Toolkit · Legal Ethics

The Legal Ethics and Law Practice Management Toolkit

28 U.S.C. § 1927

Type
Toolkit
Jurisdiction
National
Date
2026-09-22
Topic
Legal Ethics

This toolkit is the front door to professional responsibility and law practice management on UpLaw. It maps the sixteen pillars of running an ethical, well-managed practice — where the binding rules actually come from, intake and engagement letters, conflicts systems, fees and billing, trust accounting, confidentiality and privilege, technology competence and data security, generative AI, client communication, litigation conduct, advertising, supervision, unauthorized and multijurisdictional practice, malpractice avoidance, succession planning, and the discipline system. Each pillar gives you plain-English doctrine, the anchor authority, the classic traps, and a link into UpLaw's deeper guide or checklist. The critical framing point runs through every section: the ABA Model Rules are a model, and the only rules that bind you are the ones your jurisdiction has adopted. A running example follows a fictional growing firm, Tallowood & Reyes LLP, as it builds its ethics infrastructure from first client to succession plan. Use it as a research map, an audit tool, or a build plan.

The Legal Ethics and Law Practice Management Toolkit

Legal Ethics > Law Practice Management | Published 22 September 2026 - Updated 20 October 2026 | UpLaw - uplaw.us

Almost no lawyer is disciplined for getting the law wrong. Lawyers are disciplined for not answering the phone, for spending money that was not theirs, for taking the second client without asking the first, and for signing a brief they did not read. Ethics is not an abstraction layered on top of practice — it is practice management, written in rules that can end a career.

Keywords: legal ethics, professional responsibility, ABA Model Rules, conflicts of interest, engagement letter, IOLTA trust account, confidentiality, attorney-client privilege, technological competence, generative AI, legal fees, candor to the tribunal, lawyer advertising, unauthorized practice of law, legal malpractice, attorney discipline

How to read this toolkit

Professional responsibility is usually taught as a bar-exam subject: a list of rules to memorize and forget. That framing is backwards. In a working practice, the rules describe systems — an intake system, a conflicts system, a docketing system, a trust-accounting system, a supervision system. Lawyers who get disciplined almost never sat down and decided to violate a rule. They ran a practice without a system, and the system's absence eventually produced a violation.

So this toolkit is organized as sixteen pillars of practice infrastructure, not as a march through the rulebook. Each pillar gives you the plain-English doctrine, the anchor authority, the traps that catch competent people, and a link into UpLaw's deeper guide or checklist where the real detail lives.

Before you go one line further, absorb the single most important framing point in this document, because every rule number below depends on it.

The ABA Model Rules of Professional Conduct are a model. They are not law anywhere. They bind no lawyer, in no state, until that state's highest court adopts them — and states adopt them with amendments, omissions, and renumberings. California's rules, though renumbered in 2018 to track the Model Rules' structure, still differ substantively in important places, and California's duty of confidentiality lives partly in a statute (Cal. Bus. & Prof. Code § 6068(e)) rather than in the rules at all. New York, Texas, and the District of Columbia each depart from the model in ways that matter. When this toolkit says "Model Rule 1.7," read it as "the model from which your state's conflicts rule was probably derived" — and then go read your state's actual rule and its comments, plus your state bar's ethics opinions, which are where the real answers to the hard questions live.

For the doctrinal foundation underneath everything here, keep Legal Ethics and Professional Responsibility: A Comprehensive Guide to the Model Rules open in the next tab. This toolkit is the map; that guide is the terrain.

A running example keeps the abstractions honest. Meet Tallowood & Reyes LLP, a fictional firm that started as two commercial-litigation partners in a shared office and is now fourteen lawyers, two offices in different states, a contract-attorney bench, an outsourced IT provider, and a generative-AI research tool the associates have started using without telling anyone. Tallowood & Reyes is exactly the size at which firms outgrow informal habits and start generating grievances. We will build its ethics infrastructure pillar by pillar.

The professional-responsibility landscape at a glance

The sixteen pillars, in the order this toolkit walks them:

  1. Sources of regulation — Who actually gets to discipline you, and under whose rules. (State supreme courts; Model Rules as template; Restatement (Third) of the Law Governing Lawyers)
  2. Intake and engagement letters — Who is the client, what are you doing for them, and what are you not doing. (Model Rules 1.2, 1.18; Togstad)
  3. Conflicts systems — Current clients, former clients, imputation, screening, waivers. (Model Rules 1.7, 1.9, 1.10, 1.18)
  4. Fees and billing — Reasonableness, writings, contingent fees, retainers, fee division. (Model Rule 1.5)
  5. Trust accounting — The rule that ends careers. (Model Rule 1.15; IOLTA)
  6. Confidentiality and privilege — Two different doctrines that people constantly conflate. (Model Rule 1.6; Upjohn; Zolin)
  7. Technology competence and data security — Reasonable efforts, not perfection. (Model Rule 1.1 cmt. 8; Model Rule 1.6(c); ABA Formal Ops. 477R, 483, 498)
  8. Artificial intelligence — Competence, confidentiality, candor, supervision, and fees. (ABA Formal Op. 512; Fed. R. Civ. P. 11)
  9. Communication and client relations — The number-one source of grievances. (Model Rules 1.4, 1.2)
  10. Litigation conduct — Candor, fairness, and the no-contact rule. (Model Rules 3.1, 3.3, 3.4, 4.2; Fed. R. Civ. P. 11; 28 U.S.C. § 1927)
  11. Advertising and business development — What the First Amendment protects and what it does not. (Model Rules 7.1–7.3; Bates; Ohralik)
  12. Supervision and delegation — You are responsible for your people and your vendors. (Model Rules 5.1, 5.3)
  13. Unauthorized and multijurisdictional practice — The rule that quietly grew teeth in the remote-work era. (Model Rule 5.5; Birbrower)
  14. Malpractice avoidance, insurance, and disengagement — Docketing, non-engagement letters, withdrawal. (Model Rule 1.16; state limitations law)
  15. Succession planning — What happens to your clients if you do not come back Monday. (Model Rule 1.3 cmt. 5; Model Rule 1.17)
  16. The discipline system — Grievance, investigation, sanction, reciprocal discipline. (Model Rules 8.1, 8.3, 8.4)

Pillar 1 — Sources of regulation: your state's rules, not the ABA's

Lawyer regulation in the United States is a state judicial function. Each state's highest court admits lawyers, promulgates the rules of professional conduct, and runs (usually through a delegated disciplinary board or state bar) the machinery that suspends and disbars them. The American Bar Association is a private membership organization. Its Model Rules are extraordinarily influential — nearly every state's rules are derived from them — but the ABA cannot discipline anyone.

