Rule Text (verbatim from The Florida Bar)
(a) Consent Required to Reveal Information. A lawyer
must not reveal information relating to a client’s representation
except as stated in subdivisions (b), (c), and (d), unless the client
gives informed consent.
(b) When Lawyer Must Reveal Information. A lawyer must
reveal confidential information to the extent the lawyer reasonably
believes necessary to:
(1) prevent a client from committing a crime; or
(2) prevent death or substantial bodily harm.
(c) When Lawyer May Reveal Information. A lawyer may
reveal confidential information to the extent the lawyer reasonably
believes necessary to:
(1) serve the client’s interest unless it is information the
client specifically requires not to be disclosed;
(2) establish a claim or defense on the lawyer’s behalf in
a controversy between the lawyer and client;
(3) establish a defense to a criminal charge or civil claim
against the lawyer based on conduct in which the client was
involved;
(4) respond to allegations in any proceeding concerning
the lawyer’s representation of the client;
(5) comply with the Rules Regulating The Florida Bar;
(6) detect and resolve conflicts of interest between
lawyers in different firms arising from the lawyer’s change of
employment or from changes in the composition or ownership of a
firm, but only if the revealed information would not compromise the
attorney-client privilege or otherwise prejudice the client; or
(7) respond to specific allegations published via the
internet by a former client (e.g. a negative online review) that the
lawyer has engaged in criminal conduct punishable by law.
(d) Exhaustion of Appellate Remedies. When required by a
tribunal to reveal confidential information, a lawyer may first
exhaust all appellate remedies.
(e) Inadvertent Disclosure of Information. A lawyer must
make reasonable efforts to prevent the inadvertent or unauthorized
disclosure of, or unauthorized access to, information relating to the
client’s representation.
(f) Limitation on Amount of Disclosure. When disclosure is
mandated or permitted, the lawyer must disclose no more
information than is required to meet the requirements or
accomplish the purposes of this rule.
Educational reference. This page summarizes a Florida Rule of Professional Conduct for educational purposes. The rule text and Comment are mirrored from the Florida Bar's official publication and are public domain. The plain-English summary and any commentary are the opinion of Phillips, Hunt & Walker and are general information only — not legal advice. Reading this page does not create an attorney-client relationship. If you believe a Florida lawyer has violated this rule, you can file a complaint with The Florida Bar at floridabar.org. Past results do not guarantee a similar outcome.
What this rule means in plain English
Your Florida lawyer cannot reveal information relating to your representation without your informed consent, with narrow exceptions. The confidentiality rule covers far more than the attorney-client privilege — it includes anything you told your lawyer, anything the lawyer learned from anywhere about your matter, even after the case ends. The exceptions are limited: preventing serious bodily harm, preventing crime or fraud you intend to commit, complying with a final court order, and a few others.
Florida Bar Ethics Opinions interpreting this rule
- Opinion 95-4 (1995)
<p>When a couple shares one lawyer for estate planning, that lawyer can't keep secrets between them. If one spouse tells the lawyer about a beneficiary the other doesn't know about — a child from a prior relationship, a separate gift — the lawyer must withdraw from representing both. The rule protects you: your spouse's lawyer can't use information from joint sessions to plan around you.</p>
Read on floridabar.org → - Opinion 07-3 (2007)
<p>Sending information to a lawyer through a web form or unsolicited email doesn't create a confidential relationship and doesn't make that lawyer your lawyer. The firm can use what you sent, can represent the other side, and owes you no duty of confidentiality. If you have something sensitive to share, set up an actual consultation first — and watch for the disclaimers law firms post on their contact pages.</p>
Read on floridabar.org → - Opinion 24-1 (2024)
<p>When your lawyer uses generative AI tools, the duties to you don't disappear. The lawyer must protect your confidential information from being absorbed into AI training systems, must verify the AI's output rather than rely on it, can't double-bill you for AI-saved time as if it were lawyer hours, and must clearly disclose if a 'lawyer' on the firm's website is actually an AI chatbot.</p>
Read on floridabar.org → - Opinion 12-3 (2012)
