You are here:
  1. Home
  2. News
  3. Blog
  4. COVID-19: Confidentiality and working from home

COVID-19: Confidentiality and working from home

21 May 2020

Paul Bennett is a solicitor and professional regulation partner at law firm Bennett Briegal LLP and a member of the Regulatory Processes Committee of the Law Society. He shares his expertise and tips on working while at home.

Confidentiality should be a key focus for law firms as we all adapt to the COVID-19 era and new ways of working. A fundamental challenge will be legal professional privilege (LPP) and the professional obligation of confidentiality.

The Solicitors Regulation Authority (SRA) rules still apply and we must consider client confidentiality and LPP wherever we are working, document what we have done to assess the risks, and monitor how it is working in practice.

Working from home as most of us are, the challenges around privilege and confidentiality are different to those in the office. For example, you should ensure that housemates or family members do not take photographs or make social media posts which could compromise client confidentiality by including, for example, file names containing clients’ personal data or documents.

The example of the QC in Scotland who was subject to enforcement action by the Information Commissioner’s Office (ICO) in 2011 after her laptop was stolen from her home is a harsh reminder to all professionals that we are held to a higher standard than other sectors, in that it may not necessarily be our actions, but the actions of malignant third parties which trigger a breach. The reputational impact continues as the newspaper reports are still online and the public rebuke could be supplemented by a fine under the current rules which are more draconian.

There was a 2017 case of a barrister being fined £1,000 for having client related personal data stored on their own personal device, which was not encrypted. This highlights the current challenges of law firms allowing staff to use their own devices when working from home without enhancing security controls on their devices and ensuring the firm can remove client data when practical to do so to avoid storing it outside of its control.

Here are four basic steps you can take to make sure your people are maintaining client confidentiality as far as possible while working from home.

Your firm and your people should exercise care, review the options and, if unsure, take advice from a reliable source such as the Law Society’s Practice Advice Service or a specialist solicitor.

  1. Make sure your confidentiality policy is up to date. Tell your team to be confidentiality-aware and set out your expectations as a firm. Make sure your law firm leaders should lead on the standards expected of everyone.

    One example could be that confidential or legally privileged material should not be shared by text or on a social platform such as Snapchat or Houseparty (via screenshots for example), and that you permit the use of an end to end encryption enable service such as WhatsApp or the lesser known Signal service which is designed with privacy in mind.

    The end to end encryption protection preserving confidentiality in a risk management focused way is not able to eliminate all risk, as, for example, screen shots can be taken and misused, or the wrong recipient messaged due to human error but demonstrates the firm’s approach to confidentiality is guiding on protecting client confidentiality.

  2. Do a risk assessment of the working locations of your staff. For example, if people are talking on the phone or via video platforms in a shared house, are you supplying headsets to ensure calls cannot be overheard? Are your team actually using the headsets? Have you issued guidance on each video platform you are using and on guiding them to recommending your team to encourage clients to use safe platforms as well?

  3. It’s worth reviewing your firm’s Bring Your Own Device (BYOD) policy to ensure your approach and the technology policy might need a review to check if the technology and approach you provide for remote working are fit for purpose. What are the standards you are setting as a law firm?

  4. Most law firms will already have in place arrangements to protect client information for remote workers in ‘normal’ times. Now that the risk landscape has changed, those people working from home regularly for the first time will need guidance and support on confidentiality matters.

    Think through the risks, document the steps taken to support your team and remind colleagues of the best practice measures they must adopt. Ensure the risks around confidentiality are minimised in the context of your client base.

It’s a good idea to provide online training on your firm’s confidentiality policy.

In summary: think about the risks, manage the risks through training and policy updates, and set the standards for the firm to follow. The measures I suggest are simple, inexpensive and not time-consuming.

It’s worth taking a few hours to look at your confidentiality policies and procedures now, to ensure that if someone makes a complaint against you to the SRA or the ICO, you have a response ready and a higher likelihood of maintaining your reputation.

Views expressed in our blogs are those of the authors and do not necessarily reflect those of the Law Society.

Read our guidance for law firms on the Coronavirus Job Retention Scheme

See all our information on coronavirus

Read our coronavirus information on training and furloughs

See our infographic that walks you through the business support measures available to small firms during the coronavirus (COVID-19) pandemic

See our coronavirus (COVID-19) cybersecurity, fraud prevention and lawtech resources

Members can call our free confidential helplines staffed by solicitors for anti-money laundering, conveyancing, private client, litigation, solicitors' costs, and professional indemnity insurance support, and advice. Staffed Monday to Friday from 9am to 5pm on 020 7320 5675

Tags: security | cyber security | IT | legal professional privilege

About the author

Paul Bennett is a solicitor and professional regulation partner at law firm Bennett Briegal LLP and a member of the Regulatory Processes Committee of the Law Society.