That means your authority hierarchy looks like this:

Source Binding? What it is for
Your state's Rules of Professional Conduct Yes — this is the law The rules you are actually charged under
Your state's disciplinary case law Yes How the rules are actually applied
Your state/local bar ethics opinions Usually persuasive, sometimes safe-harbor The hard questions the rules do not answer
ABA Model Rules and comments No — a model Interpretive gloss; the template your rule came from
ABA Formal Ethics Opinions No — persuasive Excellent thinking on new problems (tech, AI, remote work)
Restatement (Third) of the Law Governing Lawyers No — persuasive The best synthesis of the civil law of lawyering
Federal court local rules; agency practice rules Yes, in that forum Often incorporate state rules by reference, sometimes with variations

Two additional layers catch people. First, federal courts have their own admission and conduct rules; many incorporate the forum state's rules by reference, but some do not, and federal practice adds Rule 11, 28 U.S.C. § 1927, and the court's inherent sanction power recognized in Chambers v. NASCO, Inc., 501 U.S. 32 (1991). Second, specialized regimes overlay the general rules: securities lawyers practicing before the SEC are subject to Sarbanes-Oxley § 307 and the up-the-ladder reporting regulations at 17 C.F.R. Part 205; patent practitioners are subject to the USPTO's own rules; immigration practitioners to EOIR's.

The Restatement deserves a special word. The rules of professional conduct are disciplinary rules. They tell you what gets you suspended. They are not, by their own terms, the standard for civil liability — Model Rule Scope ¶ 20 says violation "should not itself give rise to a cause of action." But the Restatement (Third) of the Law Governing Lawyers (2000) sets out the civil law of lawyering — malpractice, fiduciary duty, fee forfeiture, disqualification — and in practice a rule violation is very often admissible as evidence of the standard of care. The two systems are formally separate and practically joined at the hip.

Tallowood & Reyes practices in two states. Every rule in this toolkit therefore has to be checked twice for them, and their internal ethics manual has to be written as a two-column document — a discipline they resisted for two years and regretted for one.

Deep dive: Legal Ethics and Professional Responsibility: A Comprehensive Guide to the Model Rules. To find and verify your own state's rules and disciplinary decisions, start with Finding the Law: A Beginner's Guide to Legal Research and Case Law Research: Finding, Reading, and Verifying Judicial Decisions.

Pillar 2 — Intake, engagement letters, and defining the client

Almost every disaster in a law practice traces back to an unanswered question at intake: who is the client?

The attorney-client relationship can form without a signed agreement, without a fee, and without the lawyer intending it. The canonical illustration is Togstad v. Vesely, Otto, Miller & Keefe, 291 N.W.2d 686 (Minn. 1980), where a lawyer met briefly with a prospective medical-malpractice claimant, offered a casual view that she did not have a case, never sent a letter, and never opened a file — and the firm was held liable for malpractice when the statute of limitations ran. The relationship formed because the client reasonably relied on legal advice. That is the test, and it is a client's-perspective test.

Model Rule 1.18 then adds a second trap: even people who never become clients — prospective clients — are owed confidentiality and can conflict you out of a matter. A twenty-minute "let me tell you about my dispute" call can disqualify your firm from the other side. ABA Formal Op. 492 (2020) walks through how much information is "significantly harmful" enough to disqualify, and Rule 1.18(d) provides screening relief if — and only if — the lawyer took reasonable measures to avoid learning more than necessary.

Your intake system therefore has to do four things, in writing:

  • Identify the client, and only the client. In entity work, Model Rule 1.13 says the organization is the client, not its officers. This is why Upjohn warnings exist — corporate counsel interviewing an employee must make clear whom they represent. Naming the entity precisely in the engagement letter ("Client means Tallowood Holdings LLC, and not its members, officers, subsidiaries, or affiliates") is a conflicts decision, not boilerplate.
  • Define the scope. Model Rule 1.2(c) permits limited-scope representation if it is reasonable and the client gives informed consent. "We will handle the trial. We are not engaged for any appeal" is the single cheapest malpractice-prevention sentence in existence.
  • State the fee. Model Rule 1.5(b) requires the basis of the fee to be communicated, preferably in writing, before or within a reasonable time after commencing the representation.
  • Close the door on non-clients. A non-engagement letter to everyone you decline, and a disengagement letter at the end of every matter, are what convert "I thought you were still my lawyer" into a paper record.

Tallowood & Reyes learned this the hard way: a partner took a coffee meeting with a founder, said "your non-compete is probably unenforceable," and sent no letter. Eighteen months later that founder sued the firm. The intake system now requires that every substantive contact produce one of three documents — engagement letter, non-engagement letter, or a logged conflicts-check-and-decline memo.

Deep dive: Evaluating a New Civil Case: A Practical Checklist is the case-assessment companion to intake — merits, damages, collectability, and limitations, before you sign.

Pillar 3 — Conflicts systems

Conflicts is where the rules stop being intuitive. Four rules do the work:

Model Rule 1.7 — current clients. A concurrent conflict exists if the representation of one client will be directly adverse to another current client, or if there is a significant risk that the representation will be materially limited by the lawyer's responsibilities to another client, a former client, a third person, or the lawyer's own interests. Directly adverse means what it says: you cannot sue a current client on behalf of another client, even in a wholly unrelated matter, without consent. Material limitation is the subtler and more common half — joint representation of a buyer and a seller, of a company and its CEO, of two co-defendants whose interests are aligned today and will diverge the moment one is offered a deal. In criminal cases, the constitutional stakes are set by Holloway v. Arkansas, 435 U.S. 475 (1978) and Cuyler v. Sullivan, 446 U.S. 335 (1980).

Some conflicts are consentable and some are not. Rule 1.7(b) permits waiver only if the lawyer reasonably believes competent and diligent representation is still possible, the representation is not prohibited by law, the clients are not asserting claims against each other in the same litigation, and each affected client gives informed consent, confirmed in writing. "Informed consent" is a defined term (Rule 1.0(e)) and means the client understood the material risks and the reasonably available alternatives — a two-line waiver in the retainer letter usually does not get there.

Model Rule 1.9 — former clients. You may not represent someone whose interests are materially adverse to a former client in the same or a substantially related matter. The "substantially related" test traces to T.C. Theatre Corp. v. Warner Bros. Pictures (S.D.N.Y. 1953) and was sharpened in cases like Analytica, Inc. v. NPD Research, Inc. (7th Cir. 1983): the question is whether the lawyer would normally have obtained confidential information in the first matter that would materially advance the second. You do not have to prove actual disclosure; the risk is enough.

Model Rule 1.10 — imputation. One lawyer's conflict is generally imputed to every lawyer in the firm. The 2009 amendment to Model Rule 1.10 permits screening of a laterally hired lawyer without the former client's consent, subject to notice and certification requirements. This is one of the widest state variations in the entire rulebook — some states permit screening broadly, some only for government lawyers moving to private practice (Rule 1.11), some not at all. Do not assume the model rule applies to you.

Model Rule 1.18 — prospective clients, discussed above.

What makes a conflicts system, as opposed to a conflicts instinct, is: a database that captures every client, adverse party, related party, affiliate, and prospective client with searchable names and aliases; a rule that no matter is opened until the search runs; a rule that the search runs again when a new party appears in the case; a documented resolution for every hit; and an engagement-letter clause governing advance waivers and joint-representation ground rules.

