Skip to Content
  • Home
  • About the Bar
  • Mission
  • Forms
  • Sitemap
    • Member Directory
      Last Name:
      First Name:
      Bar Number:
      City:


    • Login
OSB Logo

Oregon State Bar Bulletin — JUNE 2012

Bar Counsel
Revealing Bits & Bytes:
Guarding (and Exploiting) Metadata

By Helen Hierschbiel

Electronic communication is as basic and integral to most lawyers’ law practices as the telephone and fax once were. It may be hard to imagine now, but the first ethics opinions that addressed the use of electronic communications prohibited lawyers from using cell phones and unencrypted email because of concerns about the risk of disclosure of client confidential information. These days, as the expectation of privacy in these modes of communication has grown, most ethics authorities agree that it is not per se improper for lawyers to use unencrypted email and cell phones in their law practices. ABA Formal Ethics Op No 99-413 states:

Email communications, including those sent unencrypted over the Internet, pose no greater risk of interception or disclosure than other modes of communication commonly relied upon as having a reasonable expectation of privacy… The risk of unauthorized interception and disclosure exists in every medium of communication, including email. It is not, however, reasonable to require that a mode of communicating information must be avoided simply because interception is technologically possible, especially when unauthorized interception and dissemination of the information is a violation of [the law].

Even so, when client information is particularly sensitive or the risk of harm in the event of disclosure particularly high, the lawyer may want to avoid email communications or implement special security measures. See ABA Model Rules Comment [17].

The more common danger of electronic communication is not unauthorized interception by a third party, but the lawyer’s own inadvertent disclosure to an unintended recipient. The speed and ease of email communications belie the danger of sending documents electronically without adequate aforethought. The classic horror story is when a lawyer accidentally loops opposing counsel in on what are intended to be privileged lawyer-client email communications.

Even when a lawyer intends to send a particular document, she may not intend to send its “metadata,” which is the embedded, often hidden, information within the document that provides information about the document itself, such as how, when and by whom it was created or edited. Some metadata is readily accessible by and visible to even the least technologically savvy among us. Other metadata may be accessible only with the help of a computer forensic expert or special software.

Most lawyers these days have at least heard of “metadata” but many don’t fully understand its reach or importance. Metadata exists in word processing documents, but it also exists in spreadsheets, database files, images, videos, zip files, email messages, PDFs and every other type of electronic file. It consists of path and file name, author, date and time created, document version history, comments, tracked changes, template information, network or server name, undo and redo history. This information may be largely immaterial in many cases, but could be crucial in some.

In order to assist lawyers with understanding their obligations when transmitting and receiving metadata, the OSB Board of Governors issued OSB Formal Op No 2011-187 at the end of 2011.

Sender’s Duties
Two rules inform a lawyer’s duties when sending documents electronically. Oregon RPC 1.1 requires a lawyer to provide competent representation to a client, meaning the lawyer must possess the “legal knowledge, skill, thoroughness, and preparation reasonably necessary for the representation.” In addition, RPC 1.6(a) requires a lawyer to “not reveal information relating to the representation of a client.” “Information relating to the representation” is a defined phrase under RPC 1.0(f) and includes both information that is subject to the attorney-client privilege and other information gained during the course of the representation that the client has asked be kept secret or the disclosure of which would be embarrassing or likely to be detrimental to the client. With these two rules as a backdrop, the OSB Legal Ethics Committee concludes that competency in relation to metadata requires a lawyer who uses electronic communications to maintain at least a basic understanding of the technology and the risks of revealing metadata or to use adequate technology support. OSB Formal Op. No. 2011-187.

This conclusion is neither new nor unique to Oregon. See OSB Formal Ethics Op No 2005-141 (lawyer must make reasonable efforts to ensure that third party document recycler does not disclose client confidential information.) Other jurisdictions have long been unanimous in expecting lawyers to exercise reasonable care to avoid the disclosure of confidential information. See, e.g., Arizona Ethics Op No 07-03 (lawyer must take “reasonable precautions” to prevent communication of metadata containing client information). Comment (16) to the ABA Model Rules states “A lawyer must act competently to safeguard information relating to the representation of a client against inadvertent or unauthorized disclosure by the lawyer or other persons who are participating in the representation of the client or who are subject to the lawyer’s supervision.”1

Acting competently does not require that the lawyer be free of any and all mistakes. On the contrary, the Oregon Supreme Court has made clear that an isolated mistake does not necessarily amount to incompetence. See In re Magar, 335 Or 306 (2003)(“…incompetence and negligence are not synonymous terms. A lawyer – otherwise knowledgeable, skillful, thorough, and prepared – might commit a misstep for which he or she might have to respond in damages. That lawyer, although negligent, has not violated (RPC 1.1).”)