He has written a book on the SRA regime: A Practical Guide to the SRA Principles, Individual and Law Firm Codes of Conduct 2019 – What Every Law Firm Needs to Know.

  • Share this page:

Abigail Bright | Adam Johnson | Adele Edwin-Lamerton | Ahmed Aydeed | Alan East | Alex Barr | Alex Heshmaty | Alexa Lemzy | Alexandra Cardenas | Amanda Adeola | Amanda Carpenter | Amanda Jardine Viner | Amy Bell | Amy Heading | an anonymous sole practitioner | Andrew Kidd | Andrew McWhir | Andy Harris | Anna Drozd | Annaliese Fiehn | Anne Morris | Anne Waldron | anonymous female solicitor | Asif Afridi and Roseanne Russell | Bansi Desai | Barbara Whitehorne | Barry Wilkinson | Becky Baker | Ben Hollom | Bhavisha Mistry | Bob Nightingale | Bridget Garrood | Caroline Marlow | Caroline Roddis | Caroline Sorbier | Carolyn Pepper | Catherine Dixon | Chris Claxton-Shirley | Christina Blacklaws | Ciaran Fenton | Coral Hill | CV Library | Daniel Matchett | Daphne Perry | David Gilroy | David Yeoward | Douglas McPherson | Duncan Wood | Elijah Granet | Elizabeth Rimmer | Eloise Skinner | Emily Miller | Emily Powell | Emma Maule | Floyd Porter | Gary Richards | Gary Rycroft | Graham Murphy | Greg Treverton-Jones | Gustavo Bussmann | Hayley Stewart | Hilda-Georgina Kwafo-Akoto | Ignasi Guardans | James Castro Edwards | Jane Cassell | Jayne Willetts | Jeremy Miles | Jerry Garvey | Jessie Barwick | Joe Egan | Jonathan Andrews | Jonathan Fisher | Jonathan Smithers | Jonathon Bray | Julian Hall | Julie Ashdown | Julie Nicholds | June Venters | Justin Rourke | Karen Jackson | Kate Adam | Katherine Cousins | Kaweh Beheshtizadeh | Kayleigh Leonie | Keiley Ann Broadhead | Kerrie Fuller | Kevin Hood | Kevin Poulter | Larry Cattle | Laura Bee | Laura Devine | Laura Uberoi | Law Gazette Jobs | Leah Glover and Julie Ashdown | Leanne Yendell | Lee Moore | LHS Solicitors | Linden Thomas | Lucy Parker | Maria Shahid | Marjorie Creek | Mark Carver | Mark Leiser | Markus Coleman | Martin Barnes | Mary Doyle | Matt O'Brien | Matt Oliver | Matthew Still | Max Rossiter | Melinda Giles | Melissa Hardee | Michael Henson-Webb | Neil Ford | Nick Denys | Nick O'Neill | Nick Podd | Nigel West | Nikki Alderson | Oz Alashe | Paris Theodorou | Patrick Wolfe | Paul Bennett | Paul Rogerson | Paul Wilson | Pearl Moses | Penny Owston | Peter Wright | Philippa Southwell | Preetha Gopalan | Prof Sylvie Delacroix | Rachel Brushfield | Rafie Faruq | Ranjit Uppal | Ravi Naik | Rebecca Atkinson | Remy Mohamed | Richard Collier | Richard Coulthard | Richard Heinrich | Richard Mabey | Richard Messingham | Richard Miller | Richard Roberts | Rita Gupta | Rob Cope | Robert Bourns | Robert Forman | Robin Charrot | Rosa Coleman | Rosy Rourke | Sachin Nair | Saida Bello | Sally Azarmi | Sally Woolston | Sam De Silva | Sara Chandler | Sarah Austin | Sarah Crowe | Sarah Henchoz | Sarah Smith | Shereen Semnani | Shirin Marker | Siddique Patel | Simon Day | Sofia Olhede | Sonia Aman | Sophia Adams Bhatti | Sophie O'Neill-Hanson | Steve Deutsch | Steve Thompson | Stuart Poole-Robb | Sue James | Susa | Susan Acland-Hood | Susan Kench | Suzanne Gallagher | The Law Society Digital and Brand team | Tom Chapman | Tom Ellen | Tony Roe | Tracey Calvert | Umar Kankiya | Vanessa Friend | Vicki Butler | Vidisha Joshi | William Li | William McSweeney | Zoë Paton-Crockett