product unless withholding it would substantially prejudice the client’s interests. The KBA Ethics Committee observed in KBA E-235 that:
The client is entitled to receive what he has paid for and the return of what he has delivered to the lawyer. Beyond that, the conscientious lawyer should not withhold from the client any item which could reasonably be anticipated to be useful to the client.
For more information on this general rule, read 2009 Rule 1.16(d) and its Comments (9) and (10); and KBA Ethics Opinions E-235, E-280 and E-395.
What goes in a client file?
There is no single Kentucky Professional Conduct Rule (hereinafter Rules or Rule) that specifies everything that should be in a client’s file, but KBA Ethics Opinions E-235 and E-395 adopted an ABA opinion listing what records must be given to a client. The list includes:
In addition Rule 1.15, Safekeeping Property, requires that complete records of client funds and other property be kept by the lawyer and preserved for a period of five years after termination of the representation.
How should lawyers dispose of client files on closed matters that no longer need to be retained?
KBA Ethics Opinion E-300 provides guidance for the disposition of closed or nonessential client files. The basic policy is:
Based on this policy the opinion lists these considerations in managing file closing and destruction:
The opinion contains the advice that the lawyer should follow in disposing of files:
How do the Rules treat e-documents and e-mail for client file purposes?
The rapidity with which e-documents and e-mail came to dominate client information in the 1990s overwhelmed the then existing ethics rules on client files. After going through an awkward adjustment period in dealing with the ethics of modern electronic modes of communication and document creation, it was realized that existing ethics principles could be applied to e-documents and e-mail just as they applied to paper documents with only minor adjustments to professional responsibility rules. It is now generally recognized that lawyers are authorized to file client information electronically.1
An earlier version of Kentucky’s Rules did not anticipate the impact of e-documents and e-mail on the delivery of legal services, but the recently issued 2009 Rules treat e-documents, e-mail, and paper documents related to a representation alike. For example, in Rule 1.0, Terminology, a new definition was added for “writing” or “written”:
(n) “Writing” or “written” denotes a tangible or electronic record of a communication or representation, including handwriting, typewriting, printing, photostating, photography, audio or videorecording and e-mail. A “signed” writing includes an electronic sound, symbol or process attached to or logically associated with a writing and executed or adopted by a person with the intent to sign the writing.
Comment (20) to Rule 1.7, Conflicts of Interest: Current Clients, reinforces the point that correspondence with a client by e-mail is a writing that just like paper correspondence should be placed in a client’s file:
Paragraph (b) requires the lawyer to obtain the informed consent of the client, confirmed in writing. Such a writing may consist of a document executed by the client or one that the lawyer promptly records and transmits to the client following an oral consent. See Rule 1.0(b). See also Rule 1.0(n) (writing includes electronic transmission).
Comment (2) to Rule 4.4, Respect for Rights of Third Persons, includes another example of the intent of the Rules to treat e-documents and e-mail the same as paper documents:
Paragraph (b) recognizes that lawyers sometimes receive documents or other communications that were mistakenly sent or produced by opposing parties or their lawyers. … For purposes of this Rule, “document” includes e-mail or other electronic modes of transmission subject to being read or put into readable form.
May required client trust account records be maintained exclusively in electronic format?
I covered this question in “Client Trust Account Principles & Management for Kentucky Lawyers” (2d ed., 2010) as follows:
The question arises whether client trust account records may be maintained exclusively in electronic format eliminating the storage of voluminous paper files. Rule 1.15, Comment (1) provides in part:
“A lawyer should maintain on a current basis books and records in accordance with generally accepted accounting practice and comply with any recordkeeping rules established by law or court order. See, e.g., ABA Model Financial Record-keeping Rule.”
The cited ABA Model Financial Recordkeeping Rule provides the following guidance on electronic files:
“Records required by this rule may be maintained by electronic, photographic, computer or other media provided that they otherwise comply with this rule and provided further that printed copies can be produced. These records shall be located at the lawyer’s principal office in the jurisdiction or in a readily accessible location.”
It appears from these provisions that Kentucky lawyers have a basis for maintaining trust account records in electronic format and do not have to create paper records except on an as needed basis. Note that original client documents entrusted to a lawyer must be maintained in their original form. It is recommended that the KBA Ethics Hotline be called to confirm this conclusion before maintaining client trust account records exclusively in electronic format.
From the foregoing it is concluded that under Kentucky’s Rules lawyers are authorized to file client information electronically in a filing system that consist of e-documents, e-mail, and business records. Retention and disposition of e-documents and e-mail should be managed by the same standards applicable to paper documents as provided in KBA ethics opinions.