Deep dive: Running a Conflicts Check: A Practical Checklist — the search-by-search procedure, what to capture, and how to document a resolution.

Pillar 4 — Fees, billing, and fee agreements

Model Rule 1.5 is short and is violated constantly.

  • 1.5(a): the fee must be reasonable. The rule lists eight factors — time and labor, novelty and difficulty, preclusion of other employment, customary fee, amount involved and results obtained, time limitations, nature and length of the relationship, and the lawyer's experience. Note the antitrust backdrop: Goldfarb v. Virginia State Bar, 421 U.S. 773 (1975) held that bar-enforced minimum fee schedules violate the Sherman Act. There is no floor and no ceiling; there is only reasonableness.
  • 1.5(b): the basis of the fee must be communicated, preferably in writing. Many states make the writing mandatory above a dollar threshold.
  • 1.5(c): contingent fees must be in a writing signed by the client, must state the method of calculation, must specify whether the percentage is taken before or after expenses (a real and recurring dispute), and must be followed by a written statement at the conclusion showing the outcome and the remittance.
  • 1.5(d): contingent fees are prohibited in a domestic-relations matter where the fee is contingent on securing a divorce or on the amount of alimony or support, and in criminal defense.
  • 1.5(e): fee division between lawyers in different firms requires that the division be proportional to services performed or that each lawyer assume joint responsibility, that the client agree in writing, and that the total fee be reasonable.

Three recurring traps. First, "nonrefundable retainer" is a phrase to strike from your vocabulary. In many jurisdictions an advance fee remains the client's money until earned; In re Cooperman, 83 N.Y.2d 465 (1994) held New York's special nonrefundable retainer agreements unenforceable as a violation of the client's absolute right to discharge counsel. A true retainer (a fee paid solely to secure availability) is permitted in some states and not others. Check your rule and label the money correctly, because the label determines which bank account it goes in — see Pillar 5.

Second, billing integrity is an honesty rule, not an accounting rule. Block billing, rounding up, billing the same research to three clients, billing travel time twice — these are candor problems and, at the extreme, fraud.

Third, Model Rule 5.4 generally forbids sharing legal fees with nonlawyers and nonlawyer ownership of law firms. This is the rule under active reform pressure: Arizona eliminated its Rule 5.4 in 2021 and licenses Alternative Business Structures; Utah runs a regulatory sandbox; D.C. has long permitted limited nonlawyer partners under its own Rule 5.4(b). Everywhere else, the traditional prohibition stands — and it is the reason litigation-funding and legal-tech deal structures need careful ethics review.

Deep dive: For the business-side view of pricing, entity choice, and contracting, The Small Business Legal Toolkit treats a law firm the way it treats any other closely held business.

Pillar 5 — Trust accounting and client property

If you read one pillar twice, read this one. More lawyers are disbarred for trust-account violations than for anything else, and the reason is structural: Model Rule 1.15 is close to a strict-liability rule. Discipline for commingling and misappropriation does not require that you meant to steal. Sloppiness will do.

The core commands of Model Rule 1.15:

  • Client funds and lawyer funds must be separate. Client and third-party funds go in a trust account, identified as such, in the state where the lawyer's office is situated. The lawyer's own money may not sit there, with a narrow exception for funds sufficient to cover bank service charges.
  • Advance fees and advance costs are the client's money until earned or incurred, and belong in trust. Moving them to the operating account before they are earned is misappropriation, full stop.
  • Complete records must be kept for a period after termination (five years under the model rule; state periods vary), and accounts must be reconciled.
  • Prompt notice, prompt delivery, prompt accounting. When you receive funds in which a client or third person has an interest, you notify, you deliver what they are entitled to, and you render an accounting on request.
  • Disputed funds stay in trust. If you and the client disagree about a fee, the disputed portion stays put until the dispute resolves. You do not self-help.

IOLTA — Interest on Lawyers' Trust Accounts — is the mechanism by which interest on pooled, nominal, short-term client funds is remitted to a state foundation that funds legal services for the poor. It is mandatory in most states. Its constitutionality survived a two-case run at the Supreme Court: Phillips v. Washington Legal Foundation, 524 U.S. 156 (1998) held that interest on client funds is the client's property under the Takings Clause, and Brown v. Legal Foundation of Washington, 538 U.S. 216 (2003) then held that because the funds could not have earned net interest for the individual client anyway, just compensation was zero. Practical upshot: IOLTA stands, and where the client's funds could earn net interest for that client, they belong in a separate interest-bearing account for that client.

The operational controls that actually prevent disaster: a three-way reconciliation every month (bank statement, trust ledger, and the sum of individual client ledgers must all agree to the penny); individual client ledgers, not just a running account balance; no debit card, no cash withdrawals, no ATM access on the trust account; dual authorization for disbursements above a threshold; never disburse against an uncollected deposit (the classic wire-fraud vector — a fake settlement check clears provisionally, you wire out the "net," the check bounces, and you have just stolen another client's money); and enrollment in your state's bank overdraft-notification program, which most states require and which sends the disciplinary authority a notice the moment the account goes negative.

Tallowood & Reyes nearly lost a partner to exactly the counterfeit-check scenario. The bookkeeper had been reconciling to the bank statement only, not to the client ledgers, and the shortfall would have been invisible for months.

Deep dive: Client Trust Accounting and IOLTA Compliance: A Practical Checklist — account setup, ledgers, the three-way reconciliation, disbursement gates, and what to do the moment you find a shortfall.

Pillar 6 — Confidentiality, privilege, and the crime-fraud exception

These are two different doctrines, and conflating them is one of the most common errors in practice.

The duty of confidentiality (Model Rule 1.6) is an ethical duty. It covers all information relating to the representation, whatever the source — including information you read in the newspaper, and including information about former and prospective clients. It applies everywhere, all the time, to everyone in the firm, forever. It is broken only by informed consent, implied authorization, or a listed exception (preventing death or substantial bodily harm; preventing or mitigating certain financial crimes or frauds in which the lawyer's services were used; securing ethics advice; the lawyer's own self-defense in a claim or proceeding; compliance with other law or a court order; and, since 2012, detecting conflicts in a lateral move or firm merger). The exceptions vary sharply by state — some make the death-or-bodily-harm exception mandatory rather than permissive; California's confidentiality duty is anchored in Bus. & Prof. Code § 6068(e) and its exception structure is famously narrow.

The attorney-client privilege is an evidentiary rule that protects confidential communications made for the purpose of obtaining or providing legal advice. It is narrower than confidentiality (it protects communications, not underlying facts), it is invoked in proceedings, and it can be waived. In the corporate setting, Upjohn Co. v. United States, 449 U.S. 383 (1981) rejected the "control group" test and extended privilege to communications with lower-level employees about matters within their duties, made at the direction of superiors for the purpose of obtaining legal advice. Privilege survives the client's death: Swidler & Berlin v. United States, 524 U.S. 399 (1998).