<p>Lawyers can store your case files in cloud services like Google Drive or Dropbox, but only if they research the provider's security, ensure client information stays confidential, and confirm they can access the files when needed. Ask whether your lawyer uses cloud storage, where the data is hosted, and what protections are in place — those details affect attorney-client privilege.</p>
Read on floridabar.org → - Opinion 10-2 (2010)
<p>Modern office equipment — copiers, printers, scanners, fax machines — often stores images of every document it handles. When a law firm leases or replaces these machines, the firm must wipe the storage before disposal or risk leaking your case data. If you're a client, ask about device sanitization policies; the firms taking this seriously have written procedures.</p>
Read on floridabar.org → - Opinion 93-3 (1993)
<p>If your lawyer accidentally receives a confidential document from the other side — a misdirected email, a privileged file in a discovery production — the lawyer must promptly notify the sender and stop reading. Florida codified this rule in 4-4.4(b) after this opinion. The rule protects attorney-client privilege from being destroyed by a single mistake on either side.</p>
Read on floridabar.org → - Opinion 93-5 (1993)
<p>A lawyer who acts as agent for a title insurance company cannot let the insurer audit the lawyer's general client trust account without each affected client's consent. A separate trust account used only for the lawyer's title-agent transactions can be audited without that step. If your lawyer handles real estate closings, the structure of their trust accounts affects who sees your records.</p>
Read on floridabar.org → - Opinion 76-47 (1976)
<p>A lawyer who learns of another lawyer's ethics violation only through confidential information from a client cannot — and need not — report that violation to the Bar. The duty of confidentiality outranks the duty to report misconduct in this scenario. The confidentiality rule has been refined since 1976; today's Rule 4-1.6 still protects client confidences from compelled disclosure for grievance reporting.</p>
Read on floridabar.org → - Opinion 04-1 (2004)
<p>If a lawyer's client repeatedly insists on lying under oath, the lawyer must withdraw from the case and inform the court of the client's intent. The exact timing of withdrawal and disclosure depends on the circumstances; the court may permit the disclosure to be made privately and one-sided where appropriate. The rule means a defense lawyer cannot help a client commit perjury, even passively.</p>
Read on floridabar.org → - Opinion 90-1 (1990)
<p>If a criminal defense lawyer's client has fled the state to avoid a court appearance, the lawyer ordinarily cannot disclose that fact to the court or prosecutor until required at the scheduled hearing. The duty of confidentiality remains intact; the lawyer is not the client's keeper. The exception kicks in when the court directly asks at the appearance.</p>
Read on floridabar.org → - Opinion 86-3 (1986)
<p>A criminal defense lawyer has no duty to volunteer your prior conviction record to the sentencing court, even if the court is operating on incomplete information — as long as neither the lawyer nor the client lied about your record. The line is between staying silent (allowed) and making false statements (not allowed). Your lawyer's job is to advocate, not to help the prosecution build its file.</p>
Read on floridabar.org → - Opinion 75-19 (1975)
<p>If your lawyer learns you deliberately lied at a deposition and you won't correct it, the lawyer must withdraw and disclose the false testimony to the court. This applies whether or not the deposition has been filed. The Florida Supreme Court suspended a lawyer in 2015 for failing to correct false deposition testimony — the rule has teeth.</p>
Read on floridabar.org → - Opinion 20-1 (2020)
<p>When a former client posts a negative online review, your lawyer cannot disclose case details to defend the work. The lawyer can post a brief general response saying the review is unfair or inaccurate and explaining that ethics rules prevent a full reply. If you see a lawyer responding with case specifics on Google or Yelp, that lawyer is violating the confidentiality rule.</p>
Read on floridabar.org → - Opinion 21-1 (2021)
<p>When someone who was never your client posts a negative online review of your law firm, you still can't disclose client information to respond. The lawyer can state that the poster is not a current or former client and that ethics rules limit the response — but cannot share confidential matters from real cases to discredit the reviewer.</p>
Read on floridabar.org → - Opinion 63-23 (1963)