Given the clear intent of the Rules to treat e-documents and e-mail the same as paper documents, Kentucky lawyers should follow the guidance of KBA E-235 in deciding what e-documents and e-mail goes in a client’s e-file. The duties of competence and diligence along with the requirement to protect a client’s interest upon termination of a representation “such as surrendering papers and property to which a client is entitled” all reinforce this conclusion.2
Section II of Formal Opinion 2008-1 includes this reasonable advice on evaluating what to retain in an electronic file:
Section III of Formal Opinion 2008-1 provides this guidance on maintaining electronic client files that should work for Kentucky lawyers:
The practical consideration of this question is that it is often prudent during a representation to retain virtually all client-related e-documents and e-mail. Later, when a client requests the file, the ethics issue arises whether retained e-documents and e-mail not required to be filed must be provided to the client. In the absence of Kentucky authority on point Section IV of Formal Opinion 2008-1 and New Hampshire Bar Association Ethics Committee Opinion #2005- 06/3 offer this guidance that is helpful for Kentucky lawyers:
Section IV of Formal Opinion 2008-1:
New Hampshire Bar Association Ethics Committee Opinion #2005-06/3:
Risk managing a lawyer’s duty to maintain client files in a manner to competently represent a client involves:
E-documents and e-mail must be specifically covered by each of these risk management tools. It is beyond the scope of this article to go into a detailed examination of each. What follows is an overview of some of the more important considerations in developing a client e-file risk management program.
E-documents and e-mail in file retention and disposition plans
Law firms must have a filing procedure that systematically collates retained records in a readily retrievable paper and electronic filing system format. The first step is to integrate e-document file identification procedures with those used to code paper files for a client by using the same identifying characteristics for both. It is key not to allow a gap in how a client’s paper file and e-file are compiled and retrieved. Lawyers sometimes overlook that a client’s file is not completely protected by privilege and that some parts are subject to discovery. Organize the office filing system in a way to avoid costly e-document retrieval searches because of a discovery demand or for any other reason.
E-documents are not difficult to manage since they are primarily the electronic version of the kind of documents lawyers are used to filing. The real problem is controlling the filing, retention, and destruction of e-mail. Unlike mail that is received in a central office location, e-mail is sent and received on an individual basis and often on portable e-mail devices, laptops, and computers used outside the office. Furthermore, many firms automatically delete e-mail on a periodic schedule. It is critical that e-mail concerning a representation be at least temporarily part of the client’s e-file for retention review and that automatic deletion of e-mail that should be permanently filed be avoided.
One recommended approach in accomplishing this is:
Include in e-mail retention procedures the requirement that e-mail recipients record insofar as possible:
Use a letter of engagement to obtain agreement on how a client’s e-file will be managed.
Formal Opinion 2008-1 suggests that a lawyer and client reach agreement at the beginning of a representation on retention, storage, and retrieval of electronic documents in a letter of engagement by considering:
In addition consider including in the letter of engagement:
Protecting confidentiality of client information in e-documents.
The following is a list of some of the more important risk management measures that should be considered in formulating office policy to protect e-document confidentiality:
Basic Rules: Every firm should have in place measures to protect client e-document confidentiality. This begins with basic rules on office access security, locking doors and filing cabinets, turning off computers and copy machines, memorizing passwords, and making sure that computer screens are not visible to other than firm members.5
Hacker Protection: Use “firewalls” – electronic devices and programs that prevent unauthorized entry into a computer system from outside that system.
Off-site Access: Use a password for access to the firm’s computer system by firm members working from home or out of the office. Establish encryption requirements for sensitive matters. Limit or prohibit permanent storage of e-documents on home computers, laptops, and other portable e-mail devices. Prohibit communicating confidential information over public connections. If absolutely necessary to do so, use an encryption program.
Portable and E-Mail Devices: Register all portable and e-mail devices used by firm members for firm matters. Establish procedures for prompt notification of the loss of any registered device. Confirm that the firm has the ability to wipe these devices remotely.
E-Mail: Implement written procedures for managing e-mail that protect confidentiality by covering:
Metadata: Metadata is data hidden in e-documents generated in the course of their writing and editing. Metadata often contains confidential information that is transmitted in e-documents – most frequently by e-mail. Avoid inadvertently disclosing confidential or privileged metadata by carefully using a format that removes metadata from e-documents. Many firms use automatic metadata scrubbers.
One of the most important risk management considerations in protecting client confidentiality is the necessity for a firm to keep up with technological developments in creating and transmitting e-documents and the new ways invented of hacking computer security programs. This is an ongoing requirement that someone high in the management of every firm must have as a top priority in their job description.
Always consider the possibility of a malpractice claim or a bar complaint when stripping a client’s file at the end of a representation. If that happens, you will need a complete file showing how the matter was practiced. This is an important reason to retain at least some routine e-mail and other e-documents that might well be deleted because they show a pattern of client communication and effort on a case. A frequent allegation in bar complaints is lack of communication. A client e-file containing numerous, if routine, e-mails to a client is an excellent defense to that allegation. In contingency fee cases plaintiff’s lawyers’ client files are often quite thin because detailed records for billing purposes are not required. When a client complains of a lack of diligence by the lawyer, a client e-file showing e-mail with the client and third persons about the case can be strong evidence that the lawyer was working hard on the case. Better to keep too much than deleting useful exonerating evidence. Unlike paper documents that are expensive to retain, e-documents can be saved in great quantity on very small disks and very large in capacity hard drives.