Work product is a third, separate doctrine — a qualified immunity for materials prepared in anticipation of litigation, recognized in Hickman v. Taylor, 329 U.S. 495 (1947) and codified in Fed. R. Civ. P. 26(b)(3), with near-absolute protection for opinion work product.

The crime-fraud exception removes the privilege where the client sought the lawyer's services to further an ongoing or future crime or fraud. United States v. Zolin, 491 U.S. 554 (1989) set the procedure: a party seeking in camera review must first make a threshold factual showing sufficient to support a good-faith belief that review may reveal evidence establishing the exception. Note the asymmetry that trips people up — advice about past conduct is privileged; advice sought to accomplish a future fraud is not.

Two practical rules ride on top. Fed. R. Evid. 502 governs waiver by inadvertent disclosure and enables clawback and non-waiver orders — get a Rule 502(d) order in every document-heavy case. And Model Rule 4.4(b) tells you what to do when you receive a document you were not supposed to have: promptly notify the sender. (Whether you must return it unread is a matter of state variation and case law.)

Deep dive: Building a Privilege Log: A Practical Checklist for asserting privilege in discovery; Issuing a Litigation Hold and Preserving ESI: A Practical Checklist for the preservation duty that attaches long before a complaint is filed; and The Federal Discovery Toolkit: A Roadmap From Rule 26(f) to Sanctions for the surrounding machinery.

Pillar 7 — Technology competence, data security, and the cloud

In 2012 the ABA amended Comment 8 to Model Rule 1.1 to add nine words that changed the profession: competence includes keeping abreast of "the benefits and risks associated with relevant technology." A large majority of states have now adopted some version of that comment. Technological incompetence is now incompetence.

The security duty comes from Model Rule 1.6(c), added at the same time: a lawyer must make reasonable efforts to prevent inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation. Note the standard — reasonable efforts, not guaranteed security. Comment 18 lists the factors: sensitivity of the information, likelihood of disclosure absent safeguards, cost of additional safeguards, difficulty of implementation, and whether the safeguards adversely affect the lawyer's ability to represent clients.

The ABA's technology opinions are the best free thinking available on this, even though they bind no one:

  • Formal Op. 477R (2017) — securing communication of protected client information; unencrypted email may be reasonable for routine matters and unreasonable for sensitive ones. The point is that this is a case-by-case judgment, not a blanket rule.
  • Formal Op. 483 (2018) — a lawyer's obligations after an electronic data breach or cyberattack: monitor for breaches, stop the breach and restore systems, determine what happened, and notify current clients whose confidential information was compromised.
  • Formal Op. 498 (2021) — virtual practice: hardware/software security, supervision at a distance, and the confidentiality risks of smart speakers and shared home space.
  • Formal Op. 495 (2020) — practicing the law of your licensing jurisdiction while physically located in another state; see Pillar 13.

Cloud vendors are a Rule 5.3 problem (nonlawyer assistance) as much as a Rule 1.6 problem: you must make reasonable efforts to ensure the vendor's conduct is compatible with your own obligations. That means reading the terms of service — for data ownership, for the vendor's right to use your data, for breach notification, for subpoena-response procedures, and for what happens to your data when you leave.

Tallowood & Reyes discovered during a security review that its outsourced IT provider had never been given a confidentiality agreement, that two associates were syncing case files to personal consumer cloud accounts, and that nobody could say where the firm's backups actually lived.

Deep dive: The Open-Source Law Firm: Building a Cost-Effective, Ethics-Compliant Technology Stack and Running a Law Practice on Open Source Software: A Practical Guide for the build; The Privacy and Data Protection Toolkit: Building and Operating a Compliance Program for the surrounding privacy law; and Responding to a Data Breach: A Notification and Incident Response Checklist for the day it goes wrong — remembering that a law firm breach triggers both the statutory notification regime and the Rule 1.6/Formal Op. 483 duty to the affected clients.

Pillar 8 — Artificial intelligence in legal practice

Generative AI touches at least six rules at once, and the profession's guidance has converged fast. ABA Formal Opinion 512 (July 2024) is the anchor document, and every state bar worth its salt has now issued its own.

Competence (Rule 1.1). You do not need to build the model, but you must understand its capabilities and limitations well enough to use it responsibly — including, critically, that general-purpose generative models confabulate citations that look perfectly real. The consequences are no longer hypothetical: in Mata v. Avianca, Inc. (S.D.N.Y. 2023), lawyers were sanctioned under Fed. R. Civ. P. 11 for filing a brief containing citations to cases that did not exist and then failing to correct course when challenged. A long and growing line of similar sanctions orders has followed in courts across the country. Every citation produced by an AI tool must be independently verified in a primary source before it reaches a filing. That is not a best practice; it is Rule 11 and Rule 3.3.

Confidentiality (Rule 1.6). Entering client information into a tool that trains on inputs, or that a third party can access, is a disclosure. Formal Op. 512 concludes that where a self-learning tool's terms permit the provider to use inputs, the lawyer generally needs the client's informed consent — and general boilerplate in an engagement letter is unlikely to suffice. Read the terms; prefer zero-retention, no-training configurations; segregate confidential work.

Candor and supervision (Rules 3.3, 5.1, 5.3). Formal Op. 512 treats AI output as work requiring the same review a supervising lawyer owes a junior associate's draft — with the added warning that the tool has no professional judgment, no duty, and no shame. Firms need a written AI policy, an approved-tool list, and a rule that no AI output is filed or sent without human verification.

Fees (Rule 1.5). You may not bill a client for hours you did not spend. If a tool compresses eight hours of drafting into one, an hourly bill reflects one. Charging clients for the tool itself is permitted only as an actual cost, disclosed in advance — not as a hidden markup.

Court rules. Many judges now have standing orders requiring disclosure of generative-AI use and certification of human verification. Read the standing order before you file.

Verify before relying. This is the fastest-moving area in professional responsibility. State bar AI opinions, court standing orders, and vendor terms of service are all changing on a scale of months, and the sanctions case law grows weekly. Nothing in this pillar should be relied on without confirming your jurisdiction's current guidance and the specific judge's current standing order.

Deep dive: AI Governance and Compliance: A Comprehensive Guide for the regulatory landscape, and Deploying an AI System: An AI Governance and Risk Checklist — which works just as well for a law firm adopting an AI research tool as for a client deploying a model.

Pillar 9 — Communication, client relations, and managing expectations

Here is the least glamorous and most important fact in this toolkit: the most common grievance filed against lawyers is not fraud or conflict. It is failure to communicate. A client who is kept informed rarely files a bar complaint even when the case goes badly. A client who is ignored files one even when the case goes well.