<p>If your personal injury lawyer learns during the case that the underlying accident was fraudulent, the lawyer can withdraw without explaining why to the court. Whether the lawyer must report what was learned to authorities is governed by Rule 4-3.3 (candor toward the tribunal), not by general ethics — and the modern rule generally protects what you said to your lawyer.</p>
Read on floridabar.org → - Opinion 00-3 (2000)
<p>If you're considering pre-settlement funding (companies that advance you cash now in exchange for a share of your eventual settlement), your lawyer can give you general information about it and provide factual case details to the funder — with your written consent. The lawyer can honor your written assignment of part of the recovery to the funder but cannot issue a letter of protection to that company.</p>
Read on floridabar.org → - Opinion 65-50 (1965)
<p>When a lawyer represents the sole beneficiary of a will and learns the deceased was survived by an institutionalized wife, the lawyer cannot reveal this to the probate court without the client's consent — but cannot continue representing the client in matters where the information is material unless consent is given. The lawyer is trapped between confidentiality and a clear conflict of interest.</p>
Read on floridabar.org → - Opinion 70-40 (1970)
<p>If a lawyer is subpoenaed to testify about advice given to a client, the lawyer should assert attorney-client privilege when it applies. The exception: if the client puts the competence of the lawyer's advice at issue — for example, in a malpractice claim — the lawyer can break privilege to defend against the client's own claim.</p>
Read on floridabar.org → - Opinion 06-2 (2006)
<p>Metadata in electronic documents (track changes, comments, edit history, embedded data) often contains confidential information. The lawyer sending a document is responsible for stripping metadata that shouldn't go to the other side. A receiving lawyer who notices metadata clearly not meant for them shouldn't dig into it, and must notify the sender if confidential information slips through.</p>
Read on floridabar.org → - Opinion 25-1 (2025)
<p>A lawyer can only share client matters with an online discussion group or listserv if doing so serves the client's interests and the client hasn't prohibited disclosure. Even posing the question hypothetically may not be enough to protect identity. If there's any chance the client could be identified from the post, the lawyer must get informed consent first. The rule applies to bar association listservs and any online forum.</p>
Read on floridabar.org → - Opinion 85-2 (1985)
<p>If a lawyer acted as intermediary in a private adoption and the natural parents' identity was never meant to be disclosed to the adoptive parents, the lawyer cannot later reveal those identities — even to help the adoptive parents sue the natural parents over expenses paid. The duty of confidentiality survives the matter ending unsuccessfully.</p>
Read on floridabar.org → - Opinion 81-3 (1981)
<p>A lawyer who can't collect unpaid fees from a client can use a reputable collection agency, but cannot give the agency confidential details about the case that aren't directly relevant to the debt. The lawyer also remains responsible for ensuring the collection agency operates within the lawyer's own ethics rules — including no deceptive or harassing tactics in the lawyer's name.</p>
Read on floridabar.org → - Opinion 60-34 (1960)
<p>A lawyer cannot tell a client's creditors that the lawyer is holding money belonging to the client so the creditor can move to collect. Doing so puts the lawyer on the creditor's team against their own client — a basic violation of the duty of undivided loyalty and confidentiality. If you're a client, your lawyer holding your funds doesn't make those funds visible to your creditors.</p>
Read on floridabar.org → - Opinion 71-29 (1971)
<p>A lawyer subpoenaed before a grand jury must assert attorney-client privilege when the lawyer has a good-faith belief the information sought is privileged. If the judge orders disclosure and all appeals are exhausted, the lawyer must comply. Confidentiality is not absolute — it yields to a final court order — but the lawyer can never voluntarily breach it without that order.</p>
Read on floridabar.org → - Opinion 74-43 (1974)
<p>When a sole practitioner dies, another lawyer who buys the firm's physical assets cannot keep custody of the deceased lawyer's client files. The buyer also cannot write to those clients announcing possession and asking what to do with them. Client files must be handled by someone with proper authority — typically through court appointment of an inventory attorney.</p>
