Interested in training for your team? Click here to learn more

Legal Ethics, Cybersecurity, and Data Privacy: Navigating Risks, Protecting Client Data, Maintaining Compliance

A live 90-minute CLE video webinar with interactive Q&A

This program is included with the Strafford CLE Pass. Click for more information.
This program is included with the Strafford All-Access Pass. Click for more information.

Wednesday, June 25, 2025

1:00pm-2:30pm EDT, 10:00am-11:30am PDT

Early Registration Discount Deadline, Friday, May 30, 2025

or call 1-800-926-7926

This CLE webinar will discuss the key ethics rules and other laws governing a lawyer's duty regarding cybersecurity, privacy, and data protection matters. The panel will review the unique risks and privacy implications for lawyers and provide best practices for implementing measures to safeguard client data, remaining compliant with ethics rules and other laws, and avoiding breaches of professional responsibility and malpractice actions.

Description

Cybercrime and data breaches continue to rise and dominate the headlines and law firms remain prime targets due to the sensitive nature of their work. Lawyers must understand the risks and their ethical and legal obligations to safeguard client data in order to uphold their professional responsibilities and avoid malpractice actions.

Rule 1.6 of the American Bar Association's (ABA) Model Rules of Professional Conduct emphasizes a lawyer's duty to maintain confidentiality and adopt reasonable security measures against data breaches to protect sensitive client information. Other ethics rules have particular application to protection of client information, including the technical competency requirements found in Model Rule 1.1, the diligence and promptness standards found in Rule 1.3, Rule 1.4 which underscores the importance of clear communication with clients, and Rules 5.1 and 5.3 highlighting the supervisory responsibilities of lawyers to ensure that all members of the firm adhere to the ethical obligations concerning cybersecurity and data protection.

Beyond ethical rules, attorneys must also navigate compliance with various state, federal, and international laws, including among others, the European Union's General Data Protection Regulation (GDPR), the Health Insurance Portability and Accountability Act (HIPAA), the Federal Trade Commission (FTC) Act, the California Consumer Privacy Act (CCPA) and New York's Stop Hacks and Improve Electronic Data Security Act (SHIELD Act).

Listen as our authoritative panel examines the ethics rules relating to data privacy and cybersecurity and provides guidance on implementing robust processes and procedures for maintaining compliance with the Model Rules of Professional Conduct and other laws.

READ MORE

Outline

  1. Overview: cybersecurity and data privacy risks in the legal profession
  2. Data protection principles
  3. Cybersecurity risks in the legal setting
  4. ABA Model Rules of Professional Conduct relating to a lawyer's duty to protect client data
  5. ABA Standing Committee on Ethics and Professional Responsibility's Formal Opinions 477R and 483
  6. States with enhanced data privacy and cybersecurity requirements for lawyers that go beyond the ABA's Model Rules of Professional Conduct
  7. Other state, federal, and international laws regulating data privacy and protection: GDPR, HIPAA, Federal Trade Commission Act, CCPA, New York's SHIELD Act
  8. Strategies for implementing technical measures and administrative safeguards for data compliance to mitigate exposure to cybersecurity incidents
  9. Practitioner pointers and key takeaways

Benefits

The panel will examine these and other key considerations:

  • Why are law firms and lawyers prime targets for cyberattacks and data breaches?
  • How do the Model Rules of Professional Conduct govern a lawyer's duty to protect client data and minimize the risks of cyberattacks?
  • What are other laws and regulations lawyers and firms must abide by with respect to data and cybersecurity?
  • What specific cybersecurity measures are required to safeguard client data from hackers?

Faculty

Nadro, Kathryn
Kathryn C. Nadro

Partner
Levenfeld Pearlstein

Ms. Nadro practices in the firm’s Corporate Group, advising clients on cybersecurity and data privacy matters....  |  Read More

Richardson, Amy
Amy E. Richardson

Partner, Chair Legal Ethics and Malpractice Group
HWG

Ms. Richardson’s practice focuses on legal ethics and professional responsibility matters, white collar defense,...  |  Read More

Attend on June 25

Early Discount (through 05/30/25)

Cannot Attend June 25?

Early Discount (through 05/30/25)

You may pre-order a recording to listen at your convenience. Recordings are available 48 hours after the webinar. Strafford will process CLE credit for one person on each recording. All formats include course handouts.

To find out which recorded format will provide the best CLE option, select your state:

CLE On-Demand Video