Multistate Professional Responsibility Examination (MPRE)Client ConfidentialityMedium

Attorney Lee represents a client, Ms. Chen, in a complex real estate transaction. During a strategy meeting, Ms. Chen shares highly sensitive financial documents and business plans with Lee, emphasizing their proprietary nature. Lee uses a secure, encrypted cloud storage service to store these documents, which is widely recognized in the legal industry for its robust security protocols. However, the service provider's terms of service state that in the event of a valid subpoena, they may be compelled to provide access to stored data. Has Attorney Lee violated the duty of confidentiality?

  1. ANo, because Lee used a secure, encrypted service with robust protocols, which meets the standard of reasonable care.
  2. BNo, because the client did not explicitly forbid the use of cloud storage for her documents.
  3. CYes, because the possibility of a subpoena compelling disclosure means the information is not absolutely secure.
  4. DYes, because any use of a third-party cloud service inherently carries a risk of disclosure and thus violates confidentiality.
Show answer & explanation

Correct answer: A. No, because Lee used a secure, encrypted service with robust protocols, which meets the standard of reasonable care.

Attorneys are generally permitted to use technology, including cloud storage, to store client information, provided they exercise reasonable care to ensure the security and confidentiality of the data. Using a secure, encrypted service with robust protocols typically meets this standard. The mere possibility of a compelled disclosure via subpoena does not automatically constitute a violation of confidentiality if reasonable efforts were made to protect the data.

Why the other options are wrong

  • B. Client consent is generally implied for common, secure practices, but the attorney's duty of care is independent of explicit client prohibition.
  • C. Absolute security is impossible; the standard is reasonable care. The possibility of legal compulsion does not negate reasonable security measures.
  • D. The use of technology, including cloud services, is generally permissible if reasonable care is exercised; it's not an inherent violation.

Technology & Confidentiality

Attorneys must take reasonable precautions to protect confidential client information when using technology, such as cloud storage or email. This includes using secure methods and understanding the risks associated with the technology.

  • Reasonable care is the standard, not absolute security.
  • Encryption and robust security protocols are key considerations.
  • Attorneys must stay abreast of technological advancements and risks.

Memory trick: Digital secrets need a digital fortress.

More Client Confidentiality questions