Read on floridabar.org → - Opinion 72-40 (1972)
<p>A law firm cannot send an inventory of a client's assets to a bank named as sole executor of the client's will without the client's written consent. After the client's death, if no advance consent was given, the firm cannot represent the executor or disclose the client's assets unless a court orders it. The lawyer's confidentiality duty extends to estate-administration planning.</p>
Read on floridabar.org → - Opinion 90-2 (1990)
<p>A lawyer can report a former client to a credit reporting service for an unpaid fee — but only if the debt is undisputed and the lawyer doesn't disclose case-related confidential information beyond what's necessary to collect. If your former lawyer reports you to credit bureaus, the report cannot include details from your case file — only the fact of the unpaid bill.</p>
Read on floridabar.org → - Opinion 07-1 (2007)
<p>If a client gives the lawyer documents the client wrongfully obtained, the lawyer may need to consult a criminal defense attorney about the client's exposure. The lawyer must tell the client the materials cannot be kept, reviewed, or used unless the opposing party is told the documents were obtained. If the client refuses, the lawyer must withdraw.</p>
Read on floridabar.org → - Opinion 14-1 (2014)
<p>A personal injury lawyer may advise a client before a lawsuit is filed to change privacy settings on social media so the accounts are not publicly accessible. The lawyer cannot tell the client to delete posts or evidence the client knows or should know is relevant — that crosses into spoliation. Locking your account is permitted; destroying content is not.</p>
Read on floridabar.org →
Comment (verbatim from The Florida Bar)
The lawyer is part of a judicial system charged with upholding
the law. One of the lawyer’s functions is to advise clients so that
they avoid any violation of the law in the proper exercise of their
rights.
This rule governs the disclosure by a lawyer of information
relating to the representation of a client during the lawyer’s
representation of the client. See rule 4-1.18 for the lawyer’s duties
with respect to information provided to the lawyer by a prospective
client, rule 4-1.9(c) for the lawyer’s duty not to reveal information
relating to the lawyer’s prior representation of a former client, and
rules 4-1.8(b) and 4-1.9(b) for the lawyer’s duties with respect to the
use of confidential information to the disadvantage of clients and
former clients.
A fundamental principle in the client-lawyer relationship is
that, in the absence of the client’s informed consent, the lawyer
must not reveal information relating to the representation. See
terminology for the definition of informed consent. This contributes
to the trust that is the hallmark of the client-lawyer relationship.
The client is thereby encouraged to seek legal assistance and to
communicate fully and frankly with the lawyer even as to
embarrassing or legally damaging subject matter. The lawyer needs
this information to represent the client effectively and, if necessary,
to advise the client to refrain from wrongful conduct. Almost
without exception, clients come to lawyers in order to determine
their rights and what is, in the complex of laws and regulations,
deemed to be legal and correct. Based on experience, lawyers know
that almost all clients follow the advice given, and the law is upheld.
The principle of confidentiality is given effect in 2 related
bodies of law, the attorney-client privilege (which includes the work
product doctrine) in the law of evidence and the rule of
confidentiality established in professional ethics. The attorney-
client privilege applies in judicial and other proceedings in which a
lawyer may be called as a witness or otherwise required to produce
evidence concerning a client. The rule of client-lawyer
confidentiality applies in situations other than those where evidence
is sought from the lawyer through compulsion of law. The
confidentiality rule applies not merely to matters communicated in
confidence by the client but also to all information relating to the
representation, whatever its source. A lawyer may not disclose
confidential information except as authorized or required by the
Rules Regulating The Florida Bar or by law. However, none of the
foregoing limits the requirement of disclosure in subdivision (b).
This disclosure is required to prevent a lawyer from becoming an
unwitting accomplice in the fraudulent acts of a client. See also
Scope.
The requirement of maintaining confidentiality of information
relating to representation applies to government lawyers who may
disagree with the policy goals that their representation is designed
to advance.