Model Rule 1.4 requires the lawyer to promptly inform the client of any decision requiring informed consent; reasonably consult about the means; keep the client reasonably informed about status; promptly comply with reasonable requests for information; and explain matters to the extent reasonably necessary for the client to make informed decisions. Rule 1.4(a)(1) also requires prompt communication of settlement offers — every offer, including ones you think are insulting, because under Model Rule 1.2(a) the decision whether to settle belongs to the client, not to you. (So does the decision, in a criminal case, whether to plead, whether to waive a jury, and whether to testify.)

The operational translation:

  • A response-time standard the whole firm knows (e.g., all client contacts acknowledged within one business day).
  • A standing status cadence on every open matter — even "nothing has happened; the motion is still under submission" is a communication, and the one clients most want.
  • Every settlement offer conveyed in writing, with the client's decision documented in writing.
  • Bad news delivered early and personally. Missed deadlines, adverse rulings, and your own errors get worse the longer they sit, and Rule 1.4 obliges disclosure of a material error.
  • Realistic expectations at intake. Most grievances are the delta between what the client expected and what happened.

Pillar 10 — Litigation conduct: candor, fairness, and the no-contact rule

Advocacy has outer bounds, and they are enforced by two overlapping systems — the disciplinary rules and the court's own sanction power.

  • Model Rule 3.1 (meritorious claims) parallels Fed. R. Civ. P. 11: no frivolous positions, though a good-faith argument for extension, modification, or reversal of existing law is always permitted.
  • Model Rule 3.3 (candor to the tribunal) is the hardest rule in the book. You may not make a false statement of fact or law to a court, or fail to correct one you made. You must disclose legal authority in the controlling jurisdiction known to be directly adverse to your client's position that opposing counsel has not disclosed. And you may not offer evidence you know to be false — if you learn it was false, you must take reasonable remedial measures, including if necessary disclosure to the tribunal, and this duty overrides the duty of confidentiality. On the criminal-defense version of that problem, Nix v. Whiteside, 475 U.S. 157 (1986) held that a lawyer's refusal to assist a client's planned perjury did not violate the Sixth Amendment. In ex parte proceedings (TROs, ex parte applications), Rule 3.3(d) requires disclosure of all material facts, including unfavorable ones.
  • Model Rule 3.4 (fairness to opposing party and counsel) prohibits obstructing access to or destroying evidence, falsifying evidence, coaching false testimony, knowingly disobeying an obligation under the rules of a tribunal, and making frivolous discovery requests or failing to make reasonably diligent efforts to comply with proper discovery requests.
  • Model Rule 4.2 (the no-contact rule) forbids communicating about the subject of the representation with a person the lawyer knows is represented by counsel, absent consent or legal authorization. In the entity context, the reach of the rule to current employees, former employees, and control-group members is a live area of state-by-state variation — check your jurisdiction's rule and opinions before you interview anyone connected to a represented company. Model Rule 4.3 governs dealings with unrepresented persons: you may not state or imply that you are disinterested, and you must correct a misunderstanding.

The sanction backstop: Fed. R. Civ. P. 11 (papers), Fed. R. Civ. P. 37 (discovery), 28 U.S.C. § 1927 (vexatious multiplication of proceedings — see Roadway Express, Inc. v. Piper, 447 U.S. 752 (1980)), and the court's inherent power (Chambers v. NASCO, Inc., 501 U.S. 32 (1991)).

Deep dive: Federal Civil Litigation: A Roadmap and Resource Guide for the surrounding procedure, and Moving to Compel Discovery and Seeking Rule 37 Sanctions: A Practical Checklist for the discovery-sanctions machinery. Arbitration and ADR: A Toolkit for Choosing a Forum, Drafting Clauses, and Running a Case covers the parallel duties in private forums.

Pillar 11 — Advertising, solicitation, and business development

Lawyer advertising is commercial speech, and the First Amendment does real work here. Bates v. State Bar of Arizona, 433 U.S. 350 (1977) struck down a flat ban on truthful lawyer advertising. Shapero v. Kentucky Bar Ass'n, 486 U.S. 466 (1988) protected truthful, non-deceptive targeted direct mail. But Ohralik v. Ohio State Bar Ass'n, 436 U.S. 447 (1978) upheld a ban on in-person solicitation for pecuniary gain, because of the coercive dynamics of a lawyer standing over a hospital bed — while In re Primus, 436 U.S. 412 (1978), decided the same day, protected political/associational solicitation by a nonprofit civil-rights lawyer. And Florida Bar v. Went For It, Inc., 515 U.S. 618 (1995) upheld a 30-day moratorium on targeted direct mail to accident victims and their families.

The current model rules (substantially restructured by the ABA in 2018, consolidating what used to be Rules 7.1 through 7.5):

  • Rule 7.1 — no false or misleading communication about the lawyer or the lawyer's services. This is the master rule; everything else is a specification of it. Testimonials, past results, and comparative claims are the classic hazards.
  • Rule 7.2 — permits advertising through any media; forbids giving anything of value for a recommendation, with exceptions for reasonable advertising costs, nominal gifts, qualified lawyer-referral services, and reciprocal-referral agreements. Pay-per-lead arrangements need careful analysis under this rule. Communications must include the name and contact information of at least one responsible lawyer or firm.
  • Rule 7.3 — governs solicitation, defined as a communication initiated by or on behalf of the lawyer directed to a specific person known to need legal services in a particular matter and offering to provide services. Live person-to-person solicitation is prohibited unless the target is a lawyer, has a family/close personal/prior professional relationship, or routinely uses the type of services offered. Coercion, duress, and harassment are always out.
  • Specialization claims — a lawyer may not state or imply certification as a specialist unless certified by an approved organization and the organization is named.

States vary enormously here, more than almost anywhere else. Some require pre-filing of ads, some mandate specific disclaimers, some regulate firm trade names and domain names tightly. And do not forget that a law firm's marketing is also subject to the FTC Act's prohibition on deceptive advertising, and that endorsement and testimonial disclosure rules apply to lawyers just as to anyone else.

Deep dive: Advertising Law: A Comprehensive Guide to the FTC Act and Lanham Act and The Advertising and Marketing Law Toolkit — the consumer-protection layer that sits underneath the bar rules.

Pillar 12 — Supervision, delegation, and nonlawyer assistants

Model Rule 5.1 makes partners and managerial lawyers responsible for making reasonable efforts to ensure the firm has measures giving reasonable assurance that all lawyers conform to the rules; supervising lawyers are responsible for the lawyers they directly supervise. A lawyer is personally responsible for another lawyer's violation if she orders it, ratifies it, or — being a partner/manager/direct supervisor — knows of it at a time when its consequences can be avoided or mitigated and fails to act.

Model Rule 5.2 gives the subordinate lawyer a narrow shelter: "I was following orders" is not a defense, except where the subordinate acted in accordance with a supervisor's reasonable resolution of an arguable question of professional duty. Ambiguity is a defense; a clear violation is not.

Model Rule 5.3 extends the same responsibility to nonlawyer assistance — paralegals, secretaries, investigators, and (importantly) outside vendors: cloud providers, e-discovery vendors, document-review contractors, virtual assistants, and AI tools. The 2012 amendments deliberately changed the heading from "nonlawyer assistants" to "nonlawyer assistance" to capture outsourced services.

