Informal Opinion Number: 2020-26
Adoption Date: 2020
Communication
Confidentiality of Information
Safekeeping Property
QUESTION: Attorney’s office laptop, cell phone, bar card, and credit cards were stolen out of Attorney’s locked vehicle. What do the Rules of Professional Conduct require Attorney to do?
ANSWER: If a stolen electronic device contains, or provides potential access to, information related to the representation of clients or former clients, Attorney must take all steps reasonably necessary to prevent unauthorized access to the information. See Rules 4 dash–1.6(c) and 4 dash–1.1. These steps may include, but may not be limited to, deactivating the cell phone; taking appropriate steps to secure Attorney’s law firm network and/or data in offsite storage; changing all passwords that may be stored on the electronic device; and consulting with a qualified information technology professional if appropriate. Attorney must communicate with affected clients to the extent reasonably necessary to allow each client to make informed decisions about the representation. Rule 4 dash–1.4; see Rule 4 dash–1.9(c) and Informal Opinion 2017 dash–02. Attorney must comply with any applicable law requiring notice to affected persons regarding disclosure of their personal information. See Preamble to Rule 4 at [5]. Attorney must take all necessary steps to protect the funds in the client trust account from unauthorized transfers and should monitor the trust account closely. See Rule 4 dash–1.15(a)(3) and Comment [2]. To address the stolen bar card, Attorney may contact the Office of Attorney Enrollment of the Supreme Court of Missouri. Attorney may also consider taking steps to protect the security of Attorney’s e-filing account with applicable courts and consulting Attorney’s malpractice insurance carrier for additional advice.
Request an Informal Opinion.
© Copyright 2026