Instead, it simply requires that lawyers use reasonable care to avoid disclosure of client confidences. “With respect to metadata in documents, reasonable care includes taking steps to prevent the inadvertent disclosure of metadata, to limit the nature and scope of the metadata revealed, and to control to whom the document is sent.” OSB Formal Ethics Op No 2011-187. Such steps might include scrubbing the metadata from the document prior to electronic transmission or converting the document to a format (such as PDF) that does not include the metadata. What constitutes reasonable care will change as technology changes.

Recipient’s Duties
Lawyers who receive metadata in electronic documents also have duties. If a lawyer who receives a document knows or should have known that the document was inadvertently sent, the lawyer must notify the sender promptly. RPC 4.4(b). OSB Formal Ethics Op No 2011-187 reads this rule to apply to the inadvertent disclosure of metadata as well.

How is a lawyer expected to know that a document or its embedded information has been inadvertently sent? Factors to consider may include: whether the document was sent in its native application or was converted to PDF; the nature of the information; how easily the data may be viewed (is it readily apparent on the face of the document, or hidden beneath several layers); the standard of practice between lawyers generally and between the lawyers in a given situation. For example, lawyers who are negotiating the terms of a contract or the terms of a settlement agreement commonly send the document at issue with track changes readily visible. The Legal Ethics Committee opines that given the sender’s duty to exercise reasonable care in regard to metadata, the recipient might reasonably conclude that this metadata was intentionally left in the document. On the other hand, a lawyer who goes to the trouble of converting a document to PDF, but the document includes a comment which appears to be made by the lawyer to his client, likely has inadvertently sent that piece of metadata.

Assuming that the metadata was inadvertently sent, RPC 4.4(a) requires the recipient lawyer to promptly notify the sender in order to give the sender the opportunity to take steps to protect the confidentiality of the information after its transmission. Thus, when in doubt about the intent of sending the information, a lawyer may decide that giving notice is the most cautious approach.

The more difficult question that is not addressed by the rules of professional conduct is whether the receiving lawyer must return the document unread or comply with a request by the sender to return the document. The answer to these questions lies in the substantive law of privilege. See OSB Formal Op No 2005-150.2 If a lawyer makes a good faith argument that the substantive law supports a claim of waiver, thereby allowing him to review and use the document in question, the lawyer does not risk being disciplined even if the lawyer is wrong.

Although the lawyer may not risk discipline, the lawyer may risk disqualification, or worse yet, his reputation. Thus, lawyers should carefully consider the advantages and disadvantages before using inadvertently sent documents or metadata. Lawyers should also consult with their clients before making the decision. OSB Formal Op No 2005-187. The ultimate decision of whether to return or retain, however, is left to the lawyer’s professional judgment. Id.

 

 

Endnotes

1. The ABA Commission on Ethics 20/20 is proposing several amendments to the ABA Model Rules and their Comments to clarify that a lawyer has an ethical duty to take reasonable measures to protect a client’s confidential information from inadvertent disclosure and unauthorized access. Details of the most recent proposals are available here.

2. Cf. Goldsborough v. Eagle Crest Partners, Ltd., 314 Or 336 (1992) (waiver by disclosure in response to discovery request; no evidence of mistake, inadvertence or lack of client authorization); and GPL Treatment, Ltd. v. Louisiana-Pacific Corp., 133 Or App 633, 638–639 (1995), aff’d on other grounds, 323 Or 116 (1996) (no error in trial court’s exclusion of evidence on determination of no waiver by inadvertent disclosure; no awareness by sender of recipient’s intent to offer as evidence until offered at trial).