Authorized disclosure
A lawyer is impliedly authorized to make disclosures about a
client when appropriate in carrying out the representation, except
to the extent that the client’s instructions or special circumstances
limit that authority. In litigation, for example, a lawyer may
disclose information by admitting a fact that cannot properly be
disputed or in negotiation by making a disclosure that facilitates a
satisfactory conclusion.
Lawyers in a firm may, in the course of the firm’s practice,
disclose to each other information relating to a client of the firm,
unless the client has instructed that particular information be
confined to specified lawyers.
Disclosure adverse to client
The confidentiality rule is subject to limited exceptions. In
becoming privy to information about a client, a lawyer may foresee
that the client intends serious harm to another person. However, to
the extent a lawyer is required or permitted to disclose a client’s
purposes, the client will be inhibited from revealing facts that would
enable the lawyer to counsel against a wrongful course of action.
While the public may be protected if full and open communication
by the client is encouraged, several situations must be
distinguished.
First, the lawyer may not counsel or assist a client in conduct
that is criminal or fraudulent. See rule 4-1.2(d). Similarly, a lawyer
has a duty under rule 4-3.3(a)(4) not to use false evidence. This
duty is essentially a special instance of the duty prescribed in rule
4-1.2(d) to avoid assisting a client in criminal or fraudulent
conduct.
Second, the lawyer may have been innocently involved in past
conduct by the client that was criminal or fraudulent. In this
situation the lawyer has not violated rule 4-1.2(d), because to
“counsel or assist” criminal or fraudulent conduct requires knowing
that the conduct is of that character.
Third, the lawyer may learn that a client intends prospective
conduct that is criminal. As stated in subdivision (b)(1), the lawyer
must reveal information in order to prevent these consequences. It
is admittedly difficult for a lawyer to “know” when the criminal
intent will actually be carried out, for the client may have a change
of mind.
Subdivision (b)(2) contemplates past acts on the part of a
client that may result in present or future consequences that may
be avoided by disclosure of otherwise confidential communications.
Rule 4-1.6(b)(2) would now require the lawyer to disclose
information reasonably necessary to prevent the future death or
substantial bodily harm to another, even though the act of the
client has been completed.
The lawyer’s exercise of discretion requires consideration of
such factors as the nature of the lawyer’s relationship with the
client and with those who might be injured by the client, the
lawyer’s own involvement in the transaction, and factors that may
extenuate the conduct in question. Where practical the lawyer
should seek to persuade the client to take suitable action. In any
case, a disclosure adverse to the client’s interest should be no
greater than the lawyer reasonably believes necessary to the
purpose.
Withdrawal
If the lawyer’s services will be used by the client in materially
furthering a course of criminal or fraudulent conduct, the lawyer
must withdraw, as stated in rule 4-1.16(a)(1).
After withdrawal the lawyer is required to refrain from making
disclosure of the client’s confidences, except as otherwise provided
in rule 4-1.6. Neither this rule nor rule 4-1.8(b) nor rule 4-1.16(d)
prevents the lawyer from giving notice of the fact of withdrawal, and
the lawyer may also withdraw or disaffirm any opinion, document,
affirmation, or the like.
Where the client is an organization, the lawyer may be in
doubt whether contemplated conduct will actually be carried out by
the organization. Where necessary to guide conduct in connection
with the rule, the lawyer may make inquiry within the organization
as indicated in rule 4-1.13(b).
Dispute concerning lawyer’s conduct
A lawyer’s confidentiality obligations do not preclude a lawyer
from securing confidential legal advice about the lawyer’s personal
responsibility to comply with these rules. In most situations,
disclosing information to secure this advice will be impliedly
authorized for the lawyer to carry out the representation. Even
when the disclosure is not impliedly authorized, subdivision (c)(5)
permits this disclosure because of the importance of a lawyer’s
compliance with the Rules of Professional Conduct.