For Tallowood & Reyes, with a contract-attorney bench and an offshore document-review vendor, Rules 5.1 and 5.3 are not paperwork — they are the entire quality-control architecture: written confidentiality agreements, conflicts screening of contract lawyers, a named supervising lawyer for every delegated task, and a review protocol before anything leaves the building.

Deep dive: The Corporate Compliance Toolkit — a law firm is an organization, and the same compliance-program architecture (policies, training, monitoring, reporting channel, discipline, and documented board-level oversight) is what a supervising partner is being asked to build.

Pillar 13 — Unauthorized and multijurisdictional practice

Model Rule 5.5 says a lawyer shall not practice law in a jurisdiction in violation of that jurisdiction's regulation of the legal profession, nor assist another in doing so. Two distinct problems live inside it.

Unauthorized practice by nonlawyers. Every state defines "the practice of law" and prohibits nonlawyers from engaging in it. The definitions are vague, the enforcement is uneven, and the pressure from legal-technology products, document-preparation services, and access-to-justice reform is intense. The rule for lawyers is simple: do not assist it — do not lend your license, do not let a nonlawyer-owned entity control your professional judgment, and do not sign off on work you did not supervise.

Multijurisdictional practice by lawyers. This is the one that has quietly grown teeth. Birbrower, Montalbano, Condon & Frank, P.C. v. Superior Court, 17 Cal. 4th 119 (1998) held that New York lawyers who performed substantial work in California for a California client — even in an arbitration — engaged in the unauthorized practice of law and could not recover their California fees. The Model Rules responded with Rule 5.5(c), which permits a lawyer admitted elsewhere and in good standing to provide legal services on a temporary basis in a host jurisdiction where the services are (1) undertaken in association with a locally admitted lawyer who actively participates; (2) related to a pending or potential proceeding in which the lawyer is or reasonably expects to be authorized to appear (pro hac vice); (3) related to a pending or potential ADR proceeding arising out of the lawyer's home-state practice; or (4) otherwise reasonably related to the lawyer's home-jurisdiction practice. Rule 5.5(d) covers in-house counsel and services authorized by federal or other law.

Then came remote work. ABA Formal Op. 495 (2020) concluded that a lawyer may, consistent with the Model Rules, practice the law of the jurisdiction where she is licensed while physically located in a jurisdiction where she is not — provided she does not hold out as licensed there and does not establish a local public presence — unless the host state's own rules say otherwise. That last clause matters. This is state law, and states differ. Before you let an associate move to another state and keep working, check the host state's rule, its bar opinions, and its registration requirements (some states require in-house counsel registration; some have adopted express remote-practice safe harbors; some have said nothing at all).

Pro hac vice admission is the workhorse for litigation — but it is granted by the court, on motion, usually requires local counsel, and it can be revoked.

Pillar 14 — Malpractice avoidance, insurance, and disengagement

Legal malpractice is a civil claim, governed by state law, not the disciplinary rules. The elements track negligence: duty (an attorney-client relationship, or reasonable reliance under Togstad), breach (departure from the standard of care of a reasonably competent practitioner, usually proved by expert testimony), causation, and damages. In litigation malpractice, causation typically requires a "case within a case" — the plaintiff must prove she would have won the underlying matter but for the lawyer's negligence, and (in many states) that the judgment would have been collectible. Breach of fiduciary duty is a separate and often more dangerous theory, because it can support fee forfeiture without proof that the client would have won anything.

Limitations law is where malpractice cases are actually won and lost, and it is entirely state-specific. Most states apply a discovery rule, and many apply a continuous-representation doctrine that tolls the clock while the lawyer keeps working on the same matter. Some have statutes of repose. Do not generalize; look it up.

The controls that actually prevent claims are mundane:

  • A calendar you trust. Missed deadlines are the leading malpractice claim. Two-person docketing, redundant reminders, and a rule that only one system is authoritative.
  • Written scope, written non-engagement, written disengagement. See Pillar 2.
  • Conflicts discipline. See Pillar 3.
  • Engagement-letter terms on scope limits, fee disputes, file retention, and (where permitted) arbitration of disputes. Note Model Rule 1.8(h): a lawyer may not prospectively limit malpractice liability unless the client is independently represented in making the agreement, and may not settle a claim with an unrepresented client or former client without advising them in writing to seek independent counsel and giving them a reasonable opportunity to do so.
  • Malpractice insurance. Almost universally a claims-made policy — coverage depends on when the claim is made and reported, not when the error occurred. Understand your retroactive date, your prior-acts coverage, your reporting obligation for circumstances that may give rise to a claim, and your tail (extended reporting period) coverage, which is the thing that protects you after you retire or the firm dissolves. Only a minority of states mandate insurance; a number require disclosure to clients if you have none.
  • Withdrawal done right. Model Rule 1.16 distinguishes mandatory withdrawal (the representation would violate the rules or law; the lawyer's condition materially impairs representation; the lawyer is discharged — and the client's right to discharge is essentially absolute) from permissive withdrawal (client persists in criminal or fraudulent conduct, has used the lawyer's services to commit a crime or fraud, insists on repugnant or imprudent action, fails substantially to fulfill an obligation such as paying fees after reasonable warning, unreasonable financial burden, or other good cause). In litigation you need the court's permission, and courts do deny it. And Rule 1.16(d) requires you to protect the client on the way out: reasonable notice, time to find new counsel, return of the file and any unearned fee or unincurred cost advance. (Whether "the file" means the entire file or only the end product is a genuine state split — California follows the entire-file approach; check your rule, and note that in most states you may not hold a file hostage over an unpaid bill where doing so would prejudice the client.)

Deep dive: Withdrawing From a Representation: A Practical Checklist for the step-by-step exit; Insurance Coverage Law: A Comprehensive Guide for Policyholders and The Business Insurance and Coverage Toolkit for reading your own claims-made policy the way you would read a client's.

Pillar 15 — Succession planning and closing a practice

Comment 5 to Model Rule 1.3 (diligence) states plainly that a sole practitioner should prepare a plan designating another competent lawyer to review client files, notify clients, and determine whether protective action is needed in the event of the lawyer's death or disability. Many states have gone further and made a succession plan or a designated successor/custodian attorney mandatory or strongly encouraged, and most have a court-appointed-receiver mechanism for practices whose lawyer dies, disappears, or is suspended.

The components of a real plan:

  • A designated successor who has agreed in writing, with defined authority.
  • Access credentials — to the practice-management system, the email, the document store, and above all the trust account — held in escrow or with the successor, and updated. A trust account no one can access is a client-property crisis.
  • A current client list and matter status, with deadlines, so someone can triage in a week.
  • Client notice templates and an agreement about who sends them.
  • File retention and destruction policy, with client consent obtained at intake where possible.
  • Tail insurance arranged, not merely contemplated.
  • A valuation and sale mechanism if the practice has goodwill — Model Rule 1.17 permits the sale of a law practice (or an area of practice), subject to conditions: the seller ceases to engage in the practice of law in that area in the geographic area, the practice is sold as an entirety to one or more lawyers, written notice goes to each client with a right to take the file elsewhere, and the fees charged to clients may not be increased because of the sale.