ABOUT THE AUTHOR
Helen Hierschbiel is general counsel for the Oregon State Bar. She can be reached at (503) 620-0222, or toll-free in Oregon at (800) 452-8260, ext. 361, or by email at hhierschbiel@osbar.org.

Ethics opinions are published and updated on the bar’s website here.

An archive of Bar Counsel articles is available here.


© 2012 Helen Hierschbiel

— return to top
— return to Table of Contents

  • For The Public

      Public Legal Information

    • Public Information Home
    • Legal Information Topics
    • Oregon Juror Guide
    • Submit Ethics Complaint

    • Getting Legal Help

    • Finding The Right Lawyer
    • Hiring A Lawyer
    • Lawyers Fees

    • Client Services

    • Client Assistance Office
    • Client Security Fund
    • Fee Dispute Resolution
    • Public Records Request
    • Locating Attorney Files

    • Unlawful Practice of Law

    • UPL Information
    • UPL FAQ

    • Volunteer Opportunities

    • Public Member Application
  • For Members

    OSB Login

    • Log In To OSB Site
    • Member Account Setup
    • Non-Member Account Setup
    • Reset Password

    OSB Resources

    • Attorney's Marketplace
    • Career Center
    • Events
    • Forms Library
    • Online Resources
    • OSB Group Listings
    • Performance Standards
    • Rules Regulations and Policies
    • Surveys and Research Reports
    • Unclaimed Client Funds
    • Voting Regions and By-City
      County Information

    Fastcase™

    • Log in to Fastcase
    • Overview
    • Scheduled Webinars
    • Inactive Member Subscriptions

    Legal Ethics

    • Legal Ethics Home
    • Find an Ethics Opinion
    • Bulletin Bar Counsel Archive

    Company Administrator

    • Company Administrator Home
    • Company Administrator FAQ
    • Authorization Form

    State Lawyers
    Assistance Committee

    • SLAC Info

    Volunteering

    • Volunteer Opportunities

    Court Information

    • Judicial Vacancies
    • Court Info | Calendars | Jury Info
    • Oregon Attorneys
      in Federal Court
    • Tribal Courts of Oregon

    OSB Publications

    • Bar Bulletin Magazine
    • – Bulletin Archive
    • – Legal Writer Archive
    • Capitol Insider
    • Disciplinary Board Reporter

    PLF Programs

    • (OAAP) Oregon Attorney
      Assistance Program
    • Practice Management Attorneys
    • Malpractice Coverage
  • CLE/Legal Publications

    CLE Seminars

    • CLE Seminars Home
    • Online Seminar Registration
    • General Info/FAQ

    My Account

    • My Content
    • My Events
    • Order History

    Legal Publications

    • Legal Publications Home
    • Log in to BarBooks®
    • BarBooks® FAQ
    • Online Bookstore
    • Legal Pubs Blog
  • Bar Programs

    Diversity & Inclusion

    • Diversity & Inclusion Home
    • Diversity Story Wall
    • D&I Programs
    • ACDI Roster
    • D&I Staff Contacts
    • D&I Links

    Legislative/Public Affairs

    • Legislative Home
    • Committee Contacts
    • Legislative Sessions
    • Staff Contacts
    • Useful Links

    Legal Services Program

    • LSP Home

    Oregon Law Foundation

    • OLF Home
    • Partners in Justice

    Fee Dispute Resolution

    • Fee Dispute Resolution Home

    Pro Bono

    • Pro Bono Home
    • Pro Bono Reporting
    • Volunteer Opportunities

    Lawyer Referral and Information Services

    • RIS Login
    • Summary of Referral and Information Services Programs
    • Lawyer Referral Service Info and Registration Forms
    • Modest Means Program Registration Forms
    • Military Assistance Panel Training Info and Registration Form
    • Problem Solvers Registration Form
    • Lawyer To Lawyer Registration Form

    (LRAP) Loan Repayment Assistance Program

    • LRAP Home
    • LRAP FAQ
    • LRAP Policies
  • Member Groups

    Sections

    • Section Info/Websites
    • Joining Sections
    • CLE Registration Services
    • Standard Section Bylaws (PDF)
    • Leadership Resources
    • Treasurers Tools