Where a legal claim or disciplinary charge alleges complicity of
the lawyer in a client’s conduct or other misconduct of the lawyer
involving representation of the client, the lawyer may respond to the
extent the lawyer reasonably believes necessary to establish a
defense. The same is true with respect to a claim involving the
conduct or representation of a former client. The lawyer’s right to
respond arises when an assertion of complicity has been made.
Subdivision (c) does not require the lawyer to await the
commencement of an action or proceeding that charges complicity,
so that the defense may be established by responding directly to a
third party who has made the assertion. The right to defend, of
course, applies where a proceeding has been commenced. Where
practicable and not prejudicial to the lawyer’s ability to establish
the defense, the lawyer should advise the client of the third party’s
assertion and request that the client respond appropriately. In any
event, disclosure should be no greater than the lawyer reasonably
believes is necessary to vindicate innocence, the disclosure should
be made in a manner that limits access to the information to the
tribunal or other persons having a need to know it, and appropriate
protective orders or other arrangements should be sought by the
lawyer to the fullest extent practicable.
If the lawyer is charged with wrongdoing in which the client’s
conduct is implicated, the rule of confidentiality should not prevent
the lawyer from defending against the charge. A charge can arise in
a civil, criminal, or professional disciplinary proceeding and can be
based on a wrong allegedly committed by the lawyer against the
client or on a wrong alleged by a third person; for example, a person
claiming to have been defrauded by the lawyer and client acting
together. A lawyer entitled to a fee is permitted by subdivision (c) to
prove the services rendered in an action to collect it. This aspect of
the rule expresses the principle that the beneficiary of a fiduciary
relationship may not exploit it to the detriment of the fiduciary. As
stated above, the lawyer must make every effort practicable to avoid
unnecessary disclosure of information relating to a representation,
to limit disclosure to those having the need to know it, and to
obtain protective orders or make other arrangements minimizing
the risk of disclosure.
Subdivision (c)(7) allows a lawyer to respond to specific
allegations published via the internet by a former client (e.g. a
negative online review) that the lawyer has engaged in criminal
conduct punishable by law. However, under subdivision (f), even
when the lawyer is operating within the scope of the (c)(7) exception,
disclosure must be no greater than the lawyer reasonably believes
necessary to refute the specific allegations.
Disclosures otherwise required or authorized
The attorney-client privilege is differently defined in various
jurisdictions. If a lawyer is called as a witness to give testimony
concerning a client, absent waiver by the client, rule 4-1.6(a)
requires the lawyer to invoke the privilege when it is applicable.
The lawyer must comply with the final orders of a court or other
tribunal of competent jurisdiction requiring the lawyer to give
information about the client.
The Rules of Professional Conduct in various circumstances
permit or require a lawyer to disclose information relating to the
representation. See rules 4-2.3, 4-3.3, and 4-4.1. In addition to
these provisions, a lawyer may be obligated or permitted by other
provisions of law to give information about a client. Whether
another provision of law supersedes rule 4-1.6 is a matter of
interpretation beyond the scope of these rules, but a presumption
should exist against a supersession.
Detection of Conflicts of Interest
Subdivision (c)(6) recognizes that lawyers in different firms
may need to disclose limited information to each other to detect and
resolve conflicts of interest, for example, when a lawyer is
considering an association with another firm, two or more firms are
considering a merger, or a lawyer is considering the purchase of a
law practice. See comment to rule 4-1.17. Under these
circumstances, lawyers and law firms are permitted to disclose
limited information, but only once substantive discussions
regarding the new relationship have occurred. Any disclosure
should ordinarily include no more than the identity of the persons
and entities involved in a matter, a brief summary of the general
issues involved, and information about whether the matter has
terminated. Even this limited information, however, should be
disclosed only to the extent reasonably necessary to detect and
resolve conflicts of interest that might arise from the possible new
relationship. The disclosure of any information is prohibited if it
would compromise the attorney-client privilege or otherwise
prejudice the client (e.g., the fact that a corporate client is seeking
advice on a corporate takeover that has not been publicly
announced; that a person has consulted a lawyer about the
possibility of divorce before the person’s intentions are known to the
person’s spouse; or that a person has consulted a lawyer about a
criminal investigation that has not led to a public charge). Under
those circumstances, subdivision (a) prohibits disclosure unless the
client or former client gives informed consent. A lawyer’s fiduciary
duty to the lawyer’s firm may also govern a lawyer’s conduct when
exploring an association with another firm and is beyond the scope
of these rules.