For Tallowood & Reyes, succession is not a retirement question — it is an operational one. Their two-office structure means a disabling event for the managing partner would strand an entire office. Their plan names a successor in each state, keeps trust-account signatories redundant, and is reviewed every January with the malpractice renewal.

Deep dive: Wills, Trusts, and Probate: A Comprehensive Estate Planning Guide and The Estate Planning and Wealth Transfer Toolkit — a lawyer's practice is an asset, and the personal estate plan and the practice succession plan have to be drafted so they do not contradict each other.

Pillar 16 — The discipline system

Discipline is a judicial process, not a criminal one, but it is adversarial and its sanctions are severe.

The path. A grievance is filed (by a client, an opposing party, a judge, or another lawyer). Bar counsel screens it; many are dismissed without action. If it proceeds, there is an investigation, in which Model Rule 8.1 obliges you not to make a false statement of material fact and not to knowingly fail to respond to a lawful demand for information — failing to answer the bar is itself an independent violation, and it converts small problems into suspensions with dispiriting regularity. Then formal charges, a hearing before a panel, a recommendation, and review by the state's highest court, which holds the ultimate authority. Due process applies: In re Ruffalo, 390 U.S. 544 (1968) held that a lawyer facing disbarment is entitled to fair notice of the charges. And federal courts generally abstain from enjoining ongoing state bar disciplinary proceedings under Middlesex County Ethics Committee v. Garden State Bar Ass'n, 457 U.S. 423 (1982).

Sanctions, roughly ascending: private admonition or reprimand; public reprimand or censure; probation with conditions (often supervision, audits, or a lawyer-assistance program); suspension (fixed term, sometimes with reinstatement proceedings); disbarment. Restitution, costs, and mandatory education are commonly added. Reciprocal discipline means an order in one jurisdiction typically produces a parallel order in every other jurisdiction where you are admitted, and in the federal courts where you are admitted, often on an abbreviated record.

Model Rule 8.4 defines misconduct, and its reach is wider than people expect: violating the rules, or knowingly assisting or inducing another to do so, or doing so through the acts of another; criminal acts reflecting adversely on honesty, trustworthiness, or fitness; conduct involving dishonesty, fraud, deceit, or misrepresentation (this catch-all does enormous work, and it reaches conduct wholly outside the practice of law); conduct prejudicial to the administration of justice; and stating or implying an ability to influence a government official improperly. Rule 8.4(g), added in 2016, makes it misconduct to engage in harassment or discrimination related to the practice of law — it has been adopted in a minority of jurisdictions, adopted in modified form in others, and rejected or enjoined elsewhere on First Amendment grounds (a federal district court enjoined Pennsylvania's version in Greenberg v. Haggerty (E.D. Pa. 2020)). Check your jurisdiction.

Model Rule 8.3 — the reporting rule — requires a lawyer who knows that another lawyer has committed a violation raising a substantial question as to that lawyer's honesty, trustworthiness, or fitness to inform the appropriate authority. Information protected by Rule 1.6 is exempt. The states vary sharply: the duty is mandatory in most, and California only adopted a (narrower) Rule 8.3 effective August 1, 2023.

The most useful thing to know about the discipline system: self-report and cooperate early where your rules require or permit it, and get your own ethics counsel. A lawyer representing herself before bar counsel is the proverbial fool with a fool for a client.

Worked example: Tallowood & Reyes builds the infrastructure

Pull the running example together into one concrete sequence, because the pillars are easier to understand as a build order than as a list.

The situation. Tallowood & Reyes LLP is fourteen lawyers across two offices in two states — call them State A (the home office, where both name partners are admitted) and State B (a four-lawyer satellite opened when a large client relocated). The firm has a contract-attorney bench, an outsourced IT provider, an offshore document-review vendor, and a generative-AI research tool that three associates started using on their own initiative. Revenue is good. There is no ethics manual, no conflicts database, one bookkeeper, and no succession plan. In the last eighteen months the firm has absorbed one malpractice claim (the coffee-meeting founder from Pillar 2) and one near-miss counterfeit-check wire (Pillar 5).

Step 1 — Establish which rules actually bind them. The very first work product is not a policy. It is a two-column table: State A's rule text alongside State B's, for every rule the firm touches. The partners assumed the two states were "basically the same because they both follow the ABA." They are not. State A permits lateral screening under its version of Rule 1.10 without former-client consent; State B does not, which means a single lateral hire could disqualify the entire firm from a live matter. That divergence alone justifies the exercise. (See Pillar 1. Nothing here is a national rule; the ABA Model Rules bind no one until a state's highest court adopts them, and this toolkit's rule numbers are the model's, not necessarily yours.)

Step 2 — Close the intake hole. Every substantive contact now generates one of three documents: an engagement letter, a non-engagement letter, or a logged decline memo. The engagement-letter template names the client entity and expressly excludes affiliates, officers, and members; states the scope and its exclusions ("trial only; not engaged for appeal"); states the fee basis; and addresses file retention. The prospective-client intake script is deliberately narrow, so the firm learns enough to run a conflicts check and not enough to disqualify itself under Rule 1.18.

Step 3 — Build the conflicts system before the next matter opens. A searchable database captures clients, adverse parties, related parties, corporate affiliates, and prospective clients, with aliases. No file number issues without a documented check. The check reruns when a new party appears. Every hit gets a written resolution, and every waiver is informed consent confirmed in writing — checked against both states' consent standards.

Step 4 — Fix the money. The firm relabels its "nonrefundable retainers" as advance fees, deposits them to trust, and moves them to operating only against an issued invoice. The bookkeeper begins a monthly three-way reconciliation (bank statement, trust ledger, individual client ledgers), and a partner — not the bookkeeper — signs off. Debit-card access is removed. Overdraft notification is enabled. Disbursement against uncollected deposits is prohibited in writing, which is the single control that would have caught the counterfeit-check wire.

Step 5 — Govern the technology. The IT provider signs a confidentiality and breach-notification agreement (Rule 5.3). Personal consumer cloud sync is disabled. The AI tool is evaluated against its terms of service; the firm moves to a zero-retention, no-training configuration, publishes a written AI policy with an approved-tool list, and adopts an absolute rule: every citation and every factual assertion produced by an AI tool is verified in a primary source by a human before it leaves the building.

Step 6 — Make the exits work. Docketing goes redundant with a single authoritative calendar. The malpractice policy is re-read for its retroactive date and its tail pricing. A written succession plan names a successor lawyer in each state, keeps trust-account signatories redundant across offices, maintains a current client-and-deadline list, and is reviewed each January with the insurance renewal.