    Committees

    • Home
    • Leadership Resources
    • Professionalism Commission
    • Volunteer Opportunities

    House of Delegates

    • HOD Home
    • HOD Resources
    • Meetings
    • Rules (PDF)
    • Roster (PDF)
    • Staff Contacts

    Board of Governors

    • BOG Home
    • Meetings & Agendas
    • Members
    • Liaisons
    • Committees
    • Resources
    • Task Forces

    Oregon New Lawyers Division

    • ONLD Home
    • Law Students
    • Student Loan Repayment
    • Committees
    • Upcoming Events

    Task Forces and Special Committees

    • Task Forces Home

    Volunteer Bars

    • List/Contacts
    • Leadership Resources

    Volunteering

    • Volunteer Opportunities
  • Licensing/Compliance

    Admissions

    • Admissions Home
    • Alternative Admittance
    • Applicants for Admission
    • Admissions Forms
    • Past Bar Exam Results

    Supervised Practice Portfolio Examination

    • SPPE Home

    Licensed Paralegal Program

    • LP Home

    Lawyer Discipline

    • Discipline Home
    • Disciplinary Board Reporter
    • Disciplinary Boards
    • Client Assistance Office
    • (SPRB) State Professional Responsibility Board

    Membership Records

    • Address Changes
    • Good Standing Certificate
    • Request Discipline File Review

    MCLE

    • MCLE Home
    • Program Database
    • Forms
    • Rules (PDF)

    IOLTA Reporting

    • IOLTA Home
    • IOLTA FAQ

    Licensing Fees

    • Licensing Fee FAQ
    • Licensing Fee Payment

    Status Changes

    • Status Changes FAQ
    • Inactive Status Form
    • Retired Status Form
    • Active Pro Bono Status Form
    • Reinstatement Forms
    • Resignation Form A
    • Pending Reinstatements

    Unlawful Practice of Law

    • UPL Information
    • UPL FAQ

    Pro Hac Vice/Arbitration

    • Pro Hac Vice
    • Arbitration

    New Lawyer Mentoring Program

    • New Lawyer Mentoring Program Home

    Professional Liability Fund

    • Professional Liability
      Fund Website
For The Public

Public Information Home
Legal Information Topics
Oregon Juror Guide
Finding The Right Lawyer
Hiring A Lawyer
Lawyers Fees
Client Assistance Office
Public Records Request
Unlawful Practice of Law
Fee Dispute Resolution
Client Security Fund
Volunteer Opportunities
for the Public

For Members

BarBooks®
Bulletin Archive
Career Center
Fastcase™
Judicial Vacancies
Legal Ethics Opinions
OSB Group Listings
OSB Login
OSB Rules & Regs
SLAC Info
Surveys and Reports
Volunteer Opportunities

CLE/Legal Pubs

CLE Seminars Home
Legal Publications Home

Bar Programs

Diversity & Inclusion
Fee Arbitration/Mediation
Legal Services Program
Legislative/Public Affairs
Loan Repayment
Assistance Program

Oregon Law Foundation
Pro Bono

Member Groups

Board of Governors
Committees
House of Delegates
Volunteer Bars
Oregon New
Lawyers Division

OSB Sections
Professionalism
Commission

Volunteer Opportunities

About The Bar

About the Bar
ADA Notice
Contact Info
Copyright Notice
Directions to the Bar
Meeting Room Rentals
Mission Statement
OSB Job Opportunities
Privacy Policy
Staff Directory
Terms of Use

Licensing/Compliance

Admissions
Client Assistance Office
Client Security Fund
IOLTA Reporting
Lawyer Discipline
MCLE
Member Fee FAQ
New Lawyer
Mentoring Program

Professional Liability Fund
Status Changes

Oregon State Bar Center

Phone: (503) 620-0222
Toll-free in Oregon: (800) 452-8260
Facsimile: (503) 684-1366

Building Location:
16037 SW Upper Boones Ferry Road
Tigard, OR 97224

Mailing Address:
PO Box 231935
Tigard, OR 97281

Oregon State Bar location Map

Copyright ©1997 Oregon State Bar  ®All rights reserved | ADA Notice | Mission Statement | Privacy Policy | Terms of Use