Any information disclosed under this subdivision may be used
or further disclosed only to the extent necessary to detect and
resolve conflicts of interest. This subdivision does not restrict the
use of information acquired by means independent of any
disclosure under this subdivision. This subdivision also does not
affect the disclosure of information within a law firm when the
disclosure is otherwise authorized, for example, when a lawyer in a
firm discloses information to another lawyer in the same firm to
detect and resolve conflicts of interest that could arise in connection
with undertaking a new representation.
Acting Competently to Preserve Confidentiality
Paragraph (e) requires a lawyer to act competently to
safeguard information relating to the representation of a client
against unauthorized access by third parties and against
inadvertent or unauthorized disclosure by the lawyer or other
persons who are participating in the representation of the client or
who are subject to the lawyer’s supervision. See rules 4-1.1, 4-5.1
and 4-5.3. For example, a lawyer should be aware that generative
artificial Intelligence may create risks to the lawyer’s duty of
confidentiality. The unauthorized access to, or the inadvertent or
unauthorized disclosure of, information relating to the
representation of a client does not constitute a violation of
paragraph (e) if the lawyer has made reasonable efforts to prevent
the access or disclosure. Factors to be considered in determining
the reasonableness of the lawyer’s efforts include, but are not
limited to, the sensitivity of the information, the likelihood of
disclosure if additional safeguards are not employed, the cost of
employing additional safeguards, the difficulty of implementing the
safeguards, and the extent to which the safeguards adversely affect
the lawyer’s ability to represent clients (e.g., by making a device or
important piece of software excessively difficult to use). A client
may require the lawyer to implement special security measures not
required by this rule or may give informed consent to forgo security
measures that would otherwise be required by this rule. Whether a
lawyer may be required to take additional steps to safeguard a
client’s information in order to comply with other law, for example
state and federal laws that govern data privacy or that impose
notification requirements on the loss of, or unauthorized access to,
electronic information, is beyond the scope of these rules. For a
lawyer’s duties when sharing information with nonlawyers outside
the lawyer’s own firm, see the comment to rule 4-5.3.
When transmitting a communication that includes information
relating to the representation of a client, the lawyer must take
reasonable precautions to prevent the information from coming into
the hands of unintended recipients. This duty, however, does not
require that the lawyer use special security measures if the method
of communication affords a reasonable expectation of privacy.
Special circumstances, however, may warrant special precautions.
Factors to be considered in determining the reasonableness of the
lawyer’s expectation of confidentiality include the sensitivity of the
information and the extent to which the privacy of the
communication is protected by law or by a confidentiality
agreement. A client may require the lawyer to implement special
security measures not required by this rule or may give informed
consent to the use of a means of communication that would
otherwise be prohibited by this rule. Whether a lawyer may be
required to take additional steps in order to comply with other law,
for example state and federal laws that govern data privacy, is
beyond the scope of these rules.
Former client
The duty of confidentiality continues after the client-lawyer
relationship has terminated. See rule 4-1.9 for the prohibition
against using such information to the disadvantage of the former
client.
Amended July 23, 1992, effective January 1, 1993 (605 So.2d 252);
amended Oct. 20, 1994 (644 So.2d 282); March 23, 2006, effective May 22,
2006 (933 So.2d 417); amended July 7, 2011, effective October 1, 2011 (67
So. 3d 1037); amended May 29, 2014, effective June 1, 2014 (140 So. 3d
541); amended June 11, 2015, effective October 1, 2015 (167 So.3d 412);
amended March 16, 2023, effective May 15, 2023 (SC22-1292); amended
August 29, 2024, effective October 28, 2024 (SC2024-0032).