What it cost, and what it bought. The build took a year of partner attention and a modest software spend. What it bought is not virtue — it is the elimination of the four failure modes that actually end careers: money that was not theirs, a client who was never told, a conflict nobody searched for, and a filing nobody read.

The landscape as a working checklist

Use this as a gated audit of your practice. Every "no" is a project.

Regulatory foundation

  • [ ] We have the current text of the rules of professional conduct for every jurisdiction in which any of our lawyers practices, and we track amendments.
  • [ ] We know which lawyers are admitted where, and their good-standing status is current.
  • [ ] We have identified any specialized regime that applies (SEC Part 205, USPTO, EOIR, agency practice rules).
  • [ ] Someone in the firm is designated as ethics counsel, with authority and a budget.

Intake and engagement

  • [ ] Every substantive contact produces an engagement letter, a non-engagement letter, or a logged decline.
  • [ ] Engagement letters name the client precisely, define the scope and its exclusions, state the fee basis, and address file retention.
  • [ ] Prospective-client intake is scripted to avoid learning more than necessary (Rule 1.18).
  • [ ] Entity representations use Upjohn warnings when interviewing constituents.

Conflicts

  • [ ] A searchable conflicts database captures clients, adverse parties, related parties, affiliates, and prospective clients.
  • [ ] No matter opens without a documented check; the check reruns when new parties appear.
  • [ ] Lateral hires are screened per our state's imputation rule, not the ABA's.
  • [ ] Every waiver is informed consent confirmed in writing, and non-consentable conflicts are declined.

Fees and trust

  • [ ] Contingent-fee agreements are signed, state the calculation method, and address costs.
  • [ ] "Nonrefundable" does not appear anywhere in our fee agreements.
  • [ ] Advance fees and cost deposits are deposited to trust and moved only when earned/incurred, with an invoice.
  • [ ] Three-way trust reconciliation is performed monthly and reviewed by a lawyer, not only the bookkeeper.
  • [ ] No debit card, no cash, no disbursement against uncollected funds; overdraft notification is enabled.

Confidentiality, security, and AI

  • [ ] Written information-security policy; encryption at rest and in transit; MFA everywhere.
  • [ ] Vendor agreements (cloud, e-discovery, IT, AI) impose confidentiality and breach-notification duties (Rule 5.3).
  • [ ] An incident-response plan addresses both statutory breach notification and the Rule 1.6 duty to notify affected clients.
  • [ ] A written AI policy: approved tools, no confidential inputs to training-enabled tools without informed consent, mandatory human verification of every citation and fact, no billing for time not spent.

Client relations and litigation conduct

  • [ ] A firm-wide response-time standard and a status-update cadence.
  • [ ] Every settlement offer is conveyed and the decision documented.
  • [ ] Adverse controlling authority is disclosed; ex parte applications disclose unfavorable material facts.
  • [ ] No contact with represented persons without consent — and we have checked our state's entity-employee rule.

Supervision, UPL, and business development

  • [ ] Every delegated task has a named supervising lawyer and a review step.
  • [ ] Remote-working lawyers have been cleared against the host state's UPL rule.
  • [ ] Advertising is reviewed against Rules 7.1–7.3 and the FTC Act; results and testimonials carry required disclaimers.

Risk, exit, and continuity

  • [ ] Redundant docketing; a single authoritative calendar.
  • [ ] Claims-made malpractice coverage in force; retro date understood; tail priced.
  • [ ] Withdrawal protocol: court permission, notice, file return, refund of unearned fees.
  • [ ] Written succession plan: named successor, trust-account access, client list, notice templates, reviewed annually.

Primary Authority

Rules of professional conduct (model — your jurisdiction's adopted rules control)

  • ABA Model Rules of Professional Conduct: Rule 1.0 (terminology, including "informed consent" and "screened"); 1.1 and cmt. 8 (competence; technological competence); 1.2 (scope and allocation of authority); 1.3 and cmt. 5 (diligence; succession planning); 1.4 (communication); 1.5 (fees); 1.6 (confidentiality; 1.6(c) security); 1.7, 1.8, 1.9, 1.10, 1.11, 1.18 (conflicts, imputation, prospective clients); 1.13 (organization as client); 1.15 (safekeeping property); 1.16 (declining or terminating representation); 1.17 (sale of a law practice); 3.1, 3.3, 3.4 (meritorious claims; candor; fairness); 4.2, 4.3, 4.4 (represented and unrepresented persons; inadvertent disclosures); 5.1, 5.2, 5.3, 5.4, 5.5 (supervision; subordinate lawyers; nonlawyer assistance; professional independence; unauthorized and multijurisdictional practice); 7.1, 7.2, 7.3 (communications about services; advertising; solicitation); 8.1, 8.3, 8.4 (bar admission and disciplinary matters; reporting misconduct; misconduct).
  • Accuracy note: the Model Rules bind no lawyer. Each state's adopted rules control and differ — California's rules, though renumbered in 2018, remain structurally and substantively distinct (see, e.g., Cal. Bus. & Prof. Code § 6068(e) on confidentiality; California's Rule 8.3, effective 1 August 2023). Screening rules under 1.10, the confidentiality exceptions under 1.6, the scope of Rule 4.2 in the entity context, advertising regulation, and the adoption of Rule 8.4(g) all vary materially. Verify your jurisdiction's current text and ethics opinions.

Federal rules and statutes

Cases

Secondary Sources

  • Restatement (Third) of the Law Governing Lawyers (Am. Law Inst. 2000) — the authoritative synthesis of the civil law of lawyering: formation of the relationship, confidentiality, conflicts, fees, malpractice, and fee forfeiture. Persuasive, not binding.
  • ABA Formal Ethics Opinions — persuasive only, but the best available thinking on new problems: Op. 477R (2017, securing client communications); Op. 480 (2018, public commentary and blogging); Op. 483 (2018, obligations after a data breach); Op. 492 (2020, prospective clients); Op. 495 (2020, remote practice from a jurisdiction where not licensed); Op. 498 (2021, virtual practice); Op. 512 (2024, generative artificial intelligence tools).
  • ABA/BNA Lawyers' Manual on Professional Conduct; ABA Annotated Model Rules of Professional Conduct — rule-by-rule annotations with the state variations flagged.
  • ABA Standards for Imposing Lawyer Sanctions — the framework most disciplinary bodies use to select a sanction.
  • Your state bar's ethics opinions and ethics hotline. This is the single most underused resource in the profession, and in several states a good-faith call to the hotline is itself mitigating.

Related UpLaw Resources

Related Guides & Articles

Related Checklists

Related Toolkits

This toolkit is general legal information from UpLaw (uplaw.us), not legal advice, and does not create an attorney-client relationship. The ABA Model Rules of Professional Conduct are a model only; the rules that bind you are those adopted by your licensing jurisdiction, and they vary materially from state to state and change over time. Verify your own jurisdiction's current rules, comments, and ethics opinions — and consult qualified ethics counsel